topic Functioning DLP Policies in General Topics https://live.paloaltonetworks.com/t5/general-topics/functioning-dlp-policies/m-p/34374#M25226 <HTML><HEAD></HEAD><BODY><P>Has anyone implemented DLP on the Palo Alto firewalls that actually provides consistent results? I am struggling to get even something as simple as a regular SSN# to log and alert every time. I am using the built in regex for SSN and SSN without dashes and have SSL decryption running on the traffic. I will upload 8 or 9 files each with a separate SSN# and 3 of them will show up in the logs with odd file names like "=?UTF-8?Q?Tim_-_WebUpload=5fSSN_Test_-_.txt?=. The others won't log anything, but it almost always kicks out a file name of "document.xml.rels" as another log.</P><P></P><P>Any ideas?</P></BODY></HTML> Wed, 29 Jan 2014 17:57:59 GMT tim123 2014-01-29T17:57:59Z Functioning DLP Policies https://live.paloaltonetworks.com/t5/general-topics/functioning-dlp-policies/m-p/34374#M25226 <HTML><HEAD></HEAD><BODY><P>Has anyone implemented DLP on the Palo Alto firewalls that actually provides consistent results? I am struggling to get even something as simple as a regular SSN# to log and alert every time. I am using the built in regex for SSN and SSN without dashes and have SSL decryption running on the traffic. I will upload 8 or 9 files each with a separate SSN# and 3 of them will show up in the logs with odd file names like "=?UTF-8?Q?Tim_-_WebUpload=5fSSN_Test_-_.txt?=. The others won't log anything, but it almost always kicks out a file name of "document.xml.rels" as another log.</P><P></P><P>Any ideas?</P></BODY></HTML> Wed, 29 Jan 2014 17:57:59 GMT https://live.paloaltonetworks.com/t5/general-topics/functioning-dlp-policies/m-p/34374#M25226 tim123 2014-01-29T17:57:59Z Re: Functioning DLP Policies https://live.paloaltonetworks.com/t5/general-topics/functioning-dlp-policies/m-p/34375#M25227 <HTML><HEAD></HEAD><BODY><P>CC numbers in the following document were tried and we could see it being identified by the firewall, </P><P><A _jive_internal="true" href="https://live.paloaltonetworks.com/docs/DOC-3366">https://live.paloaltonetworks.com/docs/DOC-3366</A></P></BODY></HTML> Wed, 29 Jan 2014 19:59:21 GMT https://live.paloaltonetworks.com/t5/general-topics/functioning-dlp-policies/m-p/34375#M25227 sraghunandan 2014-01-29T19:59:21Z