File Scanner scans an agent’s host for unencrypted credit card data such as the card number, track (magnetic stripe) and Personal Account Numbers (PAN) data, while avoiding false positives. In order to match, a PAN must: 

• Be 16, 17, 18 or 19 digits in length. Digits may be separated by dashes or dots.
• Begin with an Issuer Identification Number (IIN).
• Be long enough to match the detected IIN. If the length and IIN do not match, the Agent marks the number unknown and does not report it in the Portal.

File Scanner can detects track data by searching for the PAN preceded by '%[A-Z]' or ';'. File Scanner displays its results in the portal’s Credit Card Data Storage report.

There is always the possibility that the scanner flags a file as credit card information due to the format of stored info for that file type of program. For such files, the client will need to mark them as a false positive within the portal under the section "Credit Card Data Storage".

Note: Support for the File Scanner module of the agent is handled by the Technical Assistance Center's Data Loss Prevention group (TAC DLP).