File and attachment origin parameters
File and attachment origin parameters give you enhanced visibility and control over your organization's IP, allowing you to detect and prevent data exfiltration based on the web source of downloaded files.
Supported with an array of FortiDLP's content inspection policy templates, these origin-tracking parameters enable the Agent to monitor sensitive files downloaded from websites and web apps—across file renames, moves, and copies—and block exfiltration attempts. Further, to differentiate between corporate and non-corporate web activity for users, detections can be generated considering the website/web app login account used to download files.
|
For example, using the Sensitive file uploaded template, you could create a policy that detects and blocks the upload of a file that derived from a corporate Google Drive to a user's personal OneDrive, even if that user renamed, copied, or moved the file before the upload attempt. |
The following origin-tracking parameters are described in this section:
|
Copy tracking is supported on macOS 13.4+. |