This filter is a binary one. If the file going through the policy is encrypted the action is triggered.