Cisco Cisco Email Security Appliance C170 Guia Do Utilizador
15-11
Cisco AsyncOS 8.0.1 for Email User Guide
Chapter 15 Data Loss Prevention
DLP Policies for RSA Email DLP
About Using Content Matching Classifiers in DLP Policies
Many of the predefined DLP policy templates include content matching classifiers from RSA. Some of
these classifiers require customization in order to identify the patterns that are used for data in your
organization.
these classifiers require customization in order to identify the patterns that are used for data in your
organization.
If you create a custom DLP policy, you can choose a predefined classifier or create one of your own.
Content Matching Classifier Examples
The following examples show how classifiers match message content.
Credit Card Number
Several DLP policy templates include the Credit Card Number classifier. The credit card number itself
is subject to various constraints, such as the pattern of digits and punctuation, the issuer-specific prefix,
and the final check digit. The classifier requires additional supporting information to make a match, such
as a second credit card number, an expiration date, or the name of the card issuer. This reduces the
number of false positives.
is subject to various constraints, such as the pattern of digits and punctuation, the issuer-specific prefix,
and the final check digit. The classifier requires additional supporting information to make a match, such
as a second credit card number, an expiration date, or the name of the card issuer. This reduces the
number of false positives.
Examples:
•
4999-9999-9999-9996
(No match because of no supporting information)
•
4999-9999-9999-9996 01/09
(Match)
•
Visa 4999-9999-9999-9996
(Match)
•
4999-9999-9999-9996 4899 9999 9999 9997
(Match because of more than one credit card number)
US Social Security Number
The US Social Security Number classifier requires a properly formatted number as well as supporting
data, such as a date of birth, name, or the string
data, such as a date of birth, name, or the string
SSN
.
Examples:
•
321-02-3456
(No match because of no supporting information)
•
321-02-3456 July 4
(Match)
•
321-02-3456 7/4/1980
(Match)
•
321-02-3456 7/4
(No match)
•
321-02-3456 321-02-7654
(Match because of more than one SSN)
•
SSN: 321-02-3456
(Match)
•
Joe Smith 321-02-3456
(Match)
•
321-02-3456 CA 94066
(Match)
ABA Routing Number
The ABA Routing Number classifier is similar to the Credit Card Number classifier.
Examples:
•
119999992
(No match because of no supporting information)
•
routing 119999992 account 1234567
(Match)