File name exception not working for zip file

Products

• Data Loss Prevention Core Package

Issue/Introduction

If you have configured a file name exception in your policy and a zip file with the same name is sent, You will find that the files within the zip archive may still trigger incidents despite the exception.

Environment

Release: 15.8, 16.0

Cause

The files inside the zip are treated independently during policy detection, and the exception is not extended to them. if any of the files inside the zip archive match the DLP policies, incidents will be triggered despite the zip file being in the exception list.

Resolution

To avoid incidents triggered by files within zip archives, you must create dedicated policy exceptions targeting the files within the zipped content.