LibraCyber ESG has a powerful module on its board called Message Content Protection (MCP) that deals with the Data Loss Prevention (DLP). To learn more about how this module works you can check the Message Content Protection (MCP) module knowledge base. This module is disabled by default, you can enable it by clicking on the big Enable button placed at the top of the page.
MCP Rules Editor
In this table are listed all the existent MCP rules. You can filter out them by performing a Search and Export the results in common formats such as PDF and CSV.
You can create a MCP rule by clicking on the New button from the table toolbar. The below dialog appears.
A MCP rule is defined by:
- Name (the rule unique name)
- Description (a description that helps users understanding what the rules does)
- Type (where the regular expression must be applied)
- Pattern Match (the regular expression that triggers the rule when matched)
- Score (the MCP score added to the message)
Note: when creating a rule, it defaults to be inactive. You can activate it by setting Yes to the Active parameter. When all parameters are set, you can click the green Save button. When the rule is created, remember to click on the Apply Settings button from the table toolbar in order to make the changes effective.
MCP Actions
In the second tab are defined the actions that LibraCyber ESG will perform if a message reaches one of the two score thresholds defined.
MCP Levels
In this section you can define the thresholds that categorize a MCP message and a High MCP message. The High MCP Score must be greater than the MCP Score as the High MCP Score goal is to categorize messages we are 100% sure are MCP.
MCP Messages Actions
In this section you can configure what action the appliance must perform on MCP messages.
High MCP Message Actions
In this section you can configure what action the appliance must perform on High MCP messages.