Policy Definition Document
※ Last updated: 2026-03-26
Data Type Constraints
| Type | maximum length | Allowed values | Description |
|---|---|---|---|
| integer | - | Only the values defined in uiOptions can be used. | Integer value (select type) For example: 0, 1 or 0, 1, 2 |
| string | 2000 characters | Free input (semicolon separated) | String value (text type, character varying) |
Important:
- integer type: Only the values specified in the uiOptions of each policy can be used.
- Example:
1=사용 함, 0=사용 안함→ Only 0 or 1 can be entered- Example:
0=차단, 1=원본 반입, 2=기록 모드→ Only 0, 1, 2 can be entered- string type: You can enter up to 2000 characters, and extensions/keywords are separated by semicolons (;).
string type notes:
- Case Sensitivity: Case insensitive.
- Uppercase, lowercase, and mixed case are all allowed.
- Example:
DOC;xlsx;PpTx;→ Normal operation- Duplicate value: Duplicate input possible (e.g:
mp4;mp3;mp4;) - Saved in a duplicated state, but there is no problem with processing.- Be careful with whitespace handling: If it contains spaces, it will be saved as is and will not function as intended.
- Incorrect example:
do c; xl s;→ Not recognized as an extension- Correct example:
doc;xls;→ Input without spaces
Policy List
| Classification | Policy Name | Policy Description | policyId | policyValue | uiOptions | uiTypeCode | uiTypeDesc | Type |
|---|---|---|---|---|---|---|---|---|
| Common | File Import Method Settings | Select the file import method: 'Decontamination Processing' / 'Original Import' / 'Recording Mode'. In recording mode, decontamination processing and results are recorded according to policy, but the import is carried out with the original file. | SD_DOC_OP_MODE | 1 | 1=Decontamination processing, 0=Original import, 2=Record mode | 2 | select | integer |
| Setting the Decontamination Treatment Strength | Set the decontamination processing level. 'Maximum Security' identifies all risk factors and extracts only safe content, while 'Maximum Integrity' selects safe content while maintaining the original structure as much as possible. | SD_USE_FAST_SANITIZER | 1 | 1=Maximum Security, 0=Maximum Integrity | 2 | select | integer | |
| Decontamination Safety Document Handling Settings | Set the handling method for cases where there are no risk factors in Word and PowerPoint documents. Applicable targets: Only Word and PowerPoint (support scope to be gradually expanded). | SD_ORG_IMPORT_IF_NOT_SCAN_THREAT | 0 | 1=Original Import, 0=Decontamination | 2 | select | integer | |
| Setting Size Limits for Decontamination Processing | Set the maximum size of files that can be processed for decontamination. | SD_DOC_LIMIT_SIZE | 100 | - | 1 | text | string | |
| Blocking settings when decontamination processing size exceeds | Set whether to block files that exceed the specified size limit or to import them as is. | SD_DOC_LIMIT_MODE | 1 | 1=Block, 0=Original Import | 2 | select | integer | |
| Block unsupported file extensions setting | Set the handling method for unsupported file extensions in the system (block / import original / log mode) | SD_NOSUP_EXT_MODE | 1 | 0=Block, 1=Import Original, 2=Record Mode | 2 | select | integer | |
| Extension Tampering Prevention Settings | Set the handling method for files with mismatched actual format and extension (block / import original / log mode). | SD_EXT_MODE | 0 | 0=Block, 1=Import Original, 2=Record Mode | 2 | select | integer | |
| Password Protected Document Processing Settings | Set whether to block password-protected document files or import them as is | SD_ENC_DOC_MODE | 0 | 1=Block, 0=Original Import | 2 | select | integer | |
| Password Protected Compressed File Handling Settings | Set whether to block password-protected compressed files or import them as is | SD_ENC_ZIP_MODE | 0 | 1=Block, 0=Original Import | 2 | select | integer | |
| Encryption File Processing Settings | Set whether to block files encrypted with DRM or to import them as is. | SD_ENCRYPTED_MODE | 0 | 1=Block, 0=Original Import | 2 | select | integer | |
