config security waf dlp-sensors
Use this command to configure a DLP Sensor object to use in a DLP Policy. A DLP Sensor defines which dictionaries to check. You can match any dictionary or all dictionaries. It can also count the number of dictionary matches to trigger the sensor.
Before you begin:
- You must have a valid FortiGuard DLP service license and have enabled the service on FortiADC.
- Configure a DLP Dictionary object. For details, see config security waf dlp-dictionary.
Syntax
config security waf dlp-sensors
edit <name>
set match-type {any|all}
set description <string>
config entries
edit <name>
set status {enable|disable}
set dlp-dictionary <datasource>
set count <integer>
next
end
next
end
|
match-type |
Select the match type:
|
|
description |
Comments about this DLP Sensor object. |
|
config entries |
|
|
status |
Enable the Status if you intend to apply this sensor. |
|
dlp-dictionary |
Specify a DLP Dictionary object. |
|
count |
Specify the occurrence threshold for the dictionary match. The sensor will be triggered when the dictionary match reaches the specified number of times. Default: 1 Range: 1-255. For example, if the dictionary applies to credit card numbers and the count is set to 4, the sensor will be triggered when credit card number occurs four times in the HTTP request or response. |
Example
config security waf dlp-sensors
edit "user-defined-sensor1"
set match-type any
set description "User Defined DLP Sensor 1"
config entries
edit 1
set status enable
set dlp-dictionary can-natl_id-pk
set count 1
next
end
next
end
Predefined DLP Sensor objects
You can use the following predefined DLP Sensor objects in Data Loss Prevention rules.
| Predefined DLP Sensor object |
Match Type |
Description |
Dictionaries |
|---|---|---|---|
| can-hia |
Any |
Canadian Health Information Act (HIA) Sensor |
|
| can-pii |
Any |
Canadian Personal Identifiable Information (PII) Sensor |
|
| source_code |
Any |
Source Code Sensor |
|