DLP Endpoint - Blocking Zip Files

[Asogan Perumal]

Hi Team,

How do i block files that is zipped via DLP Endpoint.

I need advice on how to prevent DLP Endpoint to block ZIP/winrar/7zip?

Thank you

[Jesse Gonzales]

Hi there,

Can you expand on your question just a bit? Like blocking encapsulated from being sent via email, web upload, network share? 

What you can do is use a detection rule for File Type and select the file types that suit your need. Then add an "Also Match" rule to include Protocol or Endpoint Monitoring. Keep in mind, you will also need to enable the monitoring within your agent configuration, too (last screenshot).

Here are a couple of screenshots to use as a suggestion or perhaps a starting point.