Working with Policies

 

 

Overview

The Policies screen is where you manage all your organization's policies.

 

To access this screen:

  1. From the left menu, click Agents.

  1. Click Policies.

  1. Expand a section for more information.

View a Policy

Use the following steps to view a policy:

  1. Select an option from the Policy Configuration drop-down list.

  2. The selected policy displays just below the Default Policy section.

  3. Click the down arrow () to expand a section and up arrow () to collapse a section.

Each section displays a summary of the following:

  • Agent Operations
    • Additional Options
  • Additional Settings
    • Basic Options
    • Advanced Options
  • Local Reporting
  • Local Logging
    • Basic Options
    • Advanced Options

 

Add a New Policy

To add a new policy:

  1. In the top right of the screen, click Add Policy.

  2. On the Policy Setup Basics screen, fill the Policy Name and click Next.

  3. On the Agent Operations screen, set the time for Check for Policy Updates intervals.

  4. Click Next to proceed, Previous to return to the previous screen, or Exit Without Saving
    to discard.

  5. Click Advanced Options to input more detailed options.

  6. Expand the section for more information:

Agent Operations - Advanced Options Details

Use the table below to help you fill in the Agent Operations - Advanced Options screen:

Name Options Description

Enable Startup Check
  • Disable
  • Enable

Enable the console checks that the endpoint performs at startup.

Use FQDN
  • Use Host/NetBIOS name
  • Use FQDN
  • Use Computer Name

The computer name format.
Result Storage Mode
  • Memory Mode
  • On-disk database
 Specify how Spirion stores results during a search.

Allow Configuration File to
Override System Setting
  • Disable
  • Enable

Enable the ability for settings in a configuration file to override system settings

Target Watcher User Selection
  • Always prompt (Default)
  • Always search
  • Disable

The end user's service behavior selection.

Plugins

  • Disable (Default)
  • Enable Plugins

Full path to custom search plugins.

Path

No Value (Default)

Full path to custom search plugins.

Classification Disable Integration
  • Allow Classification via Add-ins (Default)
  • Prevent Classification via Add-ins

Specify whether classifications are editable via integration add-ins.

Error Report Auto Save On Close
  • Require user to manually save error report (Default)
  • Automatically save error report on close

Automatically save error reports when the dialog is closed.

Window Body

No Value (Default)

The text to display in the body of an error report dialog.

Window Header

No Value (Default)

The text to display in the header of an error report dialog Win .

Gather Data Options
  • Include Search History Databases

Specify the data to include when performing a Gather Data.

Log Capture Window

30 (Default)

The number of days of logs to include when using the Gather Data function

Max Data Gathering Size

0 (Default)

The maximum size, in MB of the output of the Gather Data function.

 

Temp Files

  • The Agent Operation uses the Temp File Location if it has an assigned value.

  • The file location must have a Windows file path and cannot be a mapped network drive.

Set up temp file options for clean-up, either:

  • To begin shredding temp files immediately or delay until the scan is complete.

  • To asynchronously shred temp files, or shred in sync with the scan.

When scanning, compressed files can be downloaded to the Temp File.

  • To save processing time, the compressed file is decompressed one file at a time and the same set of decompressed files are used for each discovered location.

  • The file will not be compressed or decompressed again.

  • The Temp File is shredded intermittently to limit space usage and processing time.

  • The settings for the Temp File are in the Scan option selection.

 

  1. Click Next to proceed, Previous to return to the previous screen, or Exit Without Saving
    to discard.

  2. On the Additional Settings screen, you can input additional settings.

  3. Expand for more information:

Additional Settings Details

Use the table below to help you fill in the Additional Settings screen:

Name Options Description

Show Context Menu
  • Show Help Menu
  • Show Search Menu
  • Show Secure Menu
  • Show Shred Menu
  • Show Sub Menu

Select one or more options.

Show Wizard

 

 
  • Skip Search Wizard
  • Show Search Wizard
  • Disable Results Wizard

Show the Wizard.

Startup Wizard Add OnlyFind Option
  • Yes (Default)
  • No

Set the default option for OnlyFind in the Search Wizard.

Search Completion Option
  • Show Search Summary Window (Default)
  • Show Results Wizard
  • Skip Wizard and Summary and use Advanced mode

Specify the user experience when a search completes.

Startup Wizard Search Option
  • Start Searching Now
  • Continue in Wizard Mode
  • Skip Wizard and Use Advanced Mode

Set the default option for the Search Wizard.

Show Preview Pane
  • Display (Default)
  • Do not Display

Displays Preview Pane.

Show Results Pane
  • Check Remote Files For Existence
  • Mask Matches Show Last Four Only
  • Display Date and Time
  • Display Size in Bytes
  • Enable Mask Matches
  • Use Flat Report

Displays Result Pane.

