Fortinet Gate 60D, Руководство администратора

Страница: 511 / 706

Data Leak Prevention DLP Sensors
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
511
http://docs.fortinet.com/ • Feedback
Data Leak Prevention
The FortiGate data leak prevention (DLP) system allows you to prevent sensitive data
from leaving your network. You can define sensitive data patterns, and data matching
these patterns will be blocked and/or logged or archived when passing through the
FortiGate unit. The DLP system is configured by creating individual rules, combining the
rules into DLP sensors, and then assigning a sensor to a protection profile.
Although the primary use of the DLP feature is to stop sensitive data from leaving your
network, it can also be used to prevent unwanted data from entering your network and to
archive some or all of the content passing through the FortiGate unit.
This section describes how to configure the DLP settings.
If you enable virtual domains (VDOMs) on the Fortinet unit, data leak prevention is
configured separately for each virtual domain. For details, see
“Using virtual domains” on
page 103 .
The section describes:
• DLP Sensors
• DLP Rules
• DLP Compound Rules
DLP Sensors
DLP sensors are simply collections of DLP rules and DLP compound rules. Once a DLP
sensor is configured, it can be specified in a protection profile. Any traffic handled by the
policy in which the protection profile is specified will enforce the DLP sensor configuration.
Viewing the DLP sensor list
To view the available DLP sensors, go to UTM > Data Leak Prevention > Sensor .
Figure 337: DLP sensor list
Create New Select to create a new DLP sensor.
Name The DLP sensor name.
Comment The optional description of the DLP sensor.
Protection Profiles The names of the protection profiles in which the DLP sensor is
specified are listed.
Delete and Edit icons Delete or edit the DLP sensor.