To be honest this feature is a bust in my opinion. We were primarily interested in applying it to web-based e-mail both in the body and for attachments. Using documentation from this forum I created a custom regex pattern for Credit Cards- such as - .*((Credit Card)|(VISA card)|(Visa card)|(Debit Card)).*([0-9][0-9][0-9][0-9].[0-9][0-9][0-9][0-9].[0-9][0-9][0-9][0-9].[0-9][0-9][0-9][0-9]) then applied it to my rule that allowed web-based e-mail and it sort-of, kind-of worked. It worked for attachments for some applications but not others - I never got it to work for FTP at all. Be warned: we have since completely removed the Custom Pattern above when it blew up our upgrade from 3.x to 4.x. The escalation engineer said it was crap and that we should not use a Custom Filter like that (remember, I found it in this forum.) We never expected it to be DLP, but we were really counting on it for policing web-based e-mail - so we've had to blocked web-based e-mail for 99% of our employees Craig W
... View more
