DLP examples
Blocking content with credit card numbers
When the objective is to block credit card numbers one of the important things to remember is that 2 filters will need to be used in the sensor.
In the default Credit-Card sensor, you will notice a few things.
• The Action is set to Log Only
• In the Files filter not all of the services are being examined.
If you wish to block as much content as possible with credit card numbers in it instead of just logging most the traffic that has it, the existing sensor will have to be edited.
Security Profile > Data Leak Prevention > Sensor.
Use the drop down menu to select Credit-Card.
1. Edit the first filter.
a. Change the Action to Block
b. Make sure all of the services are being examined.
c. Select OK
2. Repeat for the second filter
3. Select Apply
4. Edit the appropriate policies so that under Security Profiles, DLP is turned on and the Credit-Card sensor is selected.