Procedure

1. Go to Policy → Policy Objects → DLP Data Identifiers.
2. Click the Expressions tab.
3. Click Add.
   A new screen displays.
4. Specify a name for the expression. The name must not exceed 128 bytes in length.
5. Specify a description that does not exceed 255 bytes in length.
6. Specify the expression and set whether it is case-sensitive.
7. Specify the displayed data.
   For example, if you are creating an expression for ID numbers, type a sample ID number. This data is used for reference purposes only and will not appear elsewhere in the product.
8. Select one of the following criteria and configure additional settings for the chosen criteria (see Criteria for Customized Expression):
   • None
   • Specific characters
   • Suffix
   • Single-character separator
9. Optional: Select a validator for the expression.

   Note Data units follow semantic rules. Not every 9-digit number is a valid social security number and not every 15- or 16-digit number is a valid credit card number. To reduce false positives, expression validators check if the extracted data units follow these rules.

10. Test the expression against actual data.
    For example, if the expression is for a national ID, type a valid ID number in the Test data text box, click Test, and then check the result.
11. Click Save.

    Note Save the settings only if the testing was successful. An expression that cannot detect any data wastes system resources and may impact performance.

    Note Optionally, copy a predefined expression and edit the copy to create your customized expression.