| Format Identification Unavailable File Processing Settings | Set whether to block files that cannot be analyzed due to file corruption or unknown encryption, or to import them as they are. | SD_UNREADABLE_MODE | 0 | 1=Block, 0=Original Import | 2 | select | integer | |
| File Extension Unspecified Block Setting | Set whether to block files without extensions or to import them as is | SD_EXCEPT_NO_EXT | On | Off=Block, On=Original Import | 2 | select | integer | |
| File Path Length Exceed Block Setting | Set whether to block or import as is if the file path length exceeds the system's allowed range. | SD_CDR_LIMIT_PATH_EXCEEDED | OFF | ON=Block, OFF=Original Import | 2 | select | integer | |
| Import settings for the original when a decontamination error occurs | Set the handling method (block / import original / log mode) when a system error occurs during the decontamination process. | SD_EXCEPTION_BYPASS | 0 | Off=Block, On=Original Import, Log=Log Mode | 2 | select | integer | |
| Setting Timeout Criteria | Set the decontamination operation time limit in minutes | SD_TIMEOUT_MINUTES | 3 | - | 1 | text | string | |
| Original Import Settings on Timeout | Set whether to import as is or block when the decontamination processing time exceeds the set standard. | SD_TIMEOUT_LIMIT | 1 | On=Block, Off=Original Import | 2 | select | integer | |
| exception | Harmless Extension Filter | Only the entered extensions will be subject to demilitarization processing. Extensions that are not entered will be classified as unsupported extensions. | SD_NON_SPECIFIED_EXTENSIONS | ; | - | 1 | text | string |
| Non-decontamination Excluded Extension Filter | The entered extension is imported in its original state without any decontamination processing. | SD_FORCE_BYPASS_EXT | ; | - | 1 | text | string | |
| Harmless Block Extension Filter | The entered extension is blocked from being imported regardless of whether it is harmless or not. | SD_NOT_ALLOWED_EXTENSIONS | ; | - | 1 | text | string | |
| Blocked Exception Settings for Unsupported Extensions | Specify the extensions that are allowed for original import as exceptions among the extensions blocked by the unsupported extension blocking settings. | CQMS_NOSUP_EXCEPT_EXT | ; | - | 1 | text | string | |
| Unsupported File Binary Exception Settings | When blocking unsupported extensions, process files that match specific binary patterns and extensions as exceptions. | SD_NOT_SUPPORT_EXT_BYPASS | ; | - | 1 | text | string | |
| Exception settings for blocking extension forgery | When blocking extension forgery, specify the extensions that allow the import of the original as an exception. | SD_EXCEPT_EXT | ; | - | 1 | text | string | |
| MS Office | Object (OLE) Deletion Settings in Document | Set whether to remove OLE objects (other documents, executable files, etc.) inserted in MS Office documents | SD_DOC_OBJ_MODE | 1 | 1=Use, 0=Do not use | 2 | select | integer |
| Object retention settings within the document | Specify the object to keep as an exception when deleting the OLE object | SD_KEEP_OBJECT_LIST | Pbrush;Picture; | - | 1 | text | string | |
| Macro Processing Settings in the Document | Set whether to remove VBA macros in MS Office documents | CQMS_NOR_OPTION_MACRO | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| Remove DDEAUTO setting in the document | Set whether to remove the DDE feature that allows automatic data exchange between documents | SD_DOC_DDEAUTO_BLOCK_MODE | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| Remove ActiveX Control Settings in Document | Set whether to remove ActiveX controls that enable interaction in the document | SD_EXCEL_REMOVE_SHAPE_CONTROL | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| Setting ActiveX Content to be Maintained in the Document | Specify ActiveX content to retain as an exception when removing ActiveX controls | SD_EXCEL_KEEP_ACTIVE | PictureFrame;HostControl;RoundedRectangle;NotPrimitive;TextBox; | - | 1 | text | string | |
