About DLP Scan Limits

DLP scans each file up to a specified kilobyte count. Any additional bytes in the file are not scanned. This enables the proxy to partially scan very large files without a large effect on performance. You can set a different DLP scan limit for each DLP sensor. The minimum scan limit is 10 Kb for all devices. The default and maximum scan limits vary by device model.

Default (Kb) Min Max Device Model
512 10 5120 Firebox T10, T15, T30
1024 10 20480 Firebox T50, XTM 330, 810, 820, 830
5120 10 20480 Firebox M200, XTM 505, 510, 520, 530, 515, 525, 535, 545
5120 10 30720 Firebox T20, T35, T40, T55, T70, T80, M300, M370, M400, M440, M470, M500, M570, M670, M4600, M5600, XTM 850, 860, 870, 1050, 1500, 2050, 2500, FireboxV, XTMv

If you enable DLP and Gateway AntiVirus for the same proxy action, the larger configured scan limit is used for both services.

For information about how to set the scan limit, see Configure DLP Scan Settings.