About data control rules

Data control rules specify conditions for data control scanning to detect, actions to be taken if rules are matched, and any files to be excluded from scanning.

You can create your own rules or use the sample rules provided. We provide a number of preconfigured data control rules that you can use unmodified or customize to your own needs. These rules are provided as examples only and are not updated.

There are two types of data control rule: file matching rule and content rule.

File matching rules

A file matching rule specifies action to be taken if a user attempts to transfer a file with the specified file name or of the specified file type (true file type category, e.g. a spreadsheet) to the specified destination, for example, block the transfer of databases to removable storage devices.

Data control includes true file type definitions for over 150 different file formats. We may add additional true file types from time to time. The newly added types will be automatically added to any data control rules that use the relevant true file type category.

File types not covered by a true file type definition can be identified using their file extensions.

Content rules

A content rule is a rule that contains one or more Content Control Lists and specifies action to be taken if a user attempts to transfer data that matches all the Content Control Lists in the rule to the specified destination.