Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Create a Fingerprint

  1. Last updated
  2. Save as PDF

You can create and use fingerprints for structured data or unstructured data. Structured, or Exact Data Matching (EDM) fingerprints, allow you to monitor your organization's documents in a row and column format typically extracted from a database in CSV format. Unstructured or Index Document Matching (IDM) fingerprints work by content-matching indexed documents and images. Once your data is fingerprinted, and you generate an index file, you can add a DLP Policy rule to leverage that indexed data. 

Create Structured Fingerprint

To create a Structured Fingerprint, select the required options:

Create Fingerprint (Legacy)

Create a Structured Data Fingerprint (Legacy Fingerprint) for data in CSV format. These fingerprints are evaluated per DLP policy to match against sensitive content in the cloud. You can only use Legacy Fingerprints with Skyhigh CASB.

  1. Go to Policy > DLP Policies > Fingerprints. 
  2. On the Fingerprints page, go to Create Fingerprint > Structured Fingerprint > Create Fingerprint.
  3. On the Create a Structured Fingerprint (Legacy) page, configure the following information:
    clipboard_eb491049cce0726c0e4895d9ef9089c36.png
    1. Fingerprint Name. Enter a name for the Legacy Fingerprint. 
    2. Source File. Enter the path to the source file that holds the data you want to fingerprint. For example:
    3. Location to store generated hashes. Enter the path to the folder where your locally generated hashed files are stored. Space allocated for this should be about 10–20% of the data size to be fingerprinted. For example:
    4. Column Separator. Select the delimiter that separates the columns of your source file: either Comma, Tab, or Pipe.  
    5. First row of file contains column names. Activate this checkbox if the first row of your source file contains column names. 
    6. Column. If the field names aren't automatically detected:
      • Enter the first Field Name for your source file.
      • Select the Field Type from the menu. Selections include:
        • Alphabetic. Alphabetic characters. 
        • Number. Numbers supported with decimals.
        • Alphanumeric. Alphanumeric characters. 
        • Zip Code. ##### or #####-####
        • Email. LOCAL_SUBPART ('.' LOCAL_SUBPART)* '@' DOMAIN_SUBPART ('.' DOMAIN_SUBPART)*;
        • Date. ##/##/#### or ##-##-####
        • Phone. (###)###-#### or ###-###-####
        • Credit Card Number. CCNs formatted with decimals, spaces, or underscores, separated by pipes or semicolons. 
        • Social Security Number. ###-##-####, or ### ## ####, or ###.##.###, separated by pipes or semicolons. 
        • Identifier. Letters and numbers with hyphens and decimals. 
        • Generic. Used for exact cell match. 
        • Do Not Index. Select this Field Type to mark the column as Do Not Index. (This option is available with DLP Integrator 4.1 and later.)
      • Click + to add as many Columns as required.
  4. Click Save. 

The new Legacy Fingerprint is created and appears on the Fingerprint page. You must now generate an index of the fingerprint to use it in a DLP Policy.

Create Enhanced Fingerprint

Create a Structured, or Exact Data Match (EDM) Enhanced Fingerprint for data in CSV format. You must then generate a structured index of the Fingerprint, and use it in a DLP policy to match against sensitive content to prevent sensitive information from leaving the organization. You can only use Enhanced Fingerprints with Web Gateway.

  1. Go to Policy > DLP Policies > Fingerprints. 
  2. On the Fingerprints page, go to Create Fingerprint > Structured Fingerprint > Create Enhanced Fingerprint.
  3. On the Create an Enhanced Structured Fingerprint page, configure the following information:
    clipboard_eb38b3ac7dff60517ec12553f4615142e.png
  1. Fingerprint Name. Enter a name for the Enhanced Fingerprint. 
  2. Source File. Enter the path to the source file that holds the data you want to fingerprint. For example:
  3. Location to store generated hashes. Enter the path to the folder where your locally generated hashed files are stored. Space allocated for this should be about 10–20% of the data size to be fingerprinted. For example:
  4. Column Separator. Select the delimiter that separates the columns of your source file: either Comma, Tab, or Pipe.  
  1. Click Save. 

