DLP scans each file up to a specified kilobyte count. Any additional bytes in the file are not scanned. This enables the proxy to partially scan very large files without a large effect on performance. You can set a different DLP scan limit for each DLP sensor. The minimum scan limit is 10 Kb for all devices. The default and maximum scan limits vary by device model.
| Default (Kb) | Min | Max | Device Model |
|---|---|---|---|
| 512 | 10 | 5120 | Firebox T10, T15, T30 |
| 1024 | 10 | 20480 | Firebox T50, XTM 330, 810, 820, 830 |
| 5120 | 10 | 20480 | Firebox M200, XTM 505, 510, 520, 530, 515, 525, 535, 545 |
| 5120 | 10 | 30720 | Firebox T35, T55, T70, M300, M370, M400, M440, M470, M500, M570, M670, M4600, M5600, XTM 850, 860, 870, 1050, 1500, 2050, 2500, FireboxV, XTMv |
If you enable DLP and Gateway AntiVirus for the same proxy action, the larger configured scan limit is used for both services.
For information about how to set the scan limit, see Configure DLP Scan Settings.