When we send a file to the DLP server through the ICAP interface an rtf type file does not detect sensitive data in the file when using reqmod.
The sensitive data is detected when using respmod.
Release : Data Loss Prevention 15.7.x
Release: Data Loss Prevention 15.8.x
The root item comes down to the way DLP handles a file when its received.
By default DLP Network Monitor and Web prevent support multipart/form-data method for attachments.
For any different method we need to modify the NonMultipartAttachment.config file.
In order to detect the file we need to update NonMultipartAttachment.config file as below.