Data filtering enables the firewall to detect sensitive information—such as credit card or social security numbers or internal corporate documents—and prevent this data from leaving a secure network. Before you enable data filtering, select Objects > Custom Objects > Data Patterns to define the type of data you want to filter (such as social security numbers or document titles that contain the word “confidential”). You can add several data pattern objects to a single Data Filtering profile and, when attached to a Security policy rule, the firewall scans allowed traffic for each data pattern and blocks matching traffic based on the data filtering profile settings.
Shared (Panorama only)
• Every virtual system (vsys) on a multi-vsys firewall. If you clear this selection, the profile will be available only to the Virtual System selected in the Objects tab.
• Every device group on Panorama. If you clear this selection, the profile will be available only to the Device Group selected in the Objects tab. Disable override (Panorama only) Add an existing data pattern to use for filtering or select New to configure a new data pattern object (Objects > Custom Objects > Data Patterns).
• Choose any to apply the filter to all of the listed applications. This selection does not block all possible applications, just the listed ones.
• Click Add to specify individual applications.
• Choose any to apply the filter to all of the listed file types. This selection does not block all possible file types, just the listed ones.
• Click Add to specify individual file types.