
VMware, Inc. 71
Chapter 8 vShield Data Security Configuration
lastModifiedBefore–scanonlyfilesmodifiedbeforethespecifieddate.Thedatemustbespecifiedin
GMTformat(YYYY‐MM‐DDHH:MM:SS).
lastModifiedAfter–scanonlyfilesmodifiedafterthespecifieddate.Thedatemustbespecifiedin
GMTformat(YYYY‐MM‐DDHH:MM:SS).
extensionsIncluded–BooleanvalueasinTable 8‐1.
ThescanAllFilesparameterdeterminesifallfilesshouldbeinspectedduringascanoperation.This
parameteroverridesallotherparameters,sosetthisparametertofalseifyouareconfiguringafilter.
Example 8-7. Scan only PDF and XLXS files modified after 10/19/2011
Request:
PUT https://<vsm-ip>/api/2.0/dlp/policy/FileFilters
<FileFilters>
<scanAllFiles>false</scanAllFiles>
<lastModifiedAfter>2011-10-19 15:16:04.0 EST</lastModifiedAfter>
<extensionsIncluded>true</extensionsIncluded>
<extensions>pdf,xlsx</extensions>
</FileFilters>
Example 8-8. Scan all files except PDF and XLXS files
Request:
PUT https://<vsm-ip>/api/2.0/dlp/policy/FileFilters
<FileFilters>
<scanAllFiles>false</scanAllFiles>
<extensionsIncluded>false</extensionsIncluded>
<extensions>pdf,xlsx</extensions>
</FileFilters>
Example 8-9. Scan PDF and XLXS files that are less than 100 MB in size
Request:
PUT https://<vsm-ip>/api/2.0/dlp/policy/FileFilters
<FileFilters>
<scanAllFiles>false</scanAllFiles>
<sizeLessThanBytes>100000000</sizeLessThanBytes>
<extensionsIncluded>true</extensionsIncluded>
<extensions>pdf,xlsx</extensions>
</FileFilters>
Saving and Publishing Policies
Afteryouhavedefinedadatasecuritypolicy,youcanedititbychangingtheregulationsselected,areas
excludedfromthescan,orthefilefilters.Toapplytheeditedpolicy,youmustpublishit.
Retrieve the Saved SDD Policy
Asabestpractice,youshouldretrieveandreviewthelastsavedSDDpolicybeforepublishingit.Eachpolicy
containsarevisionvaluethatcanbeusedtotrackversionhistory.
Table 8-2. Included extensions parameter
Value of the extensionsIncluded parameter Result
truefollowedbytheextensionsparameter
containingoneormoreextensions
Onlyfileswiththespecifiedextensionsarescanned
falsefollowedbytheextensionsparameter
containingoneormoreextensions
Allfilesarescannedexceptthosewiththespecifiedextensions.
Comentarios a estos manuales