Do Data Identifiers (DI) look at any kind of proximity of the validating keywords to a possible match?

book

Article ID: 160429

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent Data Loss Prevention Network Monitor Data Loss Prevention Network Prevent for Email Data Loss Prevention Network Prevent for Web Data Loss Prevention Network Protect Data Loss Prevention Endpoint Discover

Issue/Introduction

Does Symantec DLP perform detection based on keyword proximity to a pattern?

 

Resolution

No.
Symantec DLP does not perform a proximity check in the default DIs (in other words, data that appears within close proximity of each other, or a specified vicinity of a set number of words).  

The keyword validator has to be within the same document / component (i.e., header, body, attachment). For example:  The DDI will not trigger on a keyword in the subject line (part of header) when the specified keyword is in the body of an email.