Cisco Cisco Email Security Appliance C160 Guía Del Usuario
18-12
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 18 Data Loss Prevention
DLP Policies for RSA Email DLP
Content Matching Classifier Examples
The following examples show how classifiers match message content:
•
•
•
•
•
•
•
Credit Card Number
Several DLP policy templates include the Credit Card Number classifier. The credit card number itself
is subject to various constraints, such as the pattern of digits and punctuation, the issuer-specific prefix,
and the final check digit. The classifier requires additional supporting information to make a match, such
as a second credit card number, an expiration date, or the name of the card issuer. This reduces the
number of false positives.
is subject to various constraints, such as the pattern of digits and punctuation, the issuer-specific prefix,
and the final check digit. The classifier requires additional supporting information to make a match, such
as a second credit card number, an expiration date, or the name of the card issuer. This reduces the
number of false positives.
Examples:
•
4999-9999-9999-9996
(No match because of no supporting information)
•
4999-9999-9999-9996 01/09
(Match)
•
Visa 4999-9999-9999-9996
(Match)
•
4999-9999-9999-9996 4899 9999 9999 9997
(Match because of more than one credit card number)
US Social Security Number
The US Social Security Number classifier requires a properly formatted number as well as supporting
data, such as a date of birth, name, or the string
data, such as a date of birth, name, or the string
SSN
.
Examples:
•
321-02-3456
(No match because of no supporting information)
•
321-02-3456 July 4
(Match)
•
321-02-3456 7/4/1980
(Match)
•
321-02-3456 7/4
(No match)
•
321-02-3456 321-02-7654
(Match because of more than one SSN)
•
SSN: 321-02-3456
(Match)
•
Joe Smith 321-02-3456
(Match)
•
321-02-3456 CA 94066
(Match)
ABA Routing Number
The ABA Routing Number classifier is similar to the Credit Card Number classifier.
Examples:
•
119999992
(No match because of no supporting information)