Do Data Identifiers (DI) look at any kind of proximity of the validating keywords to a possible match?

Article Id: 160429

Status: Published

Updated On: 16-12-2013 18:08

Legacy Id: TECH221189

Products:

Data Loss Prevention Endpoint Prevent , Data Loss Prevention Network Monitor , Data Loss Prevention Network Prevent for Email , Data Loss Prevention Network Prevent for Web , Data Loss Prevention Network Protect , Data Loss Prevention Endpoint Discover

Issue/Introduction:

Does Symantec DLP perform detection based on keyword proximity to a pattern?

Resolution:

No.
Symantec DLP does not perform a proximity check in the default DIs (in other words, data that appears within close proximity of each other, or a specified vicinity of a set number of words).

The keyword validator has to be within the same document / component (i.e., header, body, attachment). For example: The DDI will not trigger on a keyword in the subject line (part of header) when the specified keyword is in the body of an email.