Description
The purpose of this article is to demonstrate FortiGate DLP Watermarking using FortiExplorer.
Solution
Watermarking
Watermarking is essentially marking files with a digital pattern to mark the file as being proprietary to a specific company. Fortinet has a utility that will apply a digital watermark to files. The utility adds a small (approximately 100 byte) pattern to the file that is recognized by the DLP watermark filter. The pattern is invisible to the end user.
Watermark Sensitivity
If you are using watermarking on your files you can use this filter to check for watermarks that correspond to sensitivity categories that you have set up. The Corporate Identifier is to make sure that you are only blocking watermarks that your company has place on the files, not watermarks with the same name by other companies.
File types
The watermark tool does not work with every file type. The following file types are supported by the watermark tool: .txt .pdf .doc .xls .ppt .docx .pptx .xlsx.
Watermarking is essentially marking files with a digital pattern to mark the file as being proprietary to a specific company. Fortinet has a utility that will apply a digital watermark to files. The utility adds a small (approximately 100 byte) pattern to the file that is recognized by the DLP watermark filter. The pattern is invisible to the end user.
Watermark Sensitivity
If you are using watermarking on your files you can use this filter to check for watermarks that correspond to sensitivity categories that you have set up. The Corporate Identifier is to make sure that you are only blocking watermarks that your company has place on the files, not watermarks with the same name by other companies.
File types
The watermark tool does not work with every file type. The following file types are supported by the watermark tool: .txt .pdf .doc .xls .ppt .docx .pptx .xlsx.
Currently, the DLP only works with Fortinet’s watermarking software.
Using the FortiExplorer watermark tool is shown in the following steps:
- Security Profile -> DLP -> Sensor -> Watermark Sensitivity.
- Use FortiExplorer to watermark the file.
- Upload file to cloud service for test purpose.
- It is an HTTPS page, so it is necessary to turn on SSL Inspection on the respective policy.
- Message on the browser when trying to upload the file
- Enable extended-utm-log and DLP log on the respective DLP profile.
Using the FortiExplorer watermark tool is shown in the following steps:
- Security Profile -> DLP -> Sensor -> Watermark Sensitivity.
- Use FortiExplorer to watermark the file.
- Upload file to cloud service for test purpose.
- It is an HTTPS page, so it is necessary to turn on SSL Inspection on the respective policy.
- Message on the browser when trying to upload the file
- Enable extended-utm-log and DLP log on the respective DLP profile.
