Skip to main content

Welcome to Skyhigh Security!

Skyhigh Security

About Sanctioned DLP Policy Rules and Rule Groups

  1. Last updated
  2. Save as PDF

The Sanctioned DLP Policy Rules section defines the match criteria for a policy violation. There are several different types of rules that can be combined using Boolean logic. Boolean logic is supported through Rule Groups. All rules in a group are logically combined with an AND operator.  All rules must match within the group. Multiple Rule Groups can be named, defined, and combined logically with an OR operator. This means any group within a policy must match the policy to be triggered.  

IMPORTANT: Skyhigh Security does not support importing or exporting policies or policy templates that include more than 50 rule groups or that exceed 64 KB in size, whichever limit is reached earlier.

Rule Groups are assigned by Severity: Warning, Info, Minor, Major, or Critical. This allows you to conditionally execute different response actions based on the triggered Rule Group.

IMPORTANT: When you create DLP policy or add exceptions, if you add certain reserved SQL keywords, such as "Select", "Update", or "Delete", they appear with the first letter masked, as "#elect", "#pdate", or "#elete." This is a security feature of the GWT framework in Java. The workaround is to add the file name to a Policy Dictionary and add the dictionary as an exception rule.

There are several Rule types that can be added to a policy, including: