Creating DLP Content Profiles

This article explains how to create a Content Profile for Cato's DLP service. This profile includes one or more of the DLP Data Types which you can use in an Application Control policy or SaaS Security API Data Protection policy.

Overview

Cato’s Data Loss Prevention (DLP) service helps you monitor and control sensitive information across your network. You can add DLP content profiles to a Data Control rule to detect or block sensitive data and prevent potential exfiltration. DLP can scan text-based content, include data embedded in images by using OCR-based inspection, and documents embedded in files.

Content Profiles can include predefined data types or custom data types, including User-Defined Data Types and Sensitivity Labels. For more about data types, see the following articles:

• Working with Predefined Data Types for DLP

• Working with Custom Data Types for DLP

• Using MIP Sensitivity Labels in your Cato DLP Policy

• Working with Google labels in your Cato DLP Policy

• Working with Exact Data Matching (EDM) for DLP

The DLP Content Profile is a global object for the Cato Management Application which includes one or more Data Types.

OCR Image Scanning for Content Profiles

You can configure a Content Profile so the DLP engine includes image files and images embedded in files in content matching for the profile. The engine uses OCR to extract text that appears in image files and sends the extracted text for content matching. The OCR scanning option appears when configuring a Content Profile. OCR image scanning includes: 

• Low-resolution and blurred mobile images

• Warped, rotated, or crumpled images

• Images that contain text in two languages 

Language Support

Predefined ML Classifiers identify sensitive data, for example, a resume, in over a hundred languages. For more information, see Working with Predefined Data Types for DLP.

Creating a Content Profile

Use the DLP Configuration page to create and edit Content Profiles. When you are adding Data Types to a profile you can filter the types according to a specific country or Universal (for all countries). In addition, you can sort the Data Types in ascending or descending alphabetical order according the the category or name, or according to the country.

When you add multiple Data Types to a profile, select the relationship between them:

• Any (OR) - Match only one of the Data Types in the profile

• All (AND) - Match all the Data Types in the profile (otherwise, the rule with this profile is ignored)

A Data Control rule can contain up to 20 Data Types across all Content Profiles.

When you configure a Content Profile, optionally enable OCR scanning for the profile.

To create a DLP Content Profile:

1. From the navigation menu, select Security > Data Types & Profiles, and in the DLP Profiles tab select Content Profile.

2. Click New.

   The Add Content Profile panel opens.

3. Create the profile and add the Data Types.

4. Optionally, select OCR Scan Enabled for the profile.

5. Click Apply and then click Save.

Viewing the Data Types

The Data Types page shows all the Data Types that you can add to a profile. This lets you research and understand more about specific Data Types that you are using in your organization. The catalog also shows the Threshold for each data type, indicating the minimum number of occurrences to activate the data type. For more about data type thresholds, see Working with Custom Data Types for DLP.

To show the Data Types:

• From the navigation menu, select Security > Data Types & Profiles,, and click the Data Types tab.

DLP File Requirements

Files up to 50 MB are supported. The supported file types are listed below (Audio, video, and binary files are not supported).