Supported File and Form Types

The Data Loss Prevention policy can monitor or block the data being uploaded to the web. The policy discovers and protects the sensitive data contained in your cloud-sanctioned applications. The DLP scans the plain text of files up to 50 MB. DLP scans archives as well as files containing embedded files; for these, DLP can extract and scan content for up to 100 files nested up to 10 levels deep. Umbrella scans all files uploaded through the Umbrella SWG proxy that match the Real Time rules’ criteria, as well as the files stored in the Umbrella authorized cloud tenants and performs a deeper analysis for the following mime types:

^* EMF and WMF are both wrapper file types. In DLP reports these files will display as the types of the files they contain — PNG, or JPG.

The Real Time DLP rules can scan the content of all applicable web requests of the following form types:

• JSON
• XML
• URL encoded
• Multipart form

📘

Note:

The DLP engine decompresses and scans 10 levels of sub-folders in the zipped and archive file types for both Realtime and SaaS API DLP.

📘

Note:

Optical Character Recognition (OCR) supports scanning and extracting data from images in jpeg, jpg, gif, png, and tiff formats; and images embedded in various files, such as Excel spreadsheets, PowerPoint presentations, Word documents, PDFs and ZIP files. Umbrella supports scanning images with a minimum resolution of 300 dpi and a minimum font size of 10 points. The text extracted from these files is scanned for violations.

The DLP scanning process does not reliably detect colored text or text highlighted with colors in OCR images. DLP violations within such text may escape detection.

Currently only the English language is supported.

---

Enable or Disable a Data Loss Prevention Rule < Supported File and Form Types > Manage the Firewall Policy