Hi Devin, and thank you for your videos, very helpful content. I have a question, is there an option to send email alerts in case of a DLP event gets triggered? I have FortiOs 6.0.5 but can´t find anything useful thanks again!
Hi Antonio, its been a while since I've done DLP. If I remember right, when you configure the DLP sensor, you associate it with a threat level. From there you can use that level or the DLP security events in the Logging section of the FortiOS. If you don't see the option to email, try configuring an email server first in the system settings.
Another option is message type which stands for a type of file regardless of its name. And the most effective to do DLP is known as fingerprinting. This chunks the files and write signatures based off of those chunks therefore it can detect files that have been renamed and to some degree changed. You can read more about it in the fortiOS manual but it's pretty slick! I thought I had additional videos on that too so check the playlist to see if I haven't already recorded examples. Good luck my friend!
Great explanation !!!
Hi Devin, and thank you for your videos, very helpful content. I have a question, is there an option to send email alerts in case of a DLP event gets triggered? I have FortiOs 6.0.5 but can´t find anything useful
thanks again!
Hi Antonio, its been a while since I've done DLP. If I remember right, when you configure the DLP sensor, you associate it with a threat level. From there you can use that level or the DLP security events in the Logging section of the FortiOS. If you don't see the option to email, try configuring an email server first in the system settings.
Hi, what if the file types that I want monitored or blocked are not on the list, is there a way to add them?
How can we prevent leaking files over https?
He will tell soon I'm just his kid
Very nice , but how to overcome the renaming of files . ?
How to protect data even if the file is renamed ?
Another option is message type which stands for a type of file regardless of its name. And the most effective to do DLP is known as fingerprinting. This chunks the files and write signatures based off of those chunks therefore it can detect files that have been renamed and to some degree changed. You can read more about it in the fortiOS manual but it's pretty slick! I thought I had additional videos on that too so check the playlist to see if I haven't already recorded examples. Good luck my friend!