cancel
Showing results for 
Search instead for 
Did you mean: 

Dictionary size limit

Jump to solution

Hi,

Is there a size limit for custom Dictionaries used for DLP? As an example, I would like to use a custom dictionary with over 45000 entries, would that cause some issues?

Many Thanks

1 Solution

Accepted Solutions
Reliable Contributor SCtbe
Reliable Contributor
Report Inappropriate Content
Message 4 of 4

Re: Dictionary size limit

Jump to solution

There is 20k limit in number of dictionary entries as per:

https://docs.mcafee.com/bundle/data-loss-prevention-11.0.000-product-guide-epolicy-orchestrator/page...

so for the 45k entries you will need to split your entires acorss 3 ditionaries. I suggest to split them more or less evenly. 

3 Replies
McAfee Employee Mreaden
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Dictionary size limit

Jump to solution

There is no limit to the amount of custom Dictionaries you can use. However, there are some limitations. 

Limitations
There are some limitations to using dictionaries. Dictionaries are saved in Unicode (UTF-8) and can be written in any language. The following descriptions apply to dictionaries written in English. The descriptions generally apply to other languages, but there might be unforeseen problems in certain languages. Dictionary matching has these characteristics:
• It is only case sensitive when you create case-sensitive dictionary entries. Built-in dictionaries, created before this feature was available, are not case sensitive.
• It can optionally match substrings or whole phrases.
• It matches phrases including spaces.
If substring matching is specified, be careful when entering short words because of the potential for false positives. For example, a dictionary entry of "cat" would flag "cataracts" and "duplicate." To prevent these false positives, use the whole phrase matching option, or use statistically improbable phrases (SIPs) to give the best results. Similar entries are another source of false positives. For example, in some HIPAA disease lists, both "celiac" and "celiac disease" appear as separate entries. If the second term appears in a document and substring matching is specified, it produces two hits (one for each entry) and skews the total score.

Highlighted

Re: Dictionary size limit

Jump to solution

Thanks for your reply, however my query was about a possible limit for a single dictionary. Will the DLP be able to manage a single dictionary with 45000 entries in it? Could that be causing performance issues with any of the DLP components?

Thanks

Reliable Contributor SCtbe
Reliable Contributor
Report Inappropriate Content
Message 4 of 4

Re: Dictionary size limit

Jump to solution

There is 20k limit in number of dictionary entries as per:

https://docs.mcafee.com/bundle/data-loss-prevention-11.0.000-product-guide-epolicy-orchestrator/page...

so for the 45k entries you will need to split your entires acorss 3 ditionaries. I suggest to split them more or less evenly. 

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center