Adding Or Configuring Dlp Rules - Fortinet FortiGate Series Administration Manual

DLP Rules

Adding or configuring DLP rules

596
All-Email, All-FTP,
All-HTTP, All-IM, All-NNTP,
All-Session-Control
Email-AmEx,
Email-Canada-SIN,
Email-US-SSN,
Email-Visa-Mastercard
HTTP-AmEx,
HTTP-Canada-SIN,
HTTP-US-SSN,
HTTP-Visa-Mastercard
Email-Not-Webex,
HTTP-Post-Not-Webex
Large-Attachment
Large-FTP-Put
Large-HTTP-Post
Go to UTM > Data Leak Prevention > Rule. To add a new rule, select Create New. To edit
an existing rule, select the edit icon of the rule to be changed.
Figure 368: DLP rule for HTTP traffic
Name
Comments
.These rules will detect all traffic of the specified type.
These four rules detect American Express numbers, Canadian Social
Insurance Numbers, U.S. Social Security Numbers, or Visa and
Mastercard numbers within the message bodies of SMTP, POP3, and
IMAP email traffic.
These four rules detect American Express numbers, Canadian Social
Insurance Numbers, U.S. Social Security Numbers, or Visa and
Mastercard numbers within POST command in HTTP traffic. The
HTTP POST is used to send information to a web server.
As written, these rules are designed to detect data the user is sending
to web servers. This rule does not detect the data retrieved with the
HTTP GET command, which is used to retrieve load web pages.
These rules prevent DLP from matching email or HTTP pages that
contain the string WebEx.
This rule detects files larger than 5MB attached to SMTP, POP3, and
IMAP email messages.
This rule detects files larger than 5MB sent using the FTP PUT
protocol. Files received using FTP GET are not examined.
This rule detects files larger than 5MB sent using the HTTP POST
protocol. Files received using HTTP GET are not examined.
The name of the rule.
An optional comment describing the rule.
FortiGate Version 4.0 MR1 Administration Guide
Data Leak Prevention
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback