Data Loss Prevention

 View Only
  • 1.  DLP Endpoint - Blocking Zip Files

    Posted May 27, 2024 12:10 AM

    Hi Team,

    How do i block files that is zipped via DLP Endpoint.

    I need advice on how to prevent DLP Endpoint to block ZIP/winrar/7zip?

    Thank you



  • 2.  RE: DLP Endpoint - Blocking Zip Files

    Broadcom Employee
    Posted May 31, 2024 03:35 PM
    Edited by Jesse Gonzales May 31, 2024 03:55 PM

    Hi there,

    Can you expand on your question just a bit? Like blocking encapsulated from being sent via email, web upload, network share? 

    What you can do is use a detection rule for File Type and select the file types that suit your need. Then add an "Also Match" rule to include Protocol or Endpoint Monitoring. Keep in mind, you will also need to enable the monitoring within your agent configuration, too (last screenshot).

    Here are a couple of screenshots to use as a suggestion or perhaps a starting point.