anil_nayak_FTNT
Description
The purpose of this article is to demonstrate FortiGate DLP Watermarking using FortiExplorer.

Solution
Watermarking

Watermarking is essentially marking files with a digital pattern to mark the file as being proprietary to a specific company. Fortinet has a utility that will apply a digital watermark to files.  The utility adds a small (approximately 100 byte) pattern to the file that is recognized by the DLP watermark filter. The pattern is invisible to the end user.

Watermark Sensitivity

If you are using watermarking on your files you can use this filter to check for watermarks that correspond to sensitivity categories that you have set up. The Corporate Identifier is to make sure that you are only blocking watermarks that your company has place on the files, not watermarks with the same name by other companies.

File types

The watermark tool does not work with every file type. The following file types are supported by the watermark tool: .txt .pdf .doc .xls .ppt .docx .pptx .xlsx Currently the DLP only works with Fortinet’s watermarking software.

Using the FortiExplorer watermark tool is shown in the following steps:

aniln_FD36722_tn_FD36722-1.jpg

--Security Profile > DLP > Sensor > Watermark Sensitivity.

aniln_FD36722_tn_FD36722-2.jpg

--Using FortiExplorer to watermark the file.

aniln_FD36722_tn_FD36722-3.jpg

--Upload file to cloud service for test purpose.

aniln_FD36722_tn_FD36722-4.jpg

--It is a HTTPS page, so it is necessary to turn on SSL Inspection on the respective policy.

aniln_FD36722_tn_FD36722-5.jpg

--Message on the browser when trying to upload the file

aniln_FD36722_tn_FD36722-6.jpg

--Enable extended-utm-log and DLP log on the respective DLP profile.

aniln_FD36722_tn_FD36722-7.jpg

Contributors