Help with Exclude Pattern in Content Matching

Unanswered Question
May 3rd, 2012

C170 Appliance.  I have a DLP policy to try to stop account numbers that are not encrypted.  We have a regular expression with proximity configured.  However, we are getting a lot of false positives on telephone numbers.  Example:  Susie Smith, Member Services PH: 487-555-1212 results in a positive hit.

Does anyone have an example I can use to exclude telephone numbers?  A mitigating issue is that I am already using an exclude pattern for dollar figures such as $1,500.34  that seems to be working.  Money & phone numbers make the bulk of the false positives.

RULES

All Rules Match:

Regular expression pattern:

[1-9]{3}|[1-9]{4}|[1-9]{5}|[1-9]{6}|[1-9]{9}|[1-9]{10}

Exclude pattern:

\$[1-9]{1}|\$[1-9]{2}|\$[1-9]{3}|\$[1-9]{1}\,[1-9]{3}|[1-9]{2}\,[1-9]{3}|[1-9]{3}\,[1-9]{3}

Words or Phrases:

Account

acct

number

loan, etc. etc.

10 Weight     100 Max Score

Any suggestions greatly appreciated.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)

Actions

Login or Register to take actions

This Discussion

Posted May 3, 2012 at 11:34 AM
Stats:
Replies:0 Avg. Rating:
Views:798 Votes:0
Shares:0

Related Content

Discussions Leaderboard