CSV filetype not triggering incidents

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention

Issue/Introduction

The "message attachment of filetype match" detection condition is not triggering on "spreadsheet formats" file types when transferring a CSV files.

On investigation we have found that CSV files are being triggered as ASCII text

 

Environment

 

Component: Data Loss Prevention Endpoint Prevent 

Cause

For CSV file (comma separated file), for the beginning part of file content, DLP will check whether it uses commas to separate the fields. If it uses | pipeline or ; semicolon, the file will be detected as ASCII text instead of CSV.

Resolution

For CSV file (comma separated file), must contain commas to separate data.