Руководство Пользователя для Cisco Cisco Email Security Appliance C170
11-24
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 11 Data Loss Prevention
Example:
•
Joe Smith, Class Rank: 234, Major: Chemistry Transcript
(Match)
Corporate Financials
The predefined Sarbanes-Oxley (SOX) policy template uses the Corporate Financials classifier to search
for non-public corporate financial information.
for non-public corporate financial information.
Examples:
2009 Cisco net sales, net income, depreciation
(Match)
FORM 10-Q 2009 I.R.S. Employer Identification No.
(Match)
Regular Expressions for Content Matching Classifiers
A number of policy templates require customization of one or more classifiers, which involves creating
a regular expression to search for identification numbers that may be linked to confidential information,
such as a custom account number or patient identification number. The style of regular expressions used
for content matching classifiers is the POSIX Basic Regular Expression style regular expressions.
a regular expression to search for identification numbers that may be linked to confidential information,
such as a custom account number or patient identification number. The style of regular expressions used
for content matching classifiers is the POSIX Basic Regular Expression style regular expressions.
Use the following table as a guide for creating regular expressions for classifiers:
Table 11-2
Regular Expression in Classifiers
Regular expression (
abc
)
Regular expressions for classifiers match a string if the sequence of
directives in the regular expression match any part of the string.
directives in the regular expression match any part of the string.
For example, the regular expression
ACC
matches the string
ACCOUNT
as well as
ACCT
.
[ ]
Use brackets to indicate a set of characters. Characters can defined
individually or within a range.
individually or within a range.
For example,
[a-z]
matches all lowercase letters from
a
to
z
, while
[a-zA-Z]
matches all uppercase and lowercase letters from
A
to
Z
.
[xyz]
matches only the letters
x
,
y
, or
z
.
Backslash special characters (
\
)
The backslash character escapes special characters. Thus the
sequence
sequence
\.
only matches a literal period, the sequence
\$
only
matches a literal dollar sign, and the sequence
\^
only matches a
literal caret symbol.
The backslash character also begins tokens, such as
\d
.
Important Note: The backslash is also a special escape character for
the parser. As a result, if you want to include a backslash in your
regular expression, you must use two backslashes — so that after
parsing, only one “real” backslash remains, which is then passed to
the regular expression system.
the parser. As a result, if you want to include a backslash in your
regular expression, you must use two backslashes — so that after
parsing, only one “real” backslash remains, which is then passed to
the regular expression system.
\d
Token that matches a digit (
0
-
9
). To match more than one digit, enter
an integer in
{}
to define the length of the number.
For example,
\d
matches only a single digit such as
5
, but not
55
.
Using
\d{2}
matches a number consisting of two digits, such as
55
,
but not
5
.