Cisco Cisco Email Security Appliance C160 Mode D'Emploi
11-22
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 11 Data Loss Prevention
Classifier Examples
The following examples show how classifiers match message content.
Credit Card Number
Several DLP policy templates include the Credit Card Number classifier. The credit card number itself
is subject to various constraints, such as the pattern of digits and punctuation, the issuer-specific prefix,
and the final check digit. The classifier requires additional supporting information to make a match, such
as a second credit card number, an expiration date, or the name of the card issuer. This reduces the
number of false positives.
is subject to various constraints, such as the pattern of digits and punctuation, the issuer-specific prefix,
and the final check digit. The classifier requires additional supporting information to make a match, such
as a second credit card number, an expiration date, or the name of the card issuer. This reduces the
number of false positives.
Examples:
•
4999-9999-9999-9996
(No match because of no supporting information)
•
4999-9999-9999-9996 01/09
(Match)
•
Visa 4999-9999-9999-9996
(Match)
•
4999-9999-9999-9996 4899 9999 9999 9997
(Match because of more than one credit card number)
US Social Security Number
The US Social Security Number classifier requires a properly formatted number as well as supporting
data, such as a date of birth, name, or the string
data, such as a date of birth, name, or the string
SSN
.
Examples:
•
321-02-3456
(No match because of no supporting information)
•
321-02-3456 July 4
(Match)
•
321-02-3456 7/4/1980
(Match)
•
321-02-3456 7/4
(No match)
•
321-02-3456 321-02-7654
(Match because of more than one SSN)
•
SSN: 321-02-3456
(Match)
•
Joe Smith 321-02-3456
(Match)
•
321-02-3456 CA 94066
(Match)
30
30
50
40
100
50
150
60
300
70
500
80
1000
90
10000
100
Table 11-1
Logarithmic Scale for Calculating the Risk Factor
Rule Scores
Risk Factor