File Size and File Type Properties for Enterprise DLP File Property Data Patterns
Focus
Focus
What's New in the NetSec Platform

File Size and File Type Properties for Enterprise DLP File Property Data Patterns

Table of Contents

File Size and File Type Properties for Enterprise DLP File Property Data Patterns

Detect and control files based on their actual file type signature and size using new Enterprise Data Loss Prevention (E-DLP) File Property data pattern properties.
You can now detect and control files based on their true file type and size to protect intellectual property and enforce granular DLP policies across your organization. Malicious users can rename file extensions to disguise sensitive files such as CAD drawings, source code, or encrypted archives, and large files can require different policy treatment than smaller ones. The new File Size and File Type properties in Enterprise Data Loss Prevention (E-DLP) File Property data patterns solve these challenges by giving you signature-based file identification and size-aware policy enforcement.
The File Property data pattern now supports two new properties:
  • File Type—Identifies files by their file signature, which reflects the actual file format regardless of the file extension. You can select individual file types or all supported types from a comprehensive list that spans CAD drawings, archives, source code, encrypted formats, and more. Signature-based detection ensures reliable identification even when a user renames the extension to disguise a file.
  • File Size—Matches files based on their original size using comparison operators (less than, less than or equal to, equal to, greater than, or greater than or equal to) with a value between 0 and 100 MB. You can combine File Size with other data patterns in a data profile to apply complex pattern matching to smaller files and simpler patterns to larger files, optimizing inspection performance without sacrificing coverage.
Both properties are available across all Enterprise DLP channels, including inline, Email DLP, Endpoint DLP, and SaaS API scanning.