Data Loss Prevention Endpoint PreventData Loss Prevention Network MonitorData Loss Prevention Network Prevent for EmailData Loss Prevention Network DiscoverData Loss Prevention Endpoint Discover
Issue/Introduction
IDM matching for large files
Resolution
DLP handles large IDM files as follows:
Less than 30 MB: DLP will match using its standard IDM technology, and inspect everything.
More than 30 MB:
If DLP can crack the file, it will treat the whole file as normal, and match using its standard IDM technology.
If DLP cannot crack the file (the most likely scenario), then DLP will truncate the file at 30 MB and treat that first 30MB as part of the normal IDM processing. DLP will then do an exact match on the remainder (like it was an image).