Enterprise DLP
August 2025
Table of Contents
Expand All
|
Collapse All
Enterprise DLP Docs
August 2025
Review the new features introduced to Enterprise Data Loss Prevention (E-DLP) in August
2025.
Increased Occurrence Count for Data Patterns and Data Dictionaries
August 15, 2025
|
Increased Occurrence Count for Enterprise Data Loss Prevention (E-DLP) Data Patterns and
Data Dictionaries enhances Enterprise DLP detection capabilities by supporting
up to 1,500 data pattern and data dictionary match occurrences matches in a data profile. This enables more
comprehensive scanning of documents containing an extensive number of occurrences of
sensitive data. You can configure your data profiles with flexible matching
parameters including less than or equal to 1,500 matches, greater than or equal to
specific thresholds such as 1000, and range-based detection between defined values
like 500 and 1,500. This enables your data security administrators to create DLP
rules to detect traffic with a high count of unique pattern matches and traffic with
many repeated matches of the same data.
The increase in Enterprise DLP occurrence count detection capabilities
enables more precise data loss prevention policy rules that can accommodate complex
organizational requirements. Data security administrators can establish detection
rules that align with specific compliance needs while maintaining the flexibility to
adjust pattern matching thresholds based on your organization's risk tolerance and
operational requirements. The enhanced detection capability supports both primary
and secondary rules within a data profile enabling your data security administrators
to create sophisticated detection logic that meets your security objectives while
reducing unnecessary alerts from files containing repetitive but nonthreatening
sensitive data.
Additionally, this enhancements enables Enterprise DLP to inspect
up to 300,000 cumulative pattern matches within a single file, supporting
enterprise-scale document analysis requirements. Your data security
administrators can implement the increased data pattern and data dictionary
match capabilities across both inline Enterprise DLP and Data Security (SaaS API) to ensure consistent pattern detection
capabilities regardless of your deployment architecture.
EDM Currency Support
August 15, 2025
|
You can now use Enterprise Data Loss Prevention (E-DLP)
Exact Data Matching (EDM) to detect and
classify currency values across multiple formats, enhancing your organization's
ability to prevent financial data exfiltration. This enables EDM to recognize
monetary amounts in both US Dollar and Euro formats, including variations with
currency symbols, decimal points, and comma separators such as $100,000.00, €50,000,
or 100000. The support for currencies requires EDM CLI app version 5.0 or later
release.
EDM currency detection addresses compliance requirements for organizations that
handle sensitive financial data and need comprehensive data loss prevention
coverage. Your data security administrators can use EDM to detect sensitive
financial information including salary data, budget figures, transaction amounts,
and other monetary values in documents and communications, whether it appears with
or without currency symbols, decimal points for cents, or comma separators in larger
amounts. Currency detection is valuable for global enterprises operating across
multiple regions where different currency formats are common, ensuring consistent
protection regardless of how your format financial data in your organization's
documents.
EDM currency support integrates with your existing EDM configuration and follows the
same data classification and policy enforcement mechanisms as other EDM data types.
When you include supported currency values as a data type in your EDM data sets, Enterprise DLP automatically applies the appropriate matching algorithms during
content inspection across email, web traffic, and file transfers. This capability is
important for organizations subject to financial regulations or those handling
customer payment information, as it helps prevent costly data breaches that could
result in regulatory fines or competitive disadvantage. Currency detection works
alongside existing EDM data types to provide comprehensive protection for structured
financial data within your enterprise environment.
Enhanced Date Matching for EDM
August 15, 2025
|
Enhanced Date Matching for EDM addresses the challenge of accurately
identifying dates in ambiguous formats where day and month values could be
interpreted multiple ways, such as 1/8/1975 which could
represent either January 8th or August
1st. When your organization processes documents containing these
ambiguous date formats, traditional EDM scanning may miss sensitive data because it
can’t determine the correct interpretation, creating potential gaps in your data
loss prevention coverage. The support for enhanced date matching requires EDM CLI
app version 5.0 or later release.
Enhanced Date Matching for EDM now recognizes both possible interpretations
of ambiguous dates, ensuring comprehensive protection of sensitive information
regardless of regional formatting conventions. Additionally, Enterprise Data Loss Prevention (E-DLP) can match format variations including documents with or without leading zeros, so
Enterprise DLP can successfully match 1/8/1975
against 01/08/1975 and 01 Jan 1975 in
inspected traffic. This capability proves valuable for global organizations that
handle documents that originate across different regions where date formatting
standards vary.
The enhancement provides more reliable detection of date-sensitive
information in corporate communications, financial documents, and data transfers.
With Enhanced Date Matching for EDM, Enterprise DLP can deliver consistent
protection across your entire organization, reducing the risk of data loss incidents
that formatting variations in business-critical information cause. Enhanced Date
Matching for EDM ensures that sensitive data containing dates receives comprehensive
coverage regardless of how those dates appear in your documents or data streams.
Granular Data Profiles
August 28, 2025
|
Granular data profiles enhance your Enterprise Data Loss Prevention (E-DLP) detection capabilities by allowing you to apply
differentiated inline content inspection requirements and response actions within
the same Security policy rule. For example, you can use a single granular data
profile to block high-risk data patterns while alerting on lower-risk ones, set
varying log severities for different data profiles, and set specific file types for
each data profile included in the granular data profile.
Granular data profiles simplify policy rulebase management by consolidating multiple
rules into a single, more flexible Security policy rule. Furthermore, they reduce
false positive detections and allow your data security admins to achieve a more
nuanced approach to data protection that aligns closely with your organization's
risk management strategy while maintaining a lean and efficient Security policy
rulebase.