Data Loss Prevention

 View Only
  • 1.  DLP Exception document

    Posted Mar 21, 2017 08:14 AM

    i have create IDM prfile on some documents and place in policy. i have question regarding exception. it is possible we can put an excpetion on document...not on policy...

    For e.g :-  

    Document is uplaoded on  DLP console through IDM profileing and i have placed on policy. so can we put any exception or response rule on particular document.



  • 2.  RE: DLP Exception document

    Broadcom Employee
    Posted Mar 21, 2017 08:22 AM

    i dont quite get it, if it has to be exception, should we not remove the document from profiling & indexing?



  • 3.  RE: DLP Exception document

    Trusted Advisor
    Posted Mar 21, 2017 08:53 AM

    hello,

     An exception is only defined in DLP policies but you can:

    - define it to be applied on global message or only on matched component....so first kind of exeption will fully bypass a message if it positively matched on any part of your email....second kind of exception will bypass only part of the email which match the exception (so if you have 3 attchments and one matched the exception, only this one will be excluded)

     

     regards



  • 4.  RE: DLP Exception document

    Posted Mar 22, 2017 01:48 AM

    I am attaching snap shot of policy so it would be understand to easily whole scenerio. 



  • 5.  RE: DLP Exception document

    Posted Mar 22, 2017 02:20 AM
      |   view attached

    i am attaching snaps shot. can i put exception on particular document For.eg Position blotter is a document so may this document will be on excpetion or can we put on response rule.

    particular User can send this document Position blotter which is mentioned in policy.



  • 6.  RE: DLP Exception document

    Trusted Advisor
    Posted Mar 22, 2017 02:43 AM

    hello,

     if you exception is just for this document and not for the other, you can add a compoudn exception (this document + this sender), or you can split your policy in two different policies (one with document where you have an exception (in group tab you will add an exception based on sender) and one where you have only document without exception).

     

     Regards



  • 7.  RE: DLP Exception document

    Posted Mar 30, 2017 06:10 AM

    Hello,

    If it was me I would go with the following solutions:

    • Using remote indexer tool I can whitelist specific docs based on keyword pattern or a txt containing file names (at document level - indexing).
    • Pre configure the policy to exlclude from the detection an "unique keyword" that is injected inside the docs that must be ignored.

    BR,

    Morgado