Cisco Cisco Web Security Appliance S670 User Guide

16-5

AsyncOS 9.1.1 for Cisco Web Security Appliances User Guide

Chapter 16 Prevent Loss of Sensitive Data

Creating Data Security and External DLP Policies

You can create Data Security and External DLP Policy groups based on combinations of several criteria,
such as one or more Identification Profiles or the URL category of the destination site. You must define
at least one criterion for policy group membership. When you define multiple criteria, the upload request
must meet all criteria to match the policy group. However, the upload request needs to match only one
of the configured Identification Profiles.

Step 1

Choose Web Security Manager > Cisco Data Security (for Defining Data Security Policy group
membership) or Web Security Manager > External Data Loss Prevention (for Defining External DLP
Policy group membership).

Step 2

Click Add Policy.

Step 3

In the Policy Name field, enter a name for the policy group, and in the Description field (optional) add
a description.

Note

Each policy group name must be unique and only contain alphanumeric characters or the
space character.

Step 4

In the Insert Above Policy field, choose where in the policies table to place the policy group.

When configuring multiple policy groups you must specify a logical order for each group. Order your
policy groups to ensure that correct matching occurs.

Step 5

In the Identities and Users section, choose one or more Identification Profile groups to apply to this
policy group.

Step 6

(Optional) Expand the Advanced section to define additional membership requirements.