Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Create New DLP Rule Templates

  1. Click the DLP Rule Templates tab and click New.
  2. Enter a Rule Name (required) and a Description (optional).
  3. Select DLP Rules as the rule type and click Next.
  4. Select a Rule Template from the prompt.
    Then, perform either of the following steps.
    1. If you selected a predefined rule template, the Rule Type and values are filled in.
    2. If you selected the Custom Content Rule template, select a Rule Type and the accompanying value for that type.
      The options are:
      • Composite -- Select a unique name (for example, VIN, SSN, or Phone).
      • Dictionary - Select a keyword list (for example, US: SSN), a match count, and (optional) a

        unique match count. See Match Count and Unique Match Count for details.

      • Regex Pattern - Select a regular expression (regex pattern) and a match count.

        The match count can be any value between 1 and 50. The match count indicates the minimum number of violating tokens to be considered for a violation.

        Whatever match count you specify, the DLP engine detects up to 50 violating tokens and takes the actions you have configured (for example, highlighting, masking, redacting, and so on).

        If you select Dictionary, for XML files the attribute you choose must have a value in order for the DLP engine to recognize it as a match. If the attribute is specified but has no value (example: ScanComments=""), it does not match.

  5. Click Next and review the summary information for the DLP rule template.
  6. Click Confirm to create and save the new template or click Previous to make any corrections needed.

    If a template is deleted, the indicated action will no longer be allowed unless the associated policies are disabled or replaced with a different template.