Skip to main content
Skyhigh Security

IDM (Enhanced) Fingerprint Match Criteria

After successfully creating and indexing an IDM (Enhanced) Fingerprint profile, you can use the classification defined in IDM for the DLP Policy. During a DLP scan, the policy can either look for the entire document or a certain percentage of its content. After the policy evaluation results, if you notice high or low match rates in your IDM (Enhanced) Fingerprint content, you can modify the match rates by configuring the Unstructured Match Condition in the Classification. The match percentage is defined within the Unstructured Match Condition or IDM Classification.

To configure an IDM (Enhanced) fingerprint condition, perform the following actions:

  1. On the IDM Classification UI, enable the Unstructured Match Condition toggle button.
  2. Configure the following options:
    • Match at x % of the original document for scanning. Specify the percentage of fingerprinted documents that should trigger a match during the scanning process.
    • Match at x consecutive signatures. Specify the number of consecutive signatures that should trigger a match during the scanning process.

IDM Match Examples

When you choose to scan a PDF document and specify 100% as the original document for scanning criteria, it means that the PDF file should exactly match both content and data. If you specify any other percentage (for example, 50%) for the original document for scanning criteria, it means that 50% or more of the indexed content found in the scanned files will trigger a match.

If you choose to scan a file containing 30 consecutive signatures, it means that when the file containing 30 signatures or more is found in the scanned file, it will trigger a match.

  • Was this article helpful?