Contents

• Enabling Categorization on Folders (Security Index Roots)
• Managing the File Types to be Classified
• Restart or Upgrade Agents for Classification
• Perform a Data Re-classification with PowerShell

Data Governance allows for both automatic and manual classification of resources.

Automatic classification refers to the process by which a resource is categorized according to defined rules. This is enabled on a per managed host basis to ensure that target computers containing potentially sensitive data are processed while maintaining a reasonable amount of network traffic.

Manual classification refers to assigning a resource to a given taxonomy and category. This is performed within the Web Portal by the business owner. Manual classification overrides automatic classification.

There may be a time lapse between when the business owner is able to manually classify data in the Web Portal and when the resources marked for automatic classification in the Manager are processed. If the business owner categorizes a resource prior to the processing, they will be able to eventually see the automatic processing results and make adjustments where required within the Web Portal.

For details on managing your classified resources, see Classifying Resources.

Automatic classification can be enabled when you add a managed host to the Data Governance deployment or at a late date.

To enable automatic classification on currently deployed managed hosts

1. In the Navigation view, select Managed hosts.
2. Select the required managed host in the Managed host tab, and select Change master data in the Tasks view.
3. Select the Classification tab and check Enable automatic classification.

Before data can be processed and classified, the folders that contain the data must be identified. This is accomplished through the security index root configuration.

A security index root is the root of an NTFS directory tree to be scanned by an agent, or a point in your SharePoint farm hierarchy below which everything is scanned.

To enable classification on folders and their contents

1. In the Navigation view, select Managed hosts.
2. Select a managed host in the Managed host tab, and select Change master data in the Tasks view.
3. Select the Security Index Roots tab.
4. Select Configure security index roots from the Tasks view.
   For a local host, you need to add and save your changes before you can add a security index root. For a remote host, you need to add and save your changes, then add an agent and save your changes before you can add a security index root.
5. Choose the directory to be scanned and the required agent, enable Classification where required, and click OK.

To reduce the amount of network traffic and expedite the process of classifying only the data that is of interest to you, you can easily configure the scans to focus on specific types of data.

The following data types are enabled for classification by default.

To manage the files to be considered for classification

1. In the Navigation view, expand the Classification node and select File Types.
   You will see a list of file types currently being assessed during agent scans.
2. Use the arrows to add and remove the file types that you want scanned and click Save.

   Ensure that the enabled file type extensions have not been explicitly excluded from agent scans. For details, see Managing Exclusions in the Data Governance Edition User Guide.

For locally managed hosts, you must restart an agent for the classification process to take effect when you enable classification on an existing security index root. When you add a new security index root and enable classification, a restart is not required.

For remotely managed hosts and Sharepoint managed hosts, you must also have the “Immediately scan on agent restart option” enabled for the classification process to take effect.

To restart an agent

1. In the Navigation view, select the Agents View.
2. Select the required agents in the Agents view tab, and select Restart agent in the Tasks view.
3. Click Yes to confirm.

When a Data Governance agent is restarted, it re-creates all information within its local index. The server index is updated when the full scan completes. Local managed hosts/agents will always scan on restart and rebuild the index - all other types of hosts require the Immediately scan on agent restart option enabled in the Master data form | Scanning Schedule tab (in order to scan on restart). To determine whether data in the client is the most current from the agent, ensure that the data state of the managed host being examined is marked as “Data Available.”

To upgrade an agent

An agent upgrade may initiate a re-scan of the security index root.

When you upgrade an agent on a computer that hosts multiple agents that are scanning different managed hosts, the agent services will be upgraded for all the managed hosts the agent host computer is scanning.In the case where you have multiple agents on different computers scanning different security index roots on a single managed host, and you select to upgrade one of the agents through the Agents view, all the agents on all computers scanning that host will be upgraded. If you choose to enable classification on a managed host that was not previously classification enabled, the security indexing agents associated with the host will also be upgraded to the current version.

1. In the Navigation view, select the Agents View, right-click the agent, and choose Upgrade agent. Note: You can multi-select agents to upgrade.
   
   -OR-
   
   In the Navigation view, select the Managed hosts node, right-click the managed host, and choose Upgrade agent. Note: You can multi-select managed hosts to upgrade.