Veritas Data Insight Classification Guide
- About this guide
- Getting Started
- Managing content classification from Data Insight
- Configuring classification
- Configuring classification policies in Veritas Information Classifier
- Microsoft Purview Information Protection (MIP) Label
- Initiating classification
- Viewing classification status
- Pausing or Resuming a classification request
- Canceling a classification request
- Resubmitting paths that failed classification
- Viewing classification tags
- Sensitive and non-sensitive tags
- Pushing classification tags while archiving files into Enterprise Vault
- Appendix A. Classification best practices
- Appendix B. Classification jobs
- Appendix C. Troubleshooting classification
Microsoft Purview Information Protection (MIP) Label
Microsoft Information Protection (MIP) is a built in, intelligent, unified and extensible solution to protect sensitive data. MIP technology integration allows adding labels to the documents. The label might have a policy to restrict access to the sensitive documents.
Note:
Classification feature must be enabled in Data Insight to fetch MIP tags associated with the files. Refer Data Insight Classification guide and Data Insight Administrator's guide to know more about setting up Classification.
To fetch MIP Labels using VIC, navigate to Settings and click Policy Manager in the left pane.
Note:
If you want to fetch MIP labels of protected files, enable only MIP related policies, without enabling other policies in Veritas Information Classifier.
You can create custom tags that you want to associate with the files for which MIP labels are available. These tags will then be available in Data Insight for selection.
Navigate to Veritas Information Classifier >> Tags to configure new tags.
After creating new tags, you need to associate those tags with a policy. To create new policy click New at the bottom of the Policies page. A new window appears.
Add name of your choice
Status should be Enabled
Add description (optional field)
Select the tags that you have created
Select custom string field from the Conditions drop-down. You can add multiple conditions as per your requirement.
Note:
Data Insight automatically tags all files coming from VIC as Sensitive files. If the files are tagged with MIP label using VIC, it will be tagged as sensitive, affecting the user risk score.
MIP labels are custom attributes of a file so you will have to provide information in specific format in the Text Box present in VIC Policy Manager.
For Office files with INTERNAL, label, add the following condition
custom:MSIP_Label_b43db875-2771-47af-9fc1-26bfde1b65ba_Name "contains Text" INTERNAL
Note:
You need to add custom: before the label name and include GUID present in the label.
For PDF file with INTERNAL, label, add the following condition
pdf:docinfo:custom:MSIP_Label_b43db875-2771-47af-9fc1- 26bfde1b65ba_Name "contains Text" INTERNAL
Note:
You need to add pdf:docinfo:custom before the label name and include GUID present in the label.
File Types | Sample Format | Condition | Value |
|---|---|---|---|
Office Files | custom:MSIP_Label_<MSIP_label_GUID>_Name | Contains Text | INTERNAL |
PDF Files | pdf:docinfo:custom:MSIP_Label_<MSIP_label_GUID>_Name | Contains Text | INTERNAL |
After completing the process, you can see the associated tags in the Data Insight interface.
Note:
Newly added MIP labels will be visible only after MIPGetLabelsjob gets executed on the Management Server. You can run it manually if you want to see the labels before the scheduled run, which is at 12 a.m. everyday by default.