| Blocking settings for documents prior to MS Office 97 | Set the blocking of files from MS Office versions prior to 97 that do not meet modern security standards | SD_DOC_OLD | 0 | 0=Use, 1=Do not use | 2 | select | integer | |
| Remove OLE External Link Settings in Document | Set whether to remove OLE external links that connect to external files or web addresses in the document. | SD_EXTERNAL_LINK_DELETE | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| Remove hyperlink settings in the document | Set whether to remove hyperlinks that connect to external files, web addresses, etc. in the document. | SD_LINK_SANITIZE | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| Maximum Number of Slides to Process | Set the maximum allowed number of slides in the PowerPoint file. If exceeded, handle according to the 'Handling Method When Slides Exceed' policy. | SD_SLIDES_DENY_COUNT | 120 | - | 1 | text | string | |
| Handling When Exceeding Slides | Set the handling method when the number of slides in the PowerPoint file exceeds the maximum set number. | SD_SLIDES_CHECK | Deny | Deny=Block, Permit=Import Original | 2 | select | integer | |
| Digital Signature PDF Processing Settings | Set whether to import the PDF document with the digital signature as is or to process it for sanitization. | SD_PDF_DIGITAL_SIGNATURE_BYPASS | 1 | 1=Original Import, 0=Decontamination | 2 | select | integer | |
| PDF JavaScript Removal Settings | Set whether to remove JavaScript that can trigger the execution of malicious code in PDF documents. | SD_PDF_REMOVE_JAVA_SCRIPT | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| PDF Action Removal Settings | Set whether to remove the Action that triggers a specific task in the PDF document. | SD_PDF_REMOVE_ACTIONS | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| PDF Annotation Removal Settings | Set whether to remove annotations (notes, highlights, etc.) that may contain malicious code or links in PDF documents. | SD_PDF_REMOVE_ANNOTATIONS | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| PDF Annotation Exception Settings | Specify the annotation types to keep as exceptions when removing PDF annotations. | SD_WHITE_LIST_ANNOTATIONS | PopupAnnotation;WidgetAnnotation;LinkAnnotation; | - | 1 | text | string | |
| Hancom Office | Removing Objects in Hancom Office Documents | Set whether to remove OLE objects inserted in Hancom Office documents | SD_HWP_OBJECT_DELETE | 1 | 1=Use, 0=Do not use | 2 | select | integer |
| Removing Hyperlink Settings in Hancom Office Document | Set whether to remove hyperlinks in Hancom Office documents | SD_HWP_HYPER_LINK_DELETE | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| Hancom Office Document Script Removal Settings | Set whether to remove scripts that control or automate the operation of Hancom Office documents. | SD_HWP_BINDATA_NOT_IMG_DELETE | 1 | 1=Use, 0=Do not use | 2 | select | integer | |
| Hancom Office Distribution Document Blocking Settings | Set whether to block the Hancom Office file created as 'Deployment Document' or to import it as is. | SD_SANITIZE_HWP_RELEASE_DENY_DOC | 0 | 1=Block, 0=Original Import | 2 | select | integer | |
| Blocking Non-Standard MS Office File Creation in Hancom Office | Set whether to block non-standard MS Office files created in Hancom Office or to import them as is. | SD_BYPASS_MSOFFICE_DOCU_FROM_HANCOM | 0 | 1=Block, 0=Original Import | 2 | select | integer | |
| HTML | HTML script removal settings | Set whether to remove scripts that perform dynamic functions within the web page | SD_REMOVE_SCRIPT_TAG_FROM_MAIL_CONTENTS | 0 | 1=ON, 0=OFF | 2 | select | integer |
| HTML Web Beacon Removal Settings | Set whether to remove web beacons that track user behavior on the web page | SD_REMOVE_WEB_BEACON_FROM_MAIL_CONTENTS | 1 | 1=ON, 0=OFF | 2 | select | integer | |
