Netskope Global Technical Success (GTS)

Real-Time Detection of Sensitive Information Using DLP - OCR

Netskope Cloud Version - 120

Objective

Detect Sensitive Information Using OCR Capabilities with Netskope DLP in Real-Time Policies

Prerequisite

Netskope Advanced DLP must be licensed, and you should also request to activate the 'OCR for Inline Protection' feature. Please contact your CSM or open a ticket with the GTS team for assistance.

Context

The customer wishes to detect sensitive information such as PII, PCI, or others in images using Netskope's DLP engine with the OCR feature.

Configuration

Initially, it is important to understand that once OCR for Inline is enabled in the tenant, this is a passive configuration. This means that it is not necessary to create a specific configuration for OCR to detect sensitive information. 

From now on, all existing DLP policies, with their DLP profiles and rules, will also evaluate sensitive information in images using Netskope’s OCR technology. 

Below is a use case that reviews, step-by-step, how this works and how it can be tested for different use cases. 

• Here is the configuration of the DLP rule. 

Note: some predefined identifiers were selected to capture various types of sensitive information such as birth dates, SSNs, cards, financial terms, etc

• Here is the configuration of the DLP Profile. 

• This is how the real-time policy configuration would look. 

After testing the upload of sensitive information, in this case to Google Drive, this is the alert in Skope IT and in DLP Incidents. For this use case, a screenshot of sample information obtained from dlptest.com was taken. The screenshot (OCR Image Sample.png) used for this exercise is provided below:

• Skope IT Alert:

• DLP Incident:

Lastly, as a recommendation and best practice, it is advised to customize DLP rules. Use existing predefined configurations as a base to build your own rules and identifiers. 

We are also sharing several valuable resources to enhance knowledge and expertise in DLP.

• Level - Beginner - Data Governance & Reporting options 
• Level - Intermediate - DLP as business strategy driven Program 
• Level - Advanced - Best Practices & Deep-dive: Netskope DLP 

Terms and Conditions

• All documented information undergoes testing and verification to ensure accuracy.
• In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.

Notes

• This article is authored by Netskope Global Technical Success (GTS).
• For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.