DLP cloud Service for web does not capture 'file names' in the incident snapshot when file with sensitive data is uploaded to "Office.com"
search cancel

DLP cloud Service for web does not capture 'file names' in the incident snapshot when file with sensitive data is uploaded to "Office.com"

book

Article ID: 254394

calendar_today

Updated On:

Products

Data Loss Prevention Cloud Detection Service for ICAP

Issue/Introduction

When customer uploads sensitive file to "Office.com" website, in Web CDS incident snapshot, attachment filename is incorrect.

Environment

Data Loss Prevention Cloud Detection Service for ICAP

Cause

File uploads to websites like "Office.com" are completed in chunks. Symantec DLP cannot seamlessly process file contents that are split across multiple HTTP messages. Hence, you will see incidents with different filename than uploaded file in attachment. 

Resolution

This is a product enhancement currently under review and will be addressed in future release of DLP. This enhancement is to reassemble chunked file and perform detection on entire file.