Data Loss Prevention

 View Only

  • 1.  v14.6 mp2 custom data identifiers issue

    Posted Dec 16, 2018 11:14 PM

    i have custom data identifiers as a REGEX (about 85 different ones).

    i have a test file which will make the regex for 5 different syntax 5 times each, but only one synatx will register 1 time, it doesnt match the duplicates.

     

    has anyone else had this issue? what am i missing?



  • 2.  RE: v14.6 mp2 custom data identifiers issue

    Trusted Advisor
    Posted Dec 18, 2018 06:04 PM

    Please post the cstom DI.. so we can troubleshoot it. 

    If you have any type of logic in the REGEX, take it out. The DI is best used by listing each possible REGEX match (Without any OR's etc)

     

    Good Luck

    Ronak

    PLEASE MARKED SOLVED WHEN POSSIBLE



  • 3.  RE: v14.6 mp2 custom data identifiers issue

    Posted Feb 05, 2019 06:02 AM

    Hi,

     

    Perhaps my article could guide you down a more simplistic route for identifying MP2 files?

     

    https://www.symantec.com/connect/articles/data-loss-prevention-dlp-create-custom-file-type-signature-0

     

    Hope this helps,