From a388527cb790246869601decb9514e73413c2303 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Fri, 15 Nov 2024 14:51:22 -0600 Subject: [PATCH 1/2] Update example policy --- .../policies/data-loss-prevention/dlp-policies/index.mdx | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/index.mdx b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/index.mdx index 15114a2022c5221..903cb2c889fb1dc 100644 --- a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/index.mdx +++ b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/index.mdx @@ -33,10 +33,11 @@ DLP Profiles may be used alongside other Zero Trust rules in a [Gateway HTTP pol 3. Build an [HTTP policy](/cloudflare-one/policies/gateway/http-policies/) using the [DLP Profile](/cloudflare-one/policies/gateway/http-policies/#dlp-profile) selector. For example, the following policy prevents users from uploading sensitive data to any location other than an approved corporate application: - | Selector | Operator | Value | Logic | Action | - | ------------ | -------- | ------------------------------ | ----- | ------ | - | DLP Profiles | in | `U.S. Social Security Numbers` | And | Block | - | Application | not in | `Workday` | | | + | Selector | Operator | Value | Logic | Action | + | ----------- | -------- | -------------------------------------------------------- | ----- | ------ | + | DLP Profile | in | _Social Security, Insurance, Tax, and Identifer Numbers_ | And | Block | + | HTTP Method | in | _POST_ | And | | + | Application | not in | _Workday_ | | | 4. Select **Create policy**. From 900954671a69fe93202127418c426b4e3f4aa581 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Fri, 15 Nov 2024 14:56:10 -0600 Subject: [PATCH 2/2] Update common policy style --- .../dlp-policies/common-policies.mdx | 28 +++++++++---------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/common-policies.mdx b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/common-policies.mdx index 4c676ded9900e2f..8f68b37b4f8f525 100644 --- a/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/common-policies.mdx +++ b/src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-policies/common-policies.mdx @@ -16,10 +16,10 @@ The following in-line DLP policies are commonly used to secure data in uploaded The **Allow** action functions as an implicit logger, providing visibility into where your sensitive data is going without impacting the end user experience. The following example scans for your enabled Financial Information profile entries when users upload or download data to file sharing apps. -| Selector | Operator | Value | Logic | Action | -| ---------------- | -------- | ----------------------- | ----- | ------ | -| DLP Profile | in | `Financial Information` | And | Allow | -| Content Category | in | `File Sharing` | | | +| Selector | Operator | Value | Logic | Action | +| ------------------ | -------- | ----------------------- | ----- | ------ | +| DLP Profile | in | _Financial Information_ | And | Allow | +| Content Categories | in | _File Sharing_ | | | @@ -29,11 +29,11 @@ For more information on what file formats DLP can scan, refer to [Supported file You can configure access on a per-user or group basis by adding [identity-based conditions](/cloudflare-one/policies/gateway/identity-selectors/) to your policies. The following example blocks only contractors from uploading/downloading Financial Information to file sharing apps. -| Selector | Operator | Value | Logic | Action | -| ---------------- | -------- | ----------------------- | ----- | ------ | -| DLP Profile | in | `Financial Information` | And | Block | -| Content Category | in | `File Sharing` | And | | -| User Group Names | in | `Contractors` | | | +| Selector | Operator | Value | Logic | Action | +| ------------------ | -------- | ----------------------- | ----- | ------ | +| DLP Profile | in | _Financial Information_ | And | Block | +| Content Categories | in | _File Sharing_ | And | | +| User Group Names | in | _Contractors_ | | | ## Exclude Android applications @@ -45,8 +45,8 @@ Many Android applications (such as Google Drive) use