Files that are uploaded to site do not get blocked by DLP Endpoint Agent


Article ID: 170298


Updated On:


Data Loss Prevention


DLP Endpoint Agent does not detect the files that are uploaded to the site which are converted from Microsoft Office file types to PDF.


This site "” converts the data into a random string. It’s impossible to detect the file name, the content, or file type due to the technology used by this site.


It's advisable to block this site if possible and recommend your users to use a licensed offline PDF converter if required.

Alternatively create a policy with the keyword rule to match keyword = smallpdf and protocol = HTTP, HTTPS/SSL with an Endpoint Response Rule to Block. 

This method may work for some upload attempts if the smallpdf is present in the header.