Enterprise DLP
August 2025
Table of Contents
                    
          Expand All
          |
          Collapse All
        
        Enterprise DLP Docs
August 2025
Review the new features introduced to Enterprise Data Loss Prevention (E-DLP) in August
        2025.
    
    Increased Occurrence Count for Data Patterns and Data Dictionaries
| August 15, 2025 | 
Increased Occurrence Count for Enterprise Data Loss Prevention (E-DLP) Data Patterns and
                Data Dictionaries enhances Enterprise DLP detection capabilities by supporting
                up to 1,500 data pattern and data dictionary match occurrences matches in a data profile. This enables more
                comprehensive scanning of documents containing an extensive number of occurrences of
                sensitive data. You can configure your data profiles with flexible matching
                parameters including less than or equal to 1,500 matches, greater than or equal to
                specific thresholds such as 1000, and range-based detection between defined values
                like 500 and 1,500. This enables your data security administrators to create DLP
                rules to detect traffic with a high count of unique pattern matches and traffic with
                many repeated matches of the same data.
The increase in Enterprise DLP occurrence count detection capabilities
                enables more precise data loss prevention policy rules that can accommodate complex
                organizational requirements. Data security administrators can establish detection
                rules that align with specific compliance needs while maintaining the flexibility to
                adjust pattern matching thresholds based on your organization's risk tolerance and
                operational requirements. The enhanced detection capability supports both primary
                and secondary rules within a data profile enabling your data security administrators
                to create sophisticated detection logic that meets your security objectives while
                reducing unnecessary alerts from files containing repetitive but nonthreatening
                sensitive data.
Additionally, this enhancements enables Enterprise DLP to inspect
                    up to 300,000 cumulative pattern matches within a single file, supporting
                    enterprise-scale document analysis requirements. Your data security
                    administrators can implement the increased data pattern and data dictionary
                    match capabilities across both inline Enterprise DLP and Data Security (SaaS API) to ensure consistent pattern detection
                    capabilities regardless of your deployment architecture.
EDM Currency Support
| August 15, 2025 | 
You can now use Enterprise Data Loss Prevention (E-DLP)
                Exact Data Matching (EDM) to detect and
                classify currency values across multiple formats, enhancing your organization's
                ability to prevent financial data exfiltration. This enables EDM to recognize
                monetary amounts in both US Dollar and Euro formats, including variations with
                currency symbols, decimal points, and comma separators such as $100,000.00, €50,000,
                or 100000. The support for currencies requires EDM CLI app version 5.0 or later
                release. 
EDM currency detection addresses compliance requirements for organizations that
                handle sensitive financial data and need comprehensive data loss prevention
                coverage. Your data security administrators can use EDM to detect sensitive
                financial information including salary data, budget figures, transaction amounts,
                and other monetary values in documents and communications, whether it appears with
                or without currency symbols, decimal points for cents, or comma separators in larger
                amounts. Currency detection is valuable for global enterprises operating across
                multiple regions where different currency formats are common, ensuring consistent
                protection regardless of how your format financial data in your organization's
                documents.
EDM currency support integrates with your existing EDM configuration and follows the
                same data classification and policy enforcement mechanisms as other EDM data types.
                When you include supported currency values as a data type in your EDM data sets, Enterprise DLP automatically applies the appropriate matching algorithms during
                content inspection across email, web traffic, and file transfers. This capability is
                important for organizations subject to financial regulations or those handling
                customer payment information, as it helps prevent costly data breaches that could
                result in regulatory fines or competitive disadvantage. Currency detection works
                alongside existing EDM data types to provide comprehensive protection for structured
                financial data within your enterprise environment.
Enhanced Date Matching for EDM
| August 15, 2025 | 
Enhanced Date Matching for EDM addresses the challenge of accurately
                identifying dates in ambiguous formats where day and month values could be
                interpreted multiple ways, such as 1/8/1975 which could
                represent either January 8th or August
                    1st. When your organization processes documents containing these
                ambiguous date formats, traditional EDM scanning may miss sensitive data because it
                can’t determine the correct interpretation, creating potential gaps in your data
                loss prevention coverage. The support for enhanced date matching requires EDM CLI
                app version 5.0 or later release. 
Enhanced Date Matching for EDM now recognizes both possible interpretations
                of ambiguous dates, ensuring comprehensive protection of sensitive information
                regardless of regional formatting conventions. Additionally, Enterprise Data Loss Prevention (E-DLP) can match format variations including documents with or without leading zeros, so
                    Enterprise DLP can successfully match 1/8/1975
                against 01/08/1975 and 01 Jan 1975 in
                inspected traffic. This capability proves valuable for global organizations that
                handle documents that originate across different regions where date formatting
                standards vary.
The enhancement provides more reliable detection of date-sensitive
                information in corporate communications, financial documents, and data transfers.
                With Enhanced Date Matching for EDM, Enterprise DLP can deliver consistent
                protection across your entire organization, reducing the risk of data loss incidents
                that formatting variations in business-critical information cause. Enhanced Date
                Matching for EDM ensures that sensitive data containing dates receives comprehensive
                coverage regardless of how those dates appear in your documents or data streams.
Granular Data Profiles
| August 28, 2025 | 
Granular data profiles enhance your Enterprise Data Loss Prevention (E-DLP) detection capabilities by allowing you to apply
                differentiated inline content inspection requirements and response actions within
                the same Security policy rule. For example, you can use a single granular data
                profile to block high-risk data patterns while alerting on lower-risk ones, set
                varying log severities for different data profiles, and set specific file types for
                each data profile included in the granular data profile. 
Granular data profiles simplify policy rulebase management by consolidating multiple
                rules into a single, more flexible Security policy rule. Furthermore, they reduce
                false positive detections and allow your data security admins to achieve a more
                nuanced approach to data protection that aligns closely with your organization's
                risk management strategy while maintaining a lean and efficient Security policy
                rulebase.
