Content Examination - Getting Started

This article contains information on configuring Content Examination policies as part of a Data Leak Prevention (DLP) system to secure sensitive information, specifying actions for unsafe messages, and enabling additional features like notifications and encryption.

Content Examination policies form part of our comprehensive Data Leak Prevention (DLP) system to secure information entering and exiting your organization. A definition is required to specify what content to look for and what the associated action should be if a match is found. If a message is unsafe, delivery is prevented, and the message can be held, deleted, or bounced. Notifications can also be enabled for specific senders, recipients, or users.

Usage Examples

Scanning message content is an essential service to ensure DLP. You can configure specific dictionaries of words and phrases to cater for the following example scenarios:

• Preventing a database from being emailed externally (e.g., a list of customers or confidential product information).
• Protecting a company from losing financial information (banking or credit card details).
• Preventing specific files from being sent or received using a unique file identifier.
• Automatically convert Microsoft Word documents to protected formats.
• Protecting corporate identity by limiting the use of profanity in messages.
• Applying specific email branding for product or service promotions.
• Customizing policies for different user groups, domains, or scenarios (for example, allowing specific users to send encrypted emails with sensitive information, or bouncing emails that violate strict compliance requirements).
• Additional features can also be enabled:
  • Notifying / copying users or Administrators when a message triggers a definition.
  • Activating email encryption during transmission, based on the content found.
  • Holding messages for review by a chosen reviewer (User, Moderator, or Administrator) before final delivery.

Administration Guides

The following guides describe how to configure Content Examination definitions and policies to best suit your requirements, including DLP policy configuration, use of dictionaries and entities, and advanced matching options:

• Content Examination - Configuring
• Content Examination Bypass Policy Configuration
• Phrase Match Examples
• Content Examination - Punctuation
• Content Examination Fuzzy Hashes
• Content Examination - Using the Insert Menu
• Content Examination - Reference Dictionaries