Keyword proximity matching in a policy is not working properly

Products

• Data Loss Prevention Enforce

Issue/Introduction

Proximity matching is detecting incidents even if words are greater than the defined word distance from each other when the same words are used in both list.

 

Cause

If a pair of expression lists contain the same keywords as shown in figure 1 below, there will always be a match. "Cat" will always be less than 5 words distant from "cat" for example.

figure 1

 

 

Resolution

Create separate keyword pairs as show below in figure 2.

 

figure 2