config dlp profile
Configure DLP profiles.
config dlp profile
Description: Configure DLP profiles.
edit <name>
set comment {var-string}
set feature-set [flow|proxy]
set replacemsg-group {string}
config rule
Description: Set up DLP rules for this profile.
edit <id>
set name {string}
set severity [info|low|...]
set type [file|message]
set proto {option1}, {option2}, ...
set filter-by [sensor|mip|...]
set file-size {integer}
set sensitivity <name1>, <name2>, ...
set file-type {integer}
set sensor <name1>, <name2>, ...
set label {string}
set archive [disable|enable]
set action [allow|log-only|...]
set expiry {user}
next
end
set dlp-log [enable|disable]
set extended-log [enable|disable]
set nac-quar-log [enable|disable]
set full-archive-proto {option1}, {option2}, ...
set summary-proto {option1}, {option2}, ...
next
end
config dlp profile
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
comment |
Comment. |
var-string |
Not Specified |
|
||||||||||||||||||||||
|
feature-set |
Flow/proxy feature set. |
option |
- |
flow |
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
replacemsg-group |
Replacement message group used by this DLP profile. |
string |
Not Specified |
|
||||||||||||||||||||||
|
dlp-log |
Enable/disable DLP logging. |
option |
- |
enable |
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
extended-log |
Enable/disable extended logging for data leak prevention. |
option |
- |
disable |
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
nac-quar-log |
Enable/disable NAC quarantine logging. |
option |
- |
disable |
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
full-archive-proto |
Protocols to always content archive. |
option |
- |
|
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
summary-proto |
Protocols to always log summary. |
option |
- |
|
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
config rule
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
name |
Filter name. |
string |
Not Specified |
|
||||||||||||||||||||||
|
severity |
Select the severity or threat level that matches this filter. |
option |
- |
medium |
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
type |
Select whether to check the content of messages (an email message) or files (downloaded files or email attachments). |
option |
- |
file |
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
proto |
Check messages or files over one or more of these protocols. |
option |
- |
|
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
filter-by |
Select the type of content to match. |
option |
- |
none |
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
file-size |
Match files this size or larger . |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||||||||||||||||
|
sensitivity |
Select a DLP file pattern sensitivity to match. Select a DLP sensitivity. |
string |
Maximum length: 35 |
|
||||||||||||||||||||||
|
file-type |
Select the number of a DLP file pattern table to match. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||||||||||||||||
|
sensor |
Select DLP sensors. Address name. |
string |
Maximum length: 35 |
|
||||||||||||||||||||||
|
label |
MIP label dictionary. |
string |
Not Specified |
|
||||||||||||||||||||||
|
archive |
Enable/disable DLP archiving. |
option |
- |
disable |
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
action |
Action to take with content that this DLP profile matches. |
option |
- |
allow |
||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||
|
expiry |
Quarantine duration in days, hours, minutes (format = dddhhmm). |
user |
Not Specified |
5m |
||||||||||||||||||||||