Previous Topic: Basic RulesNext Topic: Special Characters


Wildcards and Policy List Items

CA Data Protection supports the * and ? wildcards in policy list items. You can substitute * for zero or more characters; you can substitute ? for a single character. The following table provides examples:

List items

Notes

URLs

* characters are added are automatically to start and end of these items.

unipraxis

Interpreted to be the same as *unipraxis*.

The trigger detects sites such as unipraxis.com, unipraxis.co.uk or even sales.unipraxis.com.

sales.*.com

Detects sites such as sales.unipraxis.com.

Email addresses

Email address matching is not case-sensitive.

CA Data Protection interprets a space between address components as AND operators.

*@unipraxis.com

Detects emails sent to or from this domain only.

*@unipraxis*

Detects emails sent to or from domains such as unipraxis.com or unipraxis.co.uk.

unipraxis.com

Detects any email addresses ending in 'unipraxis.com'. In effect, this is the same as specifying *@unipraxis.com.

frank unipr*

Detects all emails sent to or from, for example, frank.schaeffer@unipraxis.com.

Card numbers

CA Data Protection ignores spaces so, if you prefer, you can omit spaces between digit groups, for example, 45449?00*.

4544 9?00 *

If part of an Included list, the trigger activates whenever CA Data Protection detects a number such as 454491000000.

If part of an Excluded list, the trigger is activated whenever CA Data Protection detects any card number except 454491000000.

Text

Trigger text can apply to the content of a file, Web page, email or email attachment, plus data submitted to a Web site using an HTML form.

unipr* or ref???

If part of an Included list, the trigger activates whenever CA Data Protection detects words such as Unipraxis or ref328.

holiday req*

If part of an Excluded list for an email content trigger, the trigger activates for all emails except those that contain phrases such as 'holiday request'.

photocop*

If part of an Excluded list for a submitted data trigger, the trigger activates for all data submissions except when, for example, a user selects 'Photocopier paper' from a form menu.

File names

These include email attachments, imported files, and files uploaded to a Web site.

plan??? or *.xls

If part of an Included list, the trigger activates whenever CA Data Protection detects a file such as plan_13.xls.

*.jpg

If part of an Excluded list, all uploaded files activate the trigger unless this involves a file such as cute_kittens.jpg.

 

Note: Most triggers that use file lists are activated when a listed file is detected; you can specify any file types in these list settings. But other triggers attempt to search the content of the listed files; for these triggers, only certain file types are supported in the file list.

Window titles

Used in Application Monitoring triggers.

Note that * characters are added are automatically to start and end of these items.

Notepad

Interpreted to be the same as *notepad*.

If part of an Included list, the trigger activates whenever a Notepad window opens.

*.do? - Micro*

Detects window titles such as 'planning.doc - Microsoft Word'.

If part of an Excluded list, the trigger activates whenever a window opens unless it has a title such as 'planning.doc - Microsoft Word'.

Executable paths

Used in Application Monitoring triggers.

Note that * characters are added are automatically to start and end of these items.

Notepad

Interpreted to be the same as *notepad*.

If part of an Included list, the trigger activates whenever Notepad.exe runs.

?:\*\Foo

This detects any instance of Foo.exe running in a subfolder.

If part of an Excluded list, the trigger activates whenever any application runs except for, for example, C:\Program Files\Foo.exe.

Note: This does not detect instances of Foo.exe running in the root of a drive, for example, H:\Foo.exe.

Special characters

To search for literal occurrences of the characters { } | * or ?, prefix them with a '\' backslash. For example:

24\*7

This detects 24*7.

What next for Unipraxis\?

This detects What next for Unipraxis?

Note: CA Data Protection interprets a space between keywords as a literal character except in email address and credit card number lists.