Web DLP

Configuration Variable Data Type Description
proxy.config.dss.enabled INT

Default: 0

Enables (1) or disables (0) support for on- box Web DLP. See Working With Web DLP.

proxy.config.dss.AnalyzeFTP INT

Default: 1

When enabled (1), send native FTP upload file transfers to the on-box Web DLP policy engine for analysis.

proxy.config.dss. AnalyzeSecureContent INT

Default: 1

  • 0 sends decrypted traffic directly to its destination.
  • 1 sends decrypted traffic to Forcepoint DLP for analysis.
proxy.config.dss.analysis_ timeout INT

Default: 10000

The maximum length of time, in milliseconds, that a single file analysis can take before analysis is aborted.

proxy.config.dss.UsingLoginID INT

Default: 0

Enables (1) or disables (0) sending Login ID rather than full user name to Forcepoint DLP.

This variable must be added manually.

proxy.config.dss.domain_user_ format INT

Default: 0

When proxy.config.dss.UsingLoginID is enabled, enables (1) or disables (0) the domain/user format.

This variable must be added manually.

proxy.config.dss.large_file_ threshold INT

Default: 5 (MB)

Determines how large a file should be before a longer period of time than the current default of 10 seconds is given for analysis time. Files that exceed this size are give the time set in proxy.config.dss. analysis_timeout_for_large_file.

proxy.config.dss.analysis_ timeout_for_large_file INT

Default: 20 (seconds)

Determines the period of time given for file analysis to files that exceed the size set in proxy.config.dss.large_file_threshold.

proxy.config.dss_and_icap. enabled INT

Default: 0

Enables (1) the selection of both ICAP and Web DLP as integration options when Content Gateway is deployed with the DLP Module. Only one option can be selected when disabled (0).