Creating file metadata data pattern

The File Metadata data pattern type allows you to specify the exact inherent metadata and value you wish to match on.

These are the default metadata properties of the file and not the custom metadata tags applied by classification systems (those are by default part of a DLP scan and will trigger on a Simple Data Pattern).

Steps

  1. Navigate to Protect > Objects > DLP Objects.
  2. Click the green plus icon and select File Metadata to create the data pattern.




  3. On the General tab, enter the name and description of the data pattern. Then, click the Match Criteria tab to display the match criteria.


  4. On the Match Criteria tab, one of the main differences you will see compared to setting up other data patterns is an option to upload a file.
    When uploaded, Forcepoint ONE SSE will provide the results of all of the metadata that file contains. You can use this information to help you configure the actual property and value you wish to match on.
  5. Enter the property name (the actual metadata field name) and the value that it contains that you wish to match. You can click on any of the results to automatically populate the property field. You will need to know and enter the value manually (for example Content-Type: KBA).


  6. To save the data pattern, click OK.
  7. (Optional) Click on the Test Pattern tab to verify if pattern was configured properly.


    1. Upload a file to see if your pattern was configured properly.
    2. To trigger test on your example, click Test.

      A verdict is also displayed on the bottom of the dialog indicating whether or not the content successfully matches the pattern.