| HTML hyperlink removal settings | Set whether to remove hyperlinks that connect to external files, web pages, etc. within the web page. | SD_REMOVE_LINK_FROM_MAIL_CONTENTS | 1 | 1=ON, 0=OFF | 2 | select | integer | |
| JSON | Setting to Block Duplicate Keys in JSON | Set blocking for duplicate keys in JSON data | SD_JSON_BLOCK_DUPLICATE_KEYS | 1 | 1=Use, 0=Do not use | 2 | select | integer |
| Setting Block for Specified Executable Links | Block specified executable links (e.g., javascript, powershell, etc.) in JSON data | SD_JSON_EXEC_URL_SCHEMES_DENYLIST | javascript;data;vbscript;file;powershell;cmd;wscript;mshta; | - | 1 | text | string | |
| Blocking settings for specified built-in file formats (MIME) | Block specified embedded file types (MIME types) in JSON data | SD_JSON_EMBEDDED_MIME_DENYLIST | application/x-dosexec;application/zip; | - | 1 | text | string | |
| Setting Block for Specified Risk Keys | JSON data within the specified risk key (e.g:proto, blocking constructors, etc. | SD_JSON_DANGEROUS_KEYS_DENYLIST | proto;constructor;prototype;definegetter;definesetter;lookupgetter;lookupsetter; | - | 1 | text | string | |
| Setting Specified Operator Blockage | Block specified operators (e.g., $where, $eval, etc.) in JSON data | SD_JSON_NOSQL_OPERATORS_DENYLIST | $where;$function;$accumulator;$eval; | - | 1 | text | string | |
| TEXT | Regular Expression Filter Settings | Block imports if the text file (txt, log, xml, ini, csv) contains content that matches the regular expression pattern. The default is the resident registration number pattern. | SD_TEXT_REGEX_FILTER | \d{2}(0[1-9]|1[0-2])(0[1-9]|[12]\d|3[01])[-\s]?[1-4]\d{6}; | - | 1 | text | string |
| Text Inclusion Filter Settings | Block import if the specified keyword is included in the text file (txt, log, xml, ini, csv). Case insensitive. | SD_TEXT_KEYWORD_FILTER | ; | - | 1 | text | string | |
| compressed file | Limit on the number of items in a compressed file | Set the upper limit on the number of files that can be included in a compressed file. | SD_ARCHIVE_MAX_FILE_COUNT | 50 | - | 1 | text | string |
| Compression File Subdirectory Depth Limit | Set the maximum depth of nested compression in the compressed file | SD_ARCHIVE_MAX_NESTED_DEPTH | 3 | - | 1 | text | string | |
| Image file | Image Processing Intensity Settings | Set the processing intensity of the image file. 'Maximum Security' removes even steganography, 'Maximum Integrity' preserves the original quality as much as possible. | SD_IMAGE_DELETE_STEGANO | 1 | 1=Maximum Security, 0=Maximum Integrity | 2 | select | integer |
| Service Linker | Move original file output on exception | If an exception occurs due to policy, move the original file to the decontaminated output path without leaving it in the original folder (SD_IN). | SD_EXCEPTION_MOVE_ORIGINAL_TO_OUTPUT | 0 | 1=Use, 0=Do not use | 2 | select | integer |
| Original File Encryption Settings | Set whether to perform encryption on the original file | SD_SCSL_ENCRYPT_ORIGINAL | 0 | 1=Use, 0=Do not use | 2 | select | integer | |
| Decontamination File Encryption Settings | Set whether to perform encryption on the completed decontamination file. | SD_SCSL_ENCRYPT_SANITIZED | 0 | 1=Use, 0=Do not use | 2 | select | integer | |
| Encryption Target Extensions | Set the target extensions for service linker encryption | SD_SCSL_TARGET_EXTENSIONS | hwp;hwpx;pdf;doc;docx;rtf;ppt;pptx;pps;ppsx;xls;xlsx;xlsb;xlsm;cell;show;png;jpg;jpeg;bmp;gif;tif;tiff;txt;csv; | - | 1 | text | string | |
| Encryption Permission Category ID | Set the "Permission Category ID" to be used for Service Linker integration | SD_SCSL_AUTH_CATEGORY_ID | 0000001; | - | 1 | text | string | |
| Encryption Permission Category Name | Set the permission category name to be used for service linker integration | SD_SCSL_AUTH_CATEGORY_NAME | National Security Document | - | 1 | text | string | |
| Integration System Name | When integrating with the service linker, set the name of the target system (or service) for integration. | SD_SCSL_INTEGRATION_SYSTEM_NAME | one_HANA; | - | 1 | text | string |