Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
18-17
User Guide for AsyncOS 9.7 for Cisco Email Security Appliances
Chapter 18 Data Loss Prevention
DLP Policies for RSA Email DLP
•
An 8-digit number:
\d{8}
•
Identification code with hyphens between sets of numbers:
\d{3}-\d{4}-\d
•
Identification code that begins with a single letter that can be upper or lower case:
[a-zA-Z]\d{7}
•
Identification code that begins with three digits and is followed by nine uppercase letters:
\d{3}[A-Z]{9}
•
Using
|
to define two different number patterns to search for:
\d{3}[A-Z]{9}|\d{2}[A-Z]{9}-\d
Using Custom Dictionaries of Sensitive DLP Terms (Custom DLP Policies Only)
AsyncOS comes with a set of predefined dictionaries from RSA Security Inc., but you can also create
custom DLP dictionaries to specify terms for the DLP scanning feature to match.
custom DLP dictionaries to specify terms for the DLP scanning feature to match.
You can create a custom DLP dictionary in several ways:
•
•
•
from another Email Security appliance and then
.
Adding Custom DLP Dictionaries Directly
Procedure
Step 1
Select Mail Policies > DLP Policy Manager.
Step 2
In the Advanced Settings section, click the link beside Custom DLP Dictionaries.
Step 3
Click Add Dictionary.
Step 4
Enter a name for the custom dictionary.
Step 5
Enter new dictionary entries (words and phrases) into the list of terms.
Dictionary terms are case-sensitive and can contain non-ASCII characters.
When entering multiple entries, separate the entries with line breaks.
Step 6
Click Add.
Step 7
Submit and commit your changes.
Creating DLP Dictionaries as Text Files
You can create your own dictionary as a text file on your local machine and import it onto the appliance.
Use line breaks for each term in the dictionary text file. Dictionary terms are case-sensitive and can
contain non-ASCII characters.
Use line breaks for each term in the dictionary text file. Dictionary terms are case-sensitive and can
contain non-ASCII characters.
Exporting DLP Dictionaries
Note
Predefined DLP dictionaries cannot be exported.