Limitations of DLP in Detecting Sensitive Data in Filenames

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

DLP cannot detect sensitive data, such as credit card numbers, Aadhaar card details, or specific keywords covered by the DLP policy, if present in the file name

Environment

DLP Release: 15.x, 16.x

Resolution

DLP scans the content within the file and its metadata (if metadata detection is enabled). However, DLP does not conduct detection on the file name.

While DLP includes a file name policy rule meant to identify specific file names, it does not extend its detection capabilities to cover other policy rules (such as DI, Keyword, etc.) on file names.