Exclude all users from a specific domain, from one policy in Network Prevent for Web based incidents

Products

• Data Loss Prevention

Issue/Introduction

The need is to have all members of a domain be able to upload data/attachments to EXAMPLE.com, without allowing other domains access.

Environment

DLP 16.0MP1

Cause

For certain proxies, the sender patterns are not standard domain\username format as required by Profile DGM.

Resolution

For a given user name, NTLM://<domain>/<userID>, create a sender pattern where the userID field is replaced by a wildcard.

Example:

Sender pattern = NTLM://domain/*