Data Loss Prevention

 View Only
Back to discussions
Expand all | Collapse all

EV 11 and DCS 12.5 - Data Identifier - Credit Card Number

  • 1.  EV 11 and DCS 12.5 - Data Identifier - Credit Card Number

    Posted Nov 09, 2015 09:11 PM

    Hello,

    I set up EV 11 with DCS (DLP 12.5) about 1 year ago.

    I was doing some testing yesterday to ensure that the policy was working as expected.

    When I entered a real credit card number with spaces in it, the policy did not fire during an archiving run.

    I went to http://www.getcreditcardnumbers.com/ and generated fake credit card numbers. When I kicked off an archiving run with these numbers the policy fired.

    I went back to the original number and removed the spaces. This time when I kicked off an archiving run the policy fired.

    I have the policy set to "Breadth: Wide" so it should be very strict.

    Any idea as to the inconsistent application of the policy?

    Note: This is part of a PCI compliance project and the customer cannot have PCI data in their archive.

    Kind regards,

    Cameron



  • 2.  RE: EV 11 and DCS 12.5 - Data Identifier - Credit Card Number

    Trusted Advisor
    Posted Nov 10, 2015 02:38 AM

    hello,

     does your fake credit card number also get spaces between digits ?

    where are the spaces ? is it 4 groups of 4 digit with a space between them (this pattern should be covered by CCN data identifier) ? if it is other grops of  digits, could you give us an example as it means you will need to add a new pattern to the data identifier.

     regards