You can protect sensitive data using the Exact data matching (EDM) feature. Sensitive data or data records you want to protect must be saved in the form of .csv file and used as classifications to match data for any violation.
The feature in Trellix DLP Discover supports exact data matching on File Server, SharePoint, Box, and Database repositories.
Trellix DLP Network Prevent appliances support scanning emails and web posts with EDM. Trellix DLP Network Monitor appliances support scanning emails, web posts, and network traffic with EDM.
Data records are stored in CSV files as rows of data where the cells in each row are related, for example:
First name | Last name | Phone | |
|---|---|---|---|
John | Doe | 871-555-5555 | j.doe@google.com |
When you add an exact data match condition to a classification definition, apply that classification to the uploaded files and create an EDM package. Trellix DLP makes the EDM package available for classification and remediation scans.
Upload CSV files with the data records that you want to protect from being leaked.
In ePO - On-prem, select Menu → Data Protection → Classification.
On the Register Documents tab, select Exact Data Fingerprints from the Type drop-down list.
Click Add EDM datasource and then click Previous EDM solution.
Select a CSV or .zip file to upload, then click OK.
For uploads with more than 100,000 records, click the executable link to open the CSV2Fingerprints.exe utility and generate the fingerprints.zip file.
Create or add an exact data match condition.
In ePO - On-prem, select Menu → Data Protection → Classification.
Optional: Create a classification — select Actions → New Classification in the classifications list.
You can also add an EDM condition to an existing classification.
Select Actions → New Content Classification Criteria.
From the Data conditions list, select Exact Data Matching and select Using.
Click the choose icon (
.gif)
) next to the Value field.The Exact Data Fingerprints Match Criteria page appears.
.png)
Click the choose icon and select a CSV file from the list of files you uploaded. Fill in the match criteria and number of records to match. Click OK.
Create the package. On the Register Documents tab, select Exact Data Fingerprints from the Type drop-down list. Click Actions and click Create Package.
All uploaded documents are added to the package, and the package is copied to the network evidence share folder.