Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 652
Chapter 11      Data Loss Prevention
11-26
Cisco IronPort AsyncOS 7.5 for Email Configuration Guide
OL-25136-01
US Drivers License
Several DLP policy templates use the US Drivers License classifier. This 
classifier contains a separate set of detection rules for each US state and the 
District of Columbia. You can selectively enable or disable states that are not 
important for your organization’s policies by clicking the link for US Drivers 
Licenses under Advanced Settings in the DLP Policy Manager.
Note
A predefined DLP policy template for a specific state, such as California SB 1386, 
uses the detection rules for all states and will return a DLP violation for data with 
a non-California driver license because it is still considered a privacy violation.
The individual state classifiers match against the patterns for that state, and 
requires the corresponding state name or abbreviation, and additional supporting 
data.
Examples:
CA DL: C3452362
 (Match because it has the correct pattern for the number 
and supporting data)
California DL: C3452362
 (Match)
DL: C3452362
 (No match because there is not enough supporting data)
California C3452362
 (No match because there is not enough supporting 
data)
OR DL: C3452362
 (No match because it is the incorrect pattern for Oregon)
OR DL: 3452362
 (Match because it is the correct pattern for Oregon)
WV DL: D654321
 (Match because it is the correct pattern for West Virginia)
WV DL: G6543
 (No match because it is the incorrect pattern for West Virginia)
HIPAA Dictionaries
The predefined HIPAA policy template uses the HIPAA Dictionaries classifier to 
detect medical-related data. This classifier works with the Patient Identifiers 
classifier to detect personal information. The HIPAA DLP policy requires a match 
on this classifier along with a match on a personal information identifier, such as 
a US Social Security Number or US National Provider Identifier, to return a DLP 
violation.