dlpfileat

File Attributes

File attributes are specific properties of a file. You can use two file attributes when defining digital assets, namely, file type and file size. For example, a software development company may want to limit the sharing of the company’s software installer to the R&D department, whose members are responsible for the development and testing of the software. In this case, the OfficeScan administrator can create a policy that blocks the transmission of executable files that are 10 to 40MB in size to all departments except R&D.

By themselves, file attributes are poor identifiers of sensitive files. Continuing the example in this topic, third-party software installers shared by other departments will most likely be blocked. Trend Micro therefore recommends combining file attributes with other digital asset definitions for a more targeted detection of sensitive files.

Supported File Types

Choose from the following true file types when defining file attributes:

To add a file attribute list:

• Networked Computers > Digital Asset Control > Definitions

1. Click the File Attributes tab.

2. Click Add. A new screen displays.

3. Type a name for the file attribute list. The name must not exceed 100 bytes in length and cannot contain the following characters:

> < * ^ | & ? \ /

4. Type a description that does not exceed 256 bytes in length.

5. Select your preferred true file types.

6. If a file type you want to include is not listed, select File extensions and then type the file type’s extension. OfficeScan checks files with the specified extension but does not check their true file types.

Guidelines when specifying file extensions:

• Each extension must start with an asterisk (*), followed by a period (.), and then the extension. The asterisk is a wildcard, which represents a file’s actual name. For example, *.pol matches 12345.pol and test.pol.

• You can include wildcards in extensions. Use a question mark (?) to represent a single character and an asterisk (*) to represent two or more characters. See the following examples:

• *.*m matches the following files: ABC.dem, ABC.prm, ABC.sdcm

• *.m*r matches the following files: ABC.mgdr, ABC.mtp2r, ABC.mdmr

• *.fm? matches the following files: ABC.fme, ABC.fml, ABC.fmp

• Be careful when adding an asterisk at the end of an extension as this might match parts of a file name and an unrelated extension. For example: *.do* matches abc.doctor_john.jpg and abc.donor12.pdf.

• Use semicolons (;) to separate file extensions. There is no need to add a space after a semicolon.

7. Type the minimum and maximum file sizes in bytes. Both file sizes must be whole numbers larger than zero.

8. Click Save.

9. A message appears, reminding you to deploy the settings to clients. Click Close.

10. Back in the Digital Asset Definitions screen, click Apply to All Clients.

To add a file attribute list using the "copy" option:

• Use this option if a file attribute list you want to add has similar settings with an existing file attribute list.

• Networked Computers > Digital Asset Control > Definitions

1. Click the File Attributes tab.

2. Select the name of a file attribute list and then click Copy. A new screen appears.

3. Type a unique name for the file attribute list. The name must not exceed 100 bytes in length and cannot contain the following characters:

> < * ^ | & ? \ /

4. Accept or modify the other settings.

5. Click Save.

6. A message appears, reminding you to deploy the settings to clients. Click Close.

7. Back in the Digital Asset Definitions screen, click Apply to All Clients.

To add file attribute lists using the "import" option:

• Use this option if you have a properly-formatted .dat file containing the file attribute lists. You can generate the file by exporting the file attribute lists from either the OfficeScan server you are currently accessing or from another OfficeScan server. For details about exporting file attribute lists, see To export file attribute lists:.

• Networked Computers > Digital Asset Control > Definitions

1. Click the File Attributes tab.

2. Click Import and then locate the .dat file containing the file attribute lists.

3. Click Open. A message appears, informing you if the import was successful. If a file attribute list to be imported already exists, it will be skipped.

4. Click Apply to All Clients.

To modify a file attribute list:

• Networked Computers > Digital Asset Control > Definitions

1. Click the File Attributes tab.

2. Click the name of the file attribute list that you want to modify. A new screen appears.

3. Modify the settings.

4. Click Save.

5. A message appears, reminding you to deploy the settings to clients. Click Close.

6. Back in the Digital Asset Definitions screen, click Apply to All Clients.

To export file attribute lists:

• Use the "export" option to back up the file attribute lists or to import them to another OfficeScan server.
  
  All file attribute lists will be exported. It is not possible to export individual file attribute lists.

• Networked Computers > Digital Asset Control > Definitions

1. Click the File Attributes tab.

2. Click Export.

3. Save the resulting .dat file to your preferred location.

To delete file attribute lists:

• It is not possible to delete a file attribute list that is being used in a digital asset template. Delete the template before deleting the file attribute list.

• Networked Computers > Digital Asset Control > Definitions

1. Click the File Attributes tab.

2. Select the file attribute lists that you want to delete and click Delete.

3. Click Apply to All Clients.

See also:

• Digital Asset Definitions