Configuring a DLP Dictionary object

A DLP dictionary defines the patterns of data. The term "pattern" denotes a set of attributes specific to a given data type. For example, credit card numbers constitute numeric data that follow either the 14-digit or 16-digit patterns associated with credit cards. If the data adheres to these patterns, FortiADC will identify it as a match.

Before you begin:

• You must have a valid FortiGuard DLP service license and have enabled the service on FortiADC. For details, see FortiGuard DLP service.

Predefined DLP Sensor objects

You can use the following predefined DLP Dictionary objects in Data Loss Prevention rules.

Predefined DLP Dictionary object	Match Type	Description
EICAR-TEST-FILE	Any	EICAR Test File for DLP
can-natl_id-pk	Any
can-natl_id-sin-dict	Any	Canadian SIN Card Number Dictionary
glb-pass-pk	Any
can-pass-dict	Any	Canadian Passport Dictionary
usa-pass-dict	Any	USA Passport Dictionary
uk-pass-dict	Any	UK Passport Dictionary
aus-pass-dict	Any	Australia Passport Dictionary
fra-pass-dict	Any	France Passport Dictionary
jpn-pass-dict	Any	Japan Passport Dictionary
can-health_service-pk	Any
can-phin-pk	Any
can-phin-dict	Any	Canadian Personal Health Identification Number Dictionary
can-health_service-dict	Any	Canadian Health Service Dictionary
glb-cc-pk	Any
glb-cc-dict	Any	Global Credit Card Dictionary
usa-natl_id-pk	Any
glb-dl-pk	Any
can-dl-dict	Any	Canadian Driver's License Dictionary
can-bank_account-pk	Any
can-bank_account-dict	Any	Canadian Bank Account Dictionary
usa-natl_id-ssn-dict	Any	USA SSN Card Number Dictionary
glb-swift-pk	Any
source_code-python	Any	Python Source Code Dictionary
source_code-c	Any	C Source Code Dictionary
source_code-java	Any	Java Source Code Dictionary

To configure a DLP Dictionary object:

1. Go to Web Application Firewall > Data Loss Prevention.

2. Click the DLP Dictionary tab.
   

3. Click Create New to display the configuration editor.
   

4. Configure the following DLP Dictionary settings:

   Setting	Description
   Name	Specify a name for the DLP Dictionary object. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces. The configuration name cannot be edited once it has been saved.
   Match Type	Select the match type: Any — Data meeting the criteria specified by any one of the dictionary entries will be identified as a match. All — Data meeting the criteria specified by all dictionary entries will be identified as a match. The default is Any.
   Description	Comments about this DLP Dictionary object.

5. Click Save.
   After the DLP Dictionary configuration is saved, the FortiGuard Data Types section becomes available to configure.
6. Under the FortiGuard Data Types section, click Create New to display the configuration editor.
   
7. Configure the following FortiGuard Data Types settings for the DLP Dictionary:
   

   Setting	Description
   Status	Enable the Status if you intend to apply this data type.
   FortiGuard Data Type	Select a FortiGuard Data Type from the drop-down menu.
   Repeat	Enable this option if you want to match data exclusively when it appears multiple times. With this option enabled, you can specify the times of occurrence in the DLP Sensor settings.

8. Click Save.
   Once the FortiGuard Data Types configuration is saved, the editor dialog closes.
   
9. Click Save to update the DLP Sensor configuration.
   Once the DLP Dictionary is saved, you can reference it in a DLP Sensor.