Skip to content

Commit bc45470

Browse files
maxvpelithrar
authored andcommitted
[DLP] Add file scanning context (#17294)
1 parent dbdf70a commit bc45470

File tree

2 files changed

+10
-2
lines changed

2 files changed

+10
-2
lines changed

src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-profiles/advanced-settings.mdx

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,15 @@ Match count refers to the number of times that any enabled entry in the profile
1515

1616
## Context analysis
1717

18-
Context analysis restricts DLP detections based on proximity keywords. Additional proximity keywords must be detected within a distance of 1000 bytes (\~1000 characters) from the original detection to trigger an action. For example, the string `123-45-6789` will only count as a detection if in proximity to keywords such as `ssn`.
18+
Context analysis restricts detections based on proximity keywords to prevent false positives. Proximity keywords must be detected within a distance of 1000 bytes (~1000 characters) from the original detection to trigger an context-aware detection. For example, the string `123-45-6789` will only count as a detection if in proximity to keywords such as `ssn`.
1919

20-
Additionally, you can control context analysis for scans within files. When files are excluded from the context filter, DLP only evaluates uploaded and downloaded files based on regular expression and validation checks. Additional keywords within the file are not required.
20+
DLP will apply context analysis to traffic and the content of [supported files](/cloudflare-one/policies/data-loss-prevention/#supported-file-types). Supported detections include the [Financial Information](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/predefined-profiles/#financial-information) and [Social Security, Insurance, Tax, and Identifier Numbers](/cloudflare-one/policies/data-loss-prevention/dlp-profiles/predefined-profiles/#social-security-insurance-tax-and-identifier-numbers) predefined profiles.
21+
22+
### Exclude files from context analysis
23+
24+
You can exclude the content of files from context analysis while still applying context analysis to traffic. For example, if you send an email containing the string `123-45-6789`, DLP will only count a detection if the string is in proximity to keywords such as `ssn`. If you include a file in an email containing the string `123-45-6789`, DLP will match a detection regardless of keywords.
25+
26+
To exclude file content from context analysis, in **Exclude content type**, choose _Files_.
2127

2228
## Optical Character Recognition (OCR) <Badge text="Beta" variant="caution" size="small" />
2329

src/content/docs/cloudflare-one/policies/data-loss-prevention/index.mdx

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,8 @@ DLP supports scanning the following file types:
4040
- PDF
4141
- ZIP files containing the above
4242

43+
DLP will scan the text contained in Microsoft Office and PDF files.
44+
4345
### Size
4446

4547
The maximum file size is 100 MB. Size limitation is assessed against the file after unzipping. ZIP files can be recursively compressed a maximum of 10 times.

0 commit comments

Comments
 (0)