Enterprise DLP
Supported File Types
Table of Contents
Supported File Types
File types supported by
Enterprise Data Loss Prevention (E-DLP)
.Enterprise Data Loss Prevention (E-DLP)
supports the following file operations, upload parameters, file
types, and actions. - File operations—You can upload files using HTTP and HTTPS (no FTP or SMTP) using:
- (DLP 3.0.1 and earlier releases) HTTP/1.1Some applications, such as SharePoint and OneDrive, use HTTP/2 by default. To use HTTP/2 files with HTTP/1.1, you need to create a decryption profile and a Security policy rule to strip out the application-layer protocol negotiation (ALPN) extension in headers. See Enable Enterprise DLP for more information.
- (DLP 3.0.2 and later releases) HTTP/1.1 and HTTP/2
- Data flow—File uploads and downloads are supported. Review the supported applications to learn the data flow direction supported for each application.Enterprise DLPdoesn’t support maintaining a session connection to continue inspection if a file download is paused. The DLP cloud service inspection is terminated for the file if the download operation is paused.
- Concurrent file uploads—25 concurrent file uploads are supported.
- File size—The maximum supported file size is dependent on the application. Review the supported applications for more information.
- File types—Enterprise DLPsupports inspection of the following file types.
- Microsoft Office (.doc, .docx, .ppt, .pptx, .xls, .xlsx)
- Microsoft Visio (.vsd, .vsdm, .vsdx)Requires Application and Threats content release 8656-7766 or later versions installed onPanoramaand managed firewalls, orStrata Cloud Managerdeployment.
- .csv
- .pdf
- .rtf
- .txt
- Image files (.jpg, .jpeg, .png, .tif, .tiff)Detection of image files requires you to enable Optical Character Recognition (OCR).
- Source Code File Types—Enterprise DLPsupports inspection of the following source code file types.
- Cfamily—C, C++, C+, C#, Objective C
- Go
- HTML
- java
- javascript
- JSON
- perl
- powershell
- python
- r
- ruby
- vbs
- verilog
- vhd1
- x86_assembly
- International Characters—Enterprise DLPsupports inspection of any supported file type with the following international characters.
- CJK—Chinese, Japanese, and Korean
- ZIP Files—Enterprise DLPsupports inspection of ZIP and 7Z (7-ZIP file archiver) files containing the supported file types listed above.TheEnterprise DLPcloud service supports single level compression of files only.TheEnterprise DLPcloud service doesn’t support scanning multilevel compressed files. For example, the DLP cloud service can’t scan and render a verdict on the file contents of a zip file if it's been compressed more than once.
- Response—Block and Alert actions are supported for HTTP and HTTPS files. However, the Block page doesn’t display the name of the file that the managed firewall blocked.