Do Data Identifiers (DI) look at any kind of proximity of the validating keywords to a possible match?
book
Article ID: 160429
calendar_today
Updated On:
Products
Data Loss Prevention Endpoint PreventData Loss Prevention Network MonitorData Loss Prevention Network Prevent for EmailData Loss Prevention Network Prevent for WebData Loss Prevention Network ProtectData Loss Prevention Endpoint Discover
Issue/Introduction
Does Symantec DLP perform detection based on keyword proximity to a pattern?
Resolution
No. Symantec DLP does not perform a proximity check in the default DIs (in other words, data that appears within close proximity of each other, or a specified vicinity of a set number of words).
The keyword validator has to be within the same document / component (i.e., header, body, attachment). For example: The DDI will not trigger on a keyword in the subject line (part of header) when the specified keyword is in the body of an email.