000032648 - How to make RSA DLP detect encrypted files

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000032648
Applies ToRSA Product Set: DLP
RSA Product/Service Type: Enterprise Manager
RSA Version/Condition: 9.6 SP2
Platform: Windows
ResolutionThe DLP can detect and report encrypted message or file, but it cannot decrypt it and its content cannot be extracted or analysed.
You can configure a DLP policy to create an event whenever an encrypted message or file is encountered. Content blades in the policy have no effect because no content analysis can be done on encrypted content.
To enable this detection, please select File is encrypted in the File Attributes dialog box on the Network, Endpoint, or Datacenter tab of the New/Edit Policy page.
User-added image