HTTP put messages are not detecting (On-Prem Detection or Cloud Detection Services)

Products

• Data Loss Prevention Core Package

Issue/Introduction

HTTP put messages are not being detected by DLP on prem or cloud 

Environment

WSS > CDS > Enforce server 

On Prem 

ProxySG >Detection Server > EnforceServer

Cause

DLP will ignore message that are being posted to the root of the web server. 

for example doing an HTTP post to https://192.168.1.x/ will be ignored

 

Resolution

by DLP but doing an HTTP post to Https://192.168.1.x/subfolder1/file.txt

will trigger a scan and generate an incident if a policy is violated. 

Additional Information

This is considered as working as designed.