DLP - Common settings

On this page it is possible to set up DLP (data leak prevention) in documents/images/voice.

If the user performs one of selected actions with the certain objects in the inner text of which there is one or several coincidence from the rules list then the event will be notified. This event may be recorded to the report "Events" and an immediate push-notification will appear in BOSS-Online. The events are set up in the tab "Events".
It is also possible to allow or forbid certain activities, and/or perform document classification.

The following file formats are currently supported when extracting text from documents: docx, xlsx, pptx, odt, sxw, ods, odp, doc, xls, ppt, rtf, csv, txt, pdf, zip, jpg, png, gif, tif.
Please note that document analysis (especially large archives or OCR text recognition on images) can be time-consuming, and user operations may be blocked during this period. To indicate to the user that document analysis is currently in progress, there is an option "Show waiting indicator after N-msec". This option allows you to specify the time in milliseconds after the analysis process begins for a small window to appear on the screen and disappear immediately after completion. If you specify a time of -1 msec, the window will never appear!

Attention! It is required that corresponding monitoring options must be enabled for DLP processing on the homonym settings tabs (for example, clipboard monitoring, file operations etc.)

Attention! DLP processing is oriented on file output but not on the input. So, for example, such action as copying files from removable drives won't be recorded!

Attention! In the current version there is no FTP-file transfer blocking. Instead, you can completely block FTP traffic in the settings!

Attention! It is worth mentioning that any DLP may be skipped so the software suit cannot guarantee prevention from leakage in all possible cases.

Attention! Parsing .pdf files will not work on terminal servers.

Attention! For block/classify printing you need to turn on option "Intercept printing inside processes" at this settings tab.

The "Perform classification" options will only work if the corresponding DLP option is enabled!
When enabled, the document is sent to the server for classification into categories. The categories themselves are configured on this page.
The classification result can be viewed in the "Files Classification" report.

When the "Turn on DLP for periodic screenshots" option is enabled, each screenshot (settings here) will be analyzed when OCR here is enabled, and if text from the sensitivity block is found in the text on the screen, a corresponding event will be generated and the screen will be optionally locked.
It is important to note that enabling this option can significantly increase the server load, so it should be used with great caution!

If the option "Send shadow copies of documents only if DLP analysis is triggered" is enabled, it will not be possible to download the document through reports in BOSS-Offline if a DLP-event has not been triggered in it. This allows you to save network traffic and server disk space if you are interested in shadow copies of important documents only.

See also "Sending files"