(Draft) Blocked Password-Protected File Types for Real Time Rules

The Data Loss Prevention policy can monitor or block data being uploaded to the web. The policy discovers and protects the sensitive data contained in your cloud-sanctioned applications. Umbrella scans all files uploaded through the Umbrella SWG proxy that match the Real Time rules’ criteria, as well as the files stored in the Umbrella authorized cloud tenants and performs a deeper analysis.

Once the Block Password-Protected File Upload feature is enabled for a customer, it will apply to any destination configured with Realtime DLP (i.e. inline) rules. Customers who wish to prevent all password protected file uploads should have at least one Realtime DLP rule that has ‘All Destinations’ set in the Destination rule criteria.

Conversely, customers who only wish to block password protected file uploads to specific destinations should make sure they do not have a Realtime DLP rule that has ‘All Destinations’ set in the Destination rule criteria.

NOTE: Destination exclusions in Realtime DLP rules will not apply to the Block Password Protected File Upload and will still apply to all destinations.

Blocked Password Protected File Types for Real Time Rules

Real Time rules in the Data Loss Prevention Policy can block any password protected file of the one of the types listed in the following table. Only the destination active in the rule will block password protected uploads.

👍

Limited Availability

Blocking password protected files is currently in limited availability. To get access to this functionality, please contact Cisco Umbrella Support.

---

Enable or Disable a Data Loss Prevention Rule < Supported File and Form Types >