Data Loss Prevention

Hi all,

We currently create a great deal of reporting around Symantec Cloud Data and it's DLP, Image Control data.

My question is, if we currently have RegEx rules set up for Credit Card info and the emails outbound are blocked. If an image of a Credit Card is sent Outbound, would the DLP rule pick it up or the Image Control?

Thanks in advance

Gareth

Hello,

What do you mean with image control data?

AFAIK currently there is no way of control if someone decides to take a print screen or snip of CC details and sent it out...

This "limitation" might be addressed in the next release 15.0 that has OCR integration.

Best,

Morgado

I think the only DLP solution with this OCR capability is GTB's DLP with OCR,  https://gttb.com/dlp-ocr-image-data-document/

Symantec DLP 15.0 (released on Labor Day) does have OCR which could pick things up. Its important to note that OCR is really just the start of the chain and isnt a detection method per se like the others. In this case OCR simply takes in the image and converts it to text. The resulting text is then run past every other detection type except form recognition. So in the DLP console you would see this as it hit you credit card rule.

Hi Gareth ,

Syamntec DLP has predefine data identifier and policy for credit card data detection which is combination of reg-ex and keyword with lunch check to detect valid credit card data. Addition to this the answetr of your Image Control question is possible with latest version of DLP V 15.0 with OCR detection functinality else have Websense DLP which has OCR long back.

Well said by John Gruhn. DLP 15.0 does have OCR. No matter which OCR vendor you use, it simply is an image to text conversion. Then like any other text, it would pass throught the set policies which might include regex(es) as per application.