Forum Discussion
PenTestPatrick
Dec 15, 2023Copper Contributor
Use Endpoint DLP to block uploads
Hello, I am trying to block files from being uploaded to specific domains using Endpoint DLP. I have added several domains to the Service Domain section of DLP and set it to Block. I have also ad...
ViktorMalum
Jun 27, 2024Copper Contributor
i would like to share my experience configuring and testing DLP policy
from what i understand, you need to use the "Content is not labeled" condition inside the DLP policy and you need to define the file extensions which imo is not that helpful because of the numerous amount of file extensions available out there and it's impossible to manually define one by one within the DLP policy
i've also experienced where the action of copy and paste of pictures to restricted domain for example gmail is not blocked but dragging and dropping and manually uploading from gmail were blocked
from what i understand, you need to use the "Content is not labeled" condition inside the DLP policy and you need to define the file extensions which imo is not that helpful because of the numerous amount of file extensions available out there and it's impossible to manually define one by one within the DLP policy
i've also experienced where the action of copy and paste of pictures to restricted domain for example gmail is not blocked but dragging and dropping and manually uploading from gmail were blocked
- Nam_Hoang_HaiJul 25, 2024Copper ContributorHi all,
I also encountered the same problem when using DLP Endpoint to block file uploads, there is no way to completely prevent it, even with domain & browser, DLP Endpoint can not prevent copy & paste files and sending them to websites such as telegram, discord, ...