DLP Policy to Block Uploading the file type on Web (HTTP/HTTPS)

Overview

DLP is nothing but Data Loss Prevention module in Safequid which secure your vital information and prevent data leaks on-premise. You can use DLP to restrict end users from sending sensitive or critical information outside the corporate network.

You can achieve this simply by blocking the specific file type(s) based on predefined content type(s).

Prerequisite

HTTPS Inspection should be enabled in SafeSquid. If not enabled, you can check our document - How to enable HTTPS Inspection

Restart SafeSquid service twice from SafeSquid Interface if it is a fresh installation of  SafeSquid Appliance Builder (SAB) after activation of the product. LINK

Note: When the activation of SafeSquid Appliance Builder (SAB) is done, Restart SafeSquid Service prompt should appear on SafeSquid UI. After restarting SafeSquid service lib-magic library file still doesn't exist, which you can verify from SafeSquid logs. To obtained the status 'libmagic: ok' you have to Restart SafeSquid Service once again from SafeSquid Interface. LINK

Access the SafeSquid User interface

Search Policy : Block Uploads There are two ways to search any keyword or policy. Here we are using predefined Profile 'block uploads' created in Access Profiles section. You can check the 'block uploads' profile getting applied in extended logs.

Search Policy : Method 1 You can search the keyword or profile name from Restriction Policies >> Access Profiles. You have to check the each and every Policies and profiles one by one from top to bottom. Search Policy : Method 2 Click on Search Icon situated on bottom left corner of SafeSquid Interface.

Go to DLP Section Configuration

Select Global Section of DLP as Enabled with TRUE

Configure DLP Policy

Save Configuration

You can save the current configuration to either in your local machine or to cloud. Storing configuration to cloud help you to restore your configuration in other instances.

Note: Creating / Using(predefined) profiles while creation of new rule will be helpful for capturing logs. In future these logs can be helpful to identify general operational details and security concerns.