How to detect PGP encrypted attachments

Products

• Data Loss Prevention Enforce

Issue/Introduction

Only PGP encrypted emails are getting detected, not attachments. How to set up policy to detect pgp encrypted attachments.

Resolution

Relevant versions:  7.x and up

PGP v.7

Vontu includes a ready-made policy template for PGP v.7 encrypted data.  To set up this policy:

1. Within the UI, click on Policies -> Add Policy -> Add a Policy from Template. Click Next.
2. Under the section Confidential or Classified Data Protection, select Encrypted Data and click Next.
3. Select a name for your policy, fill in the description field, and associate this policy with a Policy Group.
4. Make any modifications as needed. 
5. Add Exceptions or Response Rules as needed. 
6. Click Save.

PGP v.8

Vontu does not recognize a PGP v.8 attachment by signature, but can recognize it by extension. To set up a policy to accomplish this, follow these steps:

1. Within the UI, click on Policies -> Add Policy -> Add a Blank Policy. Click Next.
2. Select a name for your policy, fill in the description field, and associate this policy with a Policy Group.
3. Click Add Rule.
4. Under the Section File Properties, select "Message Attachment or File Name Match". Click Next.
5. Under Conditions, enter in the File Name field " *.pgp,*.aex "
6. Enter a rule name, and click OK.