How to make RSA DLP detect encrypted files
2 years ago
Originally Published: 2016-02-29
Article Number
000056261
Applies To
RSA Product Set: DLP
RSA Product/Service Type: Enterprise Manager
RSA Version/Condition: 9.6 SP2
Platform: Windows

 
Resolution
The DLP can detect and report encrypted message or file, but it cannot decrypt it and its content cannot be extracted or analysed.
You can configure a DLP policy to create an event whenever an encrypted message or file is encountered. Content blades in the policy have no effect because no content analysis can be done on encrypted content.

To enable this detection, please select File is encrypted in the File Attributes dialog box on the Network, Endpoint, or Datacenter tab of the New/Edit Policy page.

User-added image