Do Data Identifiers (DI) look at any kind of proximity of the validating keywords to a possible match?

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Prevent for Web
• Data Loss Prevention Network Protect
• Data Loss Prevention Endpoint Discover

Issue/Introduction

Does Symantec DLP perform detection based on keyword proximity to a pattern?

 

Resolution

No.
Symantec DLP does not perform a proximity check in the default DIs (in other words, data that appears within close proximity of each other, or a specified vicinity of a set number of words).  

The keyword validator has to be within the same document / component (i.e., header, body, attachment). For example:  The DDI will not trigger on a keyword in the subject line (part of header) when the specified keyword is in the body of an email.