IronPort - Configuration Guide - AsyncOS 7.6.1

Chapter 11 Data Loss Prevention
ABA Routing Number
US Drivers License
OL-25136-01
The ABA Routing Number classifier is similar to the Credit Card Number classifier.
Examples:
119999992 (No match because of no supporting information)
routing 119999992 account 1234567 (Match)
Several DLP policy templates use the US Drivers License classifier. This classifier contains a separate
set of detection rules for each US state and the District of Columbia. You can selectively enable or
disable states that are not important for your organization’s policies by clicking the link for US Drivers
Licenses under Advanced Settings in the DLP Policy Manager.
Note A predefined DLP policy template for a specific state, such as California SB 1386, uses the detection
rules for all states and will return a DLP violation for data with a non-California driver license because
it is still considered a privacy violation.
The individual state classifiers match against the patterns for that state, and requires the corresponding
state name or abbreviation, and additional supporting data.
Examples:
US National Provider Identifier
Student Records
CA DL: C3452362 (Match because it has the correct pattern for the number and supporting data)
California DL: C3452362 (Match)
DL: C3452362 (No match because there is not enough supporting data)
California C3452362 (No match because there is not enough supporting data)
OR DL: C3452362 (No match because it is the incorrect pattern for Oregon)
OR DL: 3452362 (Match because it is the correct pattern for Oregon)
WV DL: D654321 (Match because it is the correct pattern for West Virginia)
WV DL: G6543 (No match because it is the incorrect pattern for West Virginia)
The US National Provider Identifier classifier scans for a US National Provider Identifier (NPI)
numbers, which is a 10-digit number with a check digit.
Examples:
NPI: 3459872347 (Match for NPI)
3459872347 (No match because of no supporting information)
NPI: 3459872342 (No match because of incorrect check digit)
The predefined FERPA (Family Educational Rights and Privacy Act) DLP policy template uses the
Student Records classifier. Combine it with a customized Student Identification Number classifier to
detect specific student ID patterns for better accuracy.
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
11-23