Data Leak Protection, searching for passwords.

[Lee_Duque]

Does anyone use data filtering for passwords discovery? Basically i want to know and stop if possible when someone logs into their external email service like Google Email and upload say a passwords.txt file full of usernames and passwords OR inputs in the body of the email usernames and passwords and sends it out. I also use Websense which is more mature in the DLP area and has built in password discovery RegeX formulas and such which works fairly well. I wanted to see if PANs have something similar or if someone has this setup and would like to share any RegEx formulas for password discovery?

[pulukas]

As you have seen there are no built in features for this.  But if you are able to see the regex formulas from other sources these can be added to the DLP filter.

With web based email remember that most of these will be an ssl connection so you would need to decrypt the traffic in order to do the inspection.

[panos]

you can use decrypt mirror for ssl traffic but you have to use another dlp solution.