Classification Display Preference
  • Icon (Default)
  • Color
  • Name

The style of display for the classification column in the endpoint UI.

Mask Matches Configuration
  • Social Security Numbers
  • Credit Card Numbers
  • Password Values
  • Bank Account Numbers
  • Driver Licenses
  • Dates of Birth
  • Telephone Numbers
  • E-Mail Addresses
  • Personal Addresses
  • Passport Numbers
  • Mother's Maiden Names
  • Social Insurance Number (Canada)
  • National Insurance Number (United Kingdom)
  • Tax File Number (Australia)
  • Regular Expression,
  • Keyword
  • Dictionary
  • Health Information

Specify the data types to mask when mask matches is enabled.

Results Data Configuration
  • Location Type
  • Location
  • Created date
  • Modified date
  • Last accessed date
  • Size
  • Owner
  • Attributes
  • Data type
  • Match
  • Match instances

Specify the data to be retrieved during the search.

Display Results
  • Show expanded
  • Show collapsed

Select an option.

 

  1. Click Advanced Options to input more detailed options.

  2. Expand the section for more information:

Additional Settings - Advanced Options

Use the table below to help you fill in the Additional Settings - Advanced Options screen:

Name Options Description

User Profiles
  • Always Prompt for Profile Password
  • Disable Change Profile Password
  • Disable Delete Profile
  • Disable Export Profile
  • Disable Import Profile
  • Enable Password Strength
  • Include Default Settings On Profile Export
  • Use Profile Password for Secure Action

Select one or more options.

Require Profile Login
  • Allow guest profile
  • Require login
  • Prohibit login

Select an option.

Use Profile Password
  • Require individual passwords
  • Use profile password

Select an option.

Use Profile Password For Save
  • Require individual passwords
  • Use profile password

Select an option.

Results Pane
  • Allow Sort During Search in Disk Mode
  • Exclude Identity Matches in Results Data

Select one or more options.

Row Cache Size

 

Use the number input to select the cache size.

Update Timer

 

Use the number input to select timer length.

Other
  • Show Tool tips
  • Show System Tray icon
  • Disable Reset Dialog
  • Display Properties Pane

Select one or more options.

  1. Click Next to proceed, Previous to return to the previous screen, or Exit Without Saving
    to discard.

  2. On the Local Reporting screen, you can input additional settings. Expand the section for more information:

Local Reporting

Use the table below to help you fill in the Local Reporting screen:

Name Options Description

Allow Locally Scheduled Tasks:
• Exit
• On Complete
  • Do not exit
  • Always exit
  • Only exit when no results

Select an option.

Save Key

 

Type the save key in the box.

Save Key 2

 

Type the save key 2 in the box.

Save Location

 

Type the save location in the box.

Save Location 2

 

Type the save location 2 in the box.
Save Locations Are Folder Names
  • False
  • True
 Select an option.
Settings Source

  • Profile

  • JobSettings

  • Configuration file

 Select an option.

Auto Save Results
  • Disable
  • Save as IDF
  • Save as HTML
  • Save as CSV

Select an option.
Auto Save Secure Results 2
  • Disable
  • Enable
 Select an option.
Configuration File Location   Type the configuration file location in the box.
Create Folder Location
  • Disable
  • Enable
 Select an option.
Create Folder Location 2
  • Disable
  • Enable
 Select an option.
Save Settings

  • Save Location Type

  • Save Location

  • Save Match

  • Save Data Type

  • Save Number of Instances

  • Save Checked Rows Only

  • Save Parent Rows Only Mask all but the last 4 characters of the match

  • Save Item Size

  • Save Date Created

  • Save Date Modified

  • Save Date Accessed

  • Save File Owner

  • Save File Attributes Mask all but the last 4 characters of the match (and first six for CCNs)

  • Save Classification

  • Save Database Column Name

 Select an option from the drop-down list.
CSV Save Repeat All Data
  • Disable
  • Enable
 Select an option.
CSV Save Show Multi Rows
  • Disable
  • Enable
 Select an option.
HTML Report Options

  • Save Location Type

  • Save Location

  • Save Match

  • Save Data Type

  • Save Number of Instances

  • Save Checked Rows Only

  • Save Parent Rows Only Mask all but the last 4 characters of the match

  • Save Item Size

  • Save Date Created

  • Save Date Modified

  • Save Date Accessed

  • Save File Owner

  • Save File Attributes Mask all but the last 4 characters of the match (and first six for CCNs)

  • Save Classification

  • Save Database Column Name

 Select an option from the drop-down list.
Spirion Report Options
  • Save Match
  • Save Checked Rows Only
 Select an option.
Disable Feature - Save IDF Files
  • Allow save as idf
  • Disable save as idf
Select an option.
Disable Save Feature in Clear Text
  • Allow clear text save
  • Disable clear text save
 Select an option.
Check Previous Results
  • Do no check results
  • Check results
 Select an option.
Automatically Save & Load Results
  • Disable
  • Enable
 Select an option.
Show Results in Client UI
  • Do not show results
  • Show results
 Select an option.

