Create DLP Policy to quarantine PDF file

[mohamed.fawzy2012]

i want to create dlp policy to block cettain pdf files with specific content or specific names using dlp policy , is that possible or not ?

[Libin Varghese]

DLP allows you to create custom DLP policies using search patterns and regular expressions.

Refer to the end user guides on how this is configured.

https://www.cisco.com/c/en/us/support/security/email-security-appliance/products-user-guide-list.html

Regards,

Libin Varghese

[mohamed.fawzy2012]

i read DLP chapter but there is no example for how to do it with PDF attachment , can i do it with name of attachment or specific template for content body of the attachment ?

[marc.luescherFRE]

There are two ways of doing this :

1. Outgoing message filter , selection criteria file name and text if looking for text in body and not file attachment
2. DLP - Add custom policy, create classifier, words or phrases add your key words to look for , filter attachments documents/pdf