IronPort - Configuration Guide - AsyncOS 7.6.1

Classifier Examples
Credit Card Number
US Social Security Number
11-22
Table 11-1 Logarithmic Scale for Calculating the Risk Factor
Rule Scores Risk Factor
30 30
50 40
100 50
150 60
300 70
500 80
1000 90
10000 100
The following examples show how classifiers match message content.
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
Chapter 11 Data Loss Prevention
Several DLP policy templates include the Credit Card Number classifier. The credit card number itself
is subject to various constraints, such as the pattern of digits and punctuation, the issuer-specific prefix,
and the final check digit. The classifier requires additional supporting information to make a match, such
as a second credit card number, an expiration date, or the name of the card issuer. This reduces the
number of false positives.
Examples:
4999-9999-9999-9996 (No match because of no supporting information)
4999-9999-9999-9996 01/09 (Match)
Visa 4999-9999-9999-9996 (Match)
4999-9999-9999-9996 4899 9999 9999 9997 (Match because of more than one credit card number)
The US Social Security Number classifier requires a properly formatted number as well as supporting
data, such as a date of birth, name, or the string SSN.
Examples:
321-02-3456 (No match because of no supporting information)
321-02-3456 July 4 (Match)
321-02-3456 7/4/1980 (Match)
321-02-3456 7/4 (No match)
321-02-3456 321-02-7654 (Match because of more than one SSN)
SSN: 321-02-3456 (Match)
Joe Smith 321-02-3456 (Match)
321-02-3456 CA 94066 (Match)
OL-25136-01