Enterprise Vault™ Classification using the Microsoft File Classification Infrastructure
- About this guide
- Getting started
- Setting up the classification properties
- About the Enterprise Vault classification properties
- Setting up the Enterprise Vault classification properties manually
- Checking the Folder Usage classification property
- How classification property values and retention categories interact
- Setting up new values for the Enterprise Vault classification properties
- Points to note on setting retention categories
- Configuring your classification rules
- Defining and applying classification policies
- About classification policies
- Defining classification policies
- About the PowerShell cmdlets for working with classification policies
- Associating classification policies with retention plans
- About the PowerShell cmdlets for working with retention plans
- Applying retention plans to your Enterprise Vault archives
- Running classification in test mode
- Publishing classification properties and rules across your site
- Using classification with smart partitions
- Appendix A. Enterprise Vault properties for use in classification rules
- About the Enterprise Vault properties
- System properties
- Attachment properties
- Custom Enterprise Vault properties
- Custom Enterprise Vault properties for File System Archiving items
- Custom Enterprise Vault properties for SharePoint items
- Custom Enterprise Vault properties for Compliance Accelerator-processed items
- Custom properties for use by policy management software
- Custom properties for Enterprise Vault SMTP Archiving
- Appendix B. PowerShell cmdlets for use with classification
- About the classification cmdlets
- Disable-EVClassification
- Get-EVClassificationFCITags
- Get-EVClassificationPolicy
- Get-EVClassificationStatus
- Get-EVClassificationTestMode
- Import-EVClassificationFCIRules
- New-EVClassificationPolicy
- Publish-EVClassificationFCIRules
- Remove-EVClassificationPolicy
- Set-EVClassificationPolicy
- Set-EVClassificationTestMode
- Appendix C. Monitoring and troubleshooting
About the example classification rules
Note:
The example rules are for test purposes only and may not deliver the required results in a production environment.
The example rules are in a single XML file, Example Rules.xml, which is in the Classification subfolder of the Enterprise Vault program folder; for example, C:\Program Files (x86)\Enterprise Vault\Classification\Example Rules.xml.
The example rules have the following features in common:
They have a scope of "Enterprise Vault": they classify items in the Enterprise Vault classification cache folder only.
They use the Veritas Information Classifier method to search for strings and regular expression patterns in items.
When the rules find a match, they assign an appropriate value to one of the four Enterprise Vault classification properties on the matching item: evtag.category, evtag.exclusion, evtag.inclusion, or evaction.discard.
For example, some of the rules search for strings in the form of credit card numbers. If the rules find an item that contains such a string, they assign the value "PII" to the item's evtag.category property, to indicate that the item contains personally identifiable information.
Table: Example classification rules describes the classification rules in the example rule set.
Table: Example classification rules
Rule name | Description | Property used | Assigned value |
|---|---|---|---|
Detects items that may contain American Express credit card numbers. | evtag.category | PII | |
Detects items from the email domains of known news and research providers (alerts.yahoo.com, cnn.com, news.google.com, and so on). | evtag.exclusion | Auto-generated | |
Detects out-of-office messages. | evaction.discard | Default Retention Category | |
Detects items containing terms and phrases that are commonly associated with charitable solicitations. | evtag.exclusion | Charity solicitations | |
Detects items that were tagged in Microsoft Outlook as being Company Confidential. | evtag.inclusion | Company Confidential | |
Detects items that may contain Brazilian CPF numbers and associated words or phrases. | evtag.category | PII | |
Detects items that had an Enterprise Vault retention category named "1 Month" when they were submitted for classification. | evtag.category | Short retention | |
Detects items that were sent within a specified date range. | evtag.inclusion | Sensitive project | |
Detects items that may contain Discover Card credit card numbers. | evtag.category | PII | |
Detects items that may contain UK driving license numbers. | evtag.category | PII | |
Detects items that have an attachment of type PST or NSF. | evtag.category | Email containers | |
Detects fax attachments. | evtag.category | Fax | |
Detects items containing terms and phrases that are commonly associated with financial transactions. | evtag.inclusion | Financial | |
Detects items that may contain current identity card numbers (issued in Germany since 2010). | evtag.category | PII | |
Detects items that are 1000 KB or larger. | evtag.category | Large item | |
Detects items that have 10 or more attachments. | evtag.category | Many attachments | |
Detects items containing terms and phrases that are commonly associated with legal documents. | evtag.inclusion | Legal | |
Detects items that were tagged in Microsoft Outlook as being of low importance. | evtag.exclusion | Low importance | |
Detects items that may contain MasterCard credit card numbers. | evtag.category | PII | |
Detects items that were sent to an external recipient. | evtag.inclusion | Sent externally | |
Detects items that were sent externally to a specific domain. | evtag.inclusion | Sent externally | |
Detects items that may contain UK national insurance numbers. | evtag.category | PII | |
Detects items that may contain Singaporean national registry identification numbers. | evtag.category | PII | |
Detects items for which Enterprise Vault was only able to supply partial content for classification (because, for example, their content was encrypted). | evtag.category | Partial content | |
Detects items that may contain Indian permanent account numbers and associated words or phrases. | evtag.category | PII | |
Detects items that were tagged in Microsoft Outlook as being Personal. | evtag.category | Personal | |
Detects items that have attachments in Microsoft Word or Excel format. | evtag.category | Productivity documents | |
Detects items that contain the user-defined code name of a project that is considered sensitive. | evtag.inclusion | Sensitive project | |
Detects items that may contain US social security numbers. | evtag.category | PII | |
Detects items that may contain French VAT/TVA numbers. | evtag.category | PII | |
Detects items that may contain Visa credit card numbers. | evtag.category | PII | |
Detects items that include web links. | evtag.category | Web links |