Content inspection parameters

An array of FortiDLP's policy templates have content inspection capabilities, automating the detection of sensitive data and the execution of actions to protect it.

Content inspection allows the FortiDLP Agent to monitor user activities to identify and control how data—such as Personally Identifiable Information (PII), Payment Card Industry (PCI) data, and Protected Health Information (PHI)—is being accessed and used on and across systems.

For example, using content inspection, the FortiDLP Agent can detect user attempts to transfer files containing US passport numbers to USB storage devices and block such transfers. The Agent can also detect user attempts to send emails containing credit card numbers and block them.

For flexibility, policy templates can be configured to enable content inspection using one or more of the following methods:

• Regular expressions (regexes)
• Keywords or keyphrases
• Microsoft sensitivity labels.

Content inspection is supported for languages using the Latin script, including but not limited to:

• English
• Spanish
• French
• German
• Portuguese.

The following content inspection parameters are described in this section:

• Content inspection patterns
• Content inspection keywords
• Microsoft sensitivity labels
• Content inspection match type
• Content inspection match frequency
• Extended content inspection.