Cisco Cisco Email Security Appliance C190 Guía Del Usuario
18-18
Cisco AsyncOS 9.5 for Email User Guide
Chapter 18 Data Loss Prevention
DLP Policies for RSA Email DLP
Procedure
Step 1
Select Mail Policies > DLP Policy Manager.
Step 2
Click the link for the Custom DLP Dictionaries section under Advanced Settings.
Step 3
Click Export Dictionary.
Step 4
Select a dictionary to export.
Step 5
Enter a file name for the dictionary.
Step 6
Choose where to save the exported dictionary, either on your local computer or in the configuration
directory on the appliance.
directory on the appliance.
Step 7
Select an encoding for the file.
Step 8
Click Submit and save the file.
Importing DLP Dictionaries
Before You Begin
If you will import a file that you exported from a non-DLP dictionary on an Email Security appliance,
you must first strip the weight values from the text file and convert any regular expressions to words or
phrases.
you must first strip the weight values from the text file and convert any regular expressions to words or
phrases.
Procedure
Step 1
Select Mail Policies > DLP Policy Manager.
Step 2
In the Advanced Settings section, click the link beside Custom DLP Dictionaries.
Step 3
Click Import Dictionary.
Step 4
Select a file to import from either your local machine or the configuration directory on the appliance.
Step 5
Select an encoding.
Step 6
Click Next.
A “Success” message appears and the imported dictionary is displayed in the Add Dictionary page.
However, the process is not yet complete.
However, the process is not yet complete.
Step 7
Name and edit the dictionary.
Step 8
Click Submit.
Determiners of the Risk Factor of a Suspected Violation
When the appliance scans a message for DLP violations, it assigns a risk factor score to the message.
This score indicates the likelihood that the message contains a DLP violation. A score of 0 means the
message almost certainly does not contain a violation. A score of 100 means it almost certainly does
contain a violation.
This score indicates the likelihood that the message contains a DLP violation. A score of 0 means the
message almost certainly does not contain a violation. A score of 100 means it almost certainly does
contain a violation.