Skip to content

Commit a42d528

Browse files
maxvppatriciasantaana
authored andcommitted
[DLP] Free/paygo plan features (#17074)
1 parent 778bbf6 commit a42d528

File tree

6 files changed

+32
-22
lines changed

6 files changed

+32
-22
lines changed

src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-profiles/advanced-settings.mdx

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,11 @@ pcx_content_type: reference
33
title: Profile settings
44
sidebar:
55
order: 4
6-
76
---
87

9-
import { Badge } from "~/components"
8+
import { Badge } from "~/components";
109

11-
This page lists the advanced settings available when configuring a predefined or custom DLP profile.
10+
This page lists the advanced settings available when configuring a [predefined](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/predefined-profiles/) or [custom](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/#build-a-custom-profile) DLP profile.
1211

1312
## Match count
1413

src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-profiles/predefined-profiles.mdx

Lines changed: 19 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -5,9 +5,11 @@ sidebar:
55
order: 2
66
---
77

8+
import { Render } from "~/components";
9+
810
Cloudflare Zero Trust provides predefined DLP profiles for common types of sensitive data. Some profiles include built-in validation checks to increase detection granularity. Additionally, you can configure [advanced settings](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/advanced-settings/) for predefined profiles.
911

10-
## Credentials and secrets
12+
## Credentials and Secrets
1113

1214
The following secrets are validated with regex.
1315

@@ -16,9 +18,14 @@ The following secrets are validated with regex.
1618
- Azure API keys
1719
- SSH keys
1820

19-
## Financial information
21+
## Financial Information
22+
23+
<Render
24+
file="profile-all-plans"
25+
product="cloudflare-one/data-loss-prevention"
26+
/>
2027

21-
Credit card numbers begin with a six or eight-digit Issuer Identification Number (IIN) and are followed by up to 23 additional digits. CVVs are not validated.
28+
Credit card numbers begin with a six or eight-digit Issuer Identification Number (IIN) and are followed by up to 23 additional digits. Card verification values (CVVs) are not validated.
2229

2330
| Detection entry | Notes |
2431
| -------------------------------- | --------------------------------------------------------------------------------- |
@@ -35,17 +42,22 @@ Credit card numbers begin with a six or eight-digit Issuer Identification Number
3542
| United States ABA Routing Number | Validated algorithmically with checksum. |
3643
| IBAN | Validated with checksum. |
3744

38-
## Health information
45+
## Health Information
3946

4047
The following diagnosis and medication names are checked for surrounding ASCII characters to prevent false positives.
4148

4249
- FDA active ingredients
4350
- FDA drug names
4451
- ICD-10 FY2023 short descriptions
4552

46-
## National identifiers
53+
## Social Security, Insurance, Tax, and Identifier Numbers
54+
55+
<Render
56+
file="profile-all-plans"
57+
product="cloudflare-one/data-loss-prevention"
58+
/>
4759

48-
Detections are validated algorithmically when possible.
60+
The following national identifier detections are validated algorithmically when possible.
4961

5062
| Detection entry | Notes |
5163
| ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
@@ -64,7 +76,7 @@ Detections are validated algorithmically when possible.
6476
| United Kingdom NHS Number | Validated with checksum. |
6577
| United Kingdom National Insurance Number | Validated with regex. |
6678

67-
## Source code
79+
## Source Code
6880

6981
The following programming languages are validated with natural language processing (NLP).
7082

src/content/docs/cloudflare-one/policies/data-loss-prevention/index.mdx

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7,19 +7,17 @@ sidebar:
77

88
import { GlossaryDefinition } from "~/components";
99

10-
:::note
10+
:::note[Availability]
1111
Available as an add-on to Zero Trust Enterprise plans.
12+
13+
Users on Zero Trust Free and Pay-as-you-go plans can use the [Financial Information](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/predefined-profiles/#financial-information) and [Social Security, Insurance, Tax, and Identifier Numbers](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/predefined-profiles/#social-security-insurance-tax-and-identifier-numbers) predefined profiles, [payload logging](/cloudflare-one/policies/data-loss-prevention/dlp-policies/payload-logging/), and [false positive reporting](/cloudflare-one/policies/data-loss-prevention/dlp-policies/#report-false-positives).
1214
:::
1315

1416
<GlossaryDefinition term="Cloudflare Data Loss Prevention (DLP)" />
1517

1618
## Data in transit
1719

18-
:::note
19-
DLP requires [TLS decryption](/cloudflare-one/policies/gateway/http-policies/tls-decryption/) for visibility into data in transit. The depth of visibility varies for each site or application.
20-
:::
21-
22-
Data Loss Prevention complements [Secure Web Gateway](/cloudflare-one/policies/gateway/) to detect sensitive data transferred in HTTP requests. DLP scans the entire HTTP body, which may include [uploaded or downloaded files](#supported-file-types), chat messages, forms, and other web content. DLP does not scan non-HTTP traffic such as email, nor does it scan any traffic that bypasses Cloudflare Gateway (for example, traffic that matches a [Do Not Inspect](/cloudflare-one/policies/gateway/http-policies/#do-not-inspect) policy.
20+
Data Loss Prevention complements [Secure Web Gateway](/cloudflare-one/policies/gateway/) to detect sensitive data transferred in HTTP requests. DLP scans the entire HTTP body, which may include [uploaded or downloaded files](#supported-file-types), chat messages, forms, and other web content. DLP does not scan non-HTTP traffic such as email, nor does it scan any traffic that bypasses Cloudflare Gateway (for example, traffic that matches a [Do Not Inspect](/cloudflare-one/policies/gateway/http-policies/#do-not-inspect) policy. The depth of visibility into data in transit varies for each site or application.
2321

2422
To get started, refer to [Scan HTTP traffic with DLP](/cloudflare-one/policies/data-loss-prevention/dlp-policies/).
2523

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,5 @@
11
---
22
{}
3-
43
---
54

6-
<div class="special-class" markdown="1">
7-
85
These findings will only appear if you [added DLP profiles](/cloudflare-one/applications/scan-apps/casb-dlp/) to your CASB integration.
9-
10-
</div>

src/content/partials/cloudflare-one/data-loss-prevention/predefined-profile.mdx

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,5 @@
11
---
22
{}
3-
43
---
54

65
1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **DLP** > **DLP Profiles**.
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
{}
3+
---
4+
5+
:::note[Availability]
6+
This predefined profile is available on all Zero Trust plans.
7+
:::

0 commit comments

Comments
 (0)