 

  1. Click Next to proceed, Previous to return to the previous screen, or Exit Without Saving
    to discard.

  2. On the Local Logging screen, you can input logging settings.

  3. Expand the section for more information:

Local Logging Details

Use the table below to help you fill in the Local Logging screen:

Name Options Description
Types    
Auto Action - Do Messages
  • Do not log message
  • Log messages
 Select an option.
Auto Action - Do Errors
  • Do not log message
  • Log messages
 Select an option.
Do Messages
  • False
  • True
 Select an option.
Do Errors
  • False
  • True
 Select an option.
Do Debug
  • False
  • True
 Select an option.
Do Secure Items Skipped
  • False
  • True
 Select an option.
Enable Logging
  • Disable
  • Enable
 Select an option.
Retention
  • New log every search
  • Append to previous log
 Select an option.
Do Locations Searched
  • False
  • True
 Select an option.
Do Matching Locations
  • False
  • True
 Select an option.
Do User Actions
  • False
  • True
 Select an option.
Log Format
  • Fixed width
  • Comma Separated
  • Tab separated
Select an option.
Console Log Types
  • Error Information
  • Debug
  • Search Result
  • Locations Containing Matches
  • File Searched
  • Location Searched
  • Secure Item Skipped
  • Location Skipped
  • User Action
 Select one or more options from the drop-down list.
Send Logs
  • Disable
  • Enable
 Select an option.
Standard Operations
  • Default
  • Log Informational Messages
  • Log Debugging Messages
  • Log Detailed Trace Messages
  • Log All Messages
 Select an option.
Discovery Teams
  • Disabled
  • Standard Logging
  • Additional Logging
  • Comprehensive Logging
  • Full Logging
 Select an option.
Location Based Operations
  • Default
  • Log Informational Messages
  • Log Debugging Messages
  • Log Detailed Trace Messages
  • Log All Messages
 Select an option.

 

  1. Click Advanced Options to input more detailed options.

  2. Expand the section for more information:

Local Logging - Advanced Options Details

Use the table below to help you fill in the Local Logging - Advanced Options screen:

Name Options Description
User Profiles    
Auto Delete More Than Max Logs
  • Do not delete logs
  • Keep a maximum number of logs
 Select an option.
Auto Delete More Than Max Logs
On Exit Threshold		   Use the number input to set the value.
Auto Delete Old Logs On Exit
  • Do not delete old logs
  • Delete old logs
Select an option.
Auto Delete Old Logs Threshold   Use the number input to set the value. Note: The files will auto delete after the configured time, but since the last time the file was modified.

Options

   
Last Log Name   Type the last log name in the box.
Log Path   Type the log path in the box.
Disable Delete Logs
  • Allow delete
  • Disable delete
 Select an option.
Disable Reset Log Path
  • Allow reset
  • Disable reset
 Select an option.
Do Verbose Registry Logging
  • False
  • True
 Select an option.

 

  1. Click Next to proceed, Previous to return to the previous screen, or Exit Without Saving
    to discard.

  2. On the first Review Policy screen you can review policy settings for the below sections.

  3. Click the pencil icon () to edit any of the sections:

    • Policy Setup Basics

    • Activity Monitor & File Watcher

    • Email Watcher

    • Proxy Policy

    • Agent Operations

    • Additional Settings

    • Advanced Options

 

  1. Click Next to proceed, Previous to return to the previous screen, or Exit Without Saving
    to discard.

  2. On the second Review Policy screen, you can review policy settings for the below sections.

  3. Click the pencil icon () to edit any of the sections:

    • Policy Setup Basics

    • Agent Operations

    • Additional Settings

    • Local Reporting

    • Local Logging

  1. Click Finish & Save to save the policy, Previous to return to the previous screen, or Exit Without Saving to discard.

Edit a Policy

To edit a Policy, do the following:

  1. Click the Policy Configuration drop-down list, locate and click the policy you want to edit.

  2. Click Edit this Policy.

  3. Make needed changes to each section. See Add a New Policy for more information.

    • Policy Setup Basics

    • Agent Operations

    • Agent Operations - Advanced Options

    • Additional Settings

    • Additional Settings - Advanced Options

    • Local Reporting

    • Local Logging

    • Review Policy Settings 1

    • Review Policy Settings 2

  4. Review the policy changes, and then click Save to save the changes or Exit Wizard to discard.

Delete a Policy

To delete a Policy, do the following:

  1. Click the Policy Configuration drop-down list, locate and click the policy you want to delete.

  2. Click Delete Policy.

  3. On the Delete Policy pop-up window, click Confirm to delete the policy or else click Cancel.