The new Enhanced Fingerprint is created and appears on the Fingerprint page. You must now generate an index of the fingerprint to use it in a DLP Policy.

Create an Unstructured Fingerprint

Create an Unstructured Data Fingerprint for files in one or more folders. These fingerprints are evaluated per DLP policy to match against sensitive content in the cloud.

  1. Go to Policy > DLP Policies > Fingerprints. 
  2. On the Fingerprints page, go to Create Fingerprint > Unstructured Data Fingerprint > Create Fingerprint and select the type of fingerprint you wish to create:

NOTE: Only one Enhanced Fingerprint can be created. The option becomes grayed out when one is present.

Create Fingerprint (Legacy)

You can only use Legacy Fingerprints with Skyhigh CASB.

  1. Go to Policy > DLP Policies > Fingerprints.
  2. On the Fingerprints page, go to Create Fingerprint > Unstructured Data Fingerprint > Create Fingerprint.
  3. On the Create an Unstructured Fingerprint page, configure the following options:
    clipboard_e0c779f15a076c36047807d6c4884d09c.png
  1. Fingerprint Name. Enter a name for the Unstructured Fingerprint.
  2. Location to scan. Enter the path to the computer that holds the files you want to fingerprint. Click + to add more paths, if necessary. For example:
  3. Location to store generated hashes. Enter the path to the folder where your locally generated hashed files are stored. Space allocated for this should be about 10–20% of the size of input paths/folders. For example:
  4. File type exclusions. Enter any file types to be excluded. (Archive files such as ZIP files are automatically excluded.)
  1. Click Save. 

The new Unstructured Fingerprint is created and appears on the Fingerprint page. You must now generate an index of the fingerprint to use it in a DLP Policy.

Create Enhanced Fingerprint

Create an Unstructured Data Fingerprint for files in one or more folders. These fingerprints are evaluated per DLP policy to match against sensitive content in the cloud.

NOTE: Only one Enhanced Fingerprint can be created. The option becomes grayed out when one is present.

  1. Go to Policy > DLP Policies > Fingerprints.
  2. On the Fingerprints page, go to Create Fingerprint > Unstructured Data Fingerprint > Create Enhanced Fingerprint.
  3. On the Create an Enhanced Unstructured Fingerprint page, configure the following options:
    clipboard_eb1a8f46dd3b953ca6f4d93da0a572421.png
  1. Fingerprint Name. Enter a name for the Enhanced Fingerprint.
  2. Location to scan. Enter the path to the computer that holds the files you want to fingerprint. Click + to add more paths, if necessary. For example:
  3. Select Classification. Configure the classification for your fingerprint file. 
  4. Ignored Text. Configure text to ignore/skip when processing file content, such as boilerplate, legal disclaimers, and copyright information.
    • Ignored text path located here. Enter the path to the file that includes the Ignored Text to skip during the file processing. 
      clipboard_e95c38160822eef10bd08d83ecf962c3e.png
  5. Location to store generated hashes. Enter the path to the folder where your locally generated hashed files are stored. Space allocated for this should be about 10–20% of the size of input paths/folders. For example:

  6. File type exclusions. Enter any file types to be excluded. (Archive files such as ZIP files are not automatically excluded.)

  1. Click Save. 

The new Unstructured Fingerprint is created and appears on the Fingerprint page. You must now generate an index of the fingerprint to use it in a DLP Policy.

Select Classification

You can define classification criteria for the document or file you want to fingerprint.

  1. Click Select Classification to open the Select Classifications cloud card.
  2. On the Select Classifications cloud card, select the required classification for the fingerprint file or document.
    clipboard_ef681ba09f14037260ee062b6ea74d3b7.png

NOTE: If you update the classification criteria for your fingerprint file, you must re-generate an index of the fingerprint with the updated classification criteria on the Fingerprints page.

  1. Back to top
  • Was this article helpful?

Recommended articles

  1. Article type
    Topic
  2. Tags
    1. Topic ID 756