Defining Compound Data Types

You can create a complex data type representation. A compound data type includes multiple Data Types, which are matched either on AND (a number of Data Types are matched), or NOT (necessary Data Types are not present), or both.

For example, you can look for files or emails that contain patient records. You could create a data type that combines documents that match a patient record template, with a dictionary data type that contains a group of patient names who have not signed release forms. Now you have a single data type that matches emails or FTP that contain patient records of patients who have not signed a release form.

To create a compound data type representation:

  1. In the Data Type Wizard, select Compound.

  2. Click Next.

  3. In the first section, click Add and select Data Types to match on AND.

  4. In the second section, click Add and select Data Types to match on NOT.

    If a transmission is sent that matches all the Data Types of the first section and none of the Data Types in the second section, the data of the transmission is matched to the compound Data Types.

  5. Click Next.

  6. Click Finish.

  7. (Optional) To add more parameters to the Data TypeClosed Classification of data in a Check Point Security Policy for the Content Awareness Software Blade., select the checkbox. Click Finish.