What are the parameters that determine how far apart EDM keyword matches can be in order to trigger a policy?
search cancel

What are the parameters that determine how far apart EDM keyword matches can be in order to trigger a policy?

book

Article ID: 159451

calendar_today

Updated On:

Products

Data Loss Prevention Network Monitor Data Loss Prevention Enforce Data Loss Prevention Network Discover Data Loss Prevention Network Protect Data Loss Prevention Endpoint Discover

Issue/Introduction

When looking for two elements in a EDM, such as Name and SSN, what is the Symantec DLP setting that defines the proximity of EDM tokens to be considered a match?

Resolution

The following settings in the Advanced Server Page determine the proximity of EDM tokens.
 
EDM.RunProximityLogic 
If this value is true, then DLP uses the token proximity check.
  • If EDM.RunProximityLogic = false it will match based on the entire document without proximity.
  • If EDM.RunProximityLogic = true it will only match within the proximity range.
  • The free-form (a.k.a. simple) text proximity is defined by EDM.SimpleTextProximityRadius setting.
  • The tabular text proximity is defined by belonging to the same table row.
 
EDM.SimpleTextProximityRadius 
This is the number of tokens to the left and to the right of the current token that are evaluated together when the proximity check is enabled.