From 3202c2181c8127de51026605bc6f61ec524e1f08 Mon Sep 17 00:00:00 2001
From: John Poland <jdpoland@gmail.com>
Date: Wed, 15 Oct 2025 20:27:19 -0400
Subject: [PATCH] fortigate/vdom_Policy/dlp.cfg Wed Oct 15 08:27:19 PM EDT 2025

---
 configs/fortigate/vdom_Policy/dlp.cfg | 81 +++++++++++++++++++++++++++
 1 file changed, 81 insertions(+)
 create mode 100644 configs/fortigate/vdom_Policy/dlp.cfg

diff --git a/configs/fortigate/vdom_Policy/dlp.cfg b/configs/fortigate/vdom_Policy/dlp.cfg
new file mode 100644
index 0000000..2d8781f
--- /dev/null
+++ b/configs/fortigate/vdom_Policy/dlp.cfg
@@ -0,0 +1,81 @@
+config dlp filepattern
+    edit 1
+        set name "builtin-patterns"
+        config entries
+            edit "*.bat"
+            next
+            edit "*.com"
+            next
+            edit "*.dll"
+            next
+            edit "*.doc"
+            next
+            edit "*.exe"
+            next
+            edit "*.gz"
+            next
+            edit "*.hta"
+            next
+            edit "*.ppt"
+            next
+            edit "*.rar"
+            next
+            edit "*.scr"
+            next
+            edit "*.tar"
+            next
+            edit "*.tgz"
+            next
+            edit "*.vb?"
+            next
+            edit "*.wps"
+            next
+            edit "*.xl?"
+            next
+            edit "*.zip"
+            next
+            edit "*.pif"
+            next
+            edit "*.cpl"
+            next
+        end
+    next
+    edit 2
+        set name "all_executables"
+        config entries
+            edit "bat"
+                set filter-type type
+                set file-type bat
+            next
+            edit "exe"
+                set filter-type type
+                set file-type exe
+            next
+            edit "elf"
+                set filter-type type
+                set file-type elf
+            next
+            edit "hta"
+                set filter-type type
+                set file-type hta
+            next
+        end
+    next
+end
+config dlp sensitivity
+    edit "Private"
+    next
+    edit "Critical"
+    next
+    edit "Warning"
+    next
+end
+config dlp sensor
+    edit "g-default"
+        set comment "Default sensor."
+    next
+    edit "g-sniffer-profile"
+        set comment "Log a summary of email and web traffic."
+        set summary-proto smtp pop3 imap http-get http-post
+    next
+end