Introduction
About this Guide
System Requirements
Minimum Required Permissions
Required Ports
Performance Calculations
Deploying Classification in Identity Manager
Classification Overview
Required Components
Component Workflow
Activating Classification
Configuring Classification: Taxonomies, Categories, and Rules
Install the Classification Components
Enable Classification in the Designer
Identify the Classification Service Account
Deploy the Classification Server
Deploy Classification Workers
Enable and Disable Automatic Classification on Specific Managed Hosts
Enabling Categorization on Folders (Security Index Roots)
Managing the File Types to be Classified
Starting Initial Classification
Upgrade an Agent for Classification
Re-classify Data
Classification Application Roles
Troubleshooting the Classification Deployment
An Overview of Classification Configuration
Steps Required to Implement Classification
Creating Taxonomies
Appendix A: PowerShell Commands
Working with Taxonomies
Implementing Rules for Automated Categorization
Creating a Taxonomy
Importing and Replacing Taxonomies
Editing a Taxonomy
Deleting a Taxonomy
Exporting Taxonomies
Working with Categories
How Rules Affect Categorization
Managing Rules in the Classification System
Classifying Resources
When Do Categorization and Classification Occur?
Managing the Life Cycle of Taxonomies and Categories
Creating a Rule
Editing a Rule
Associating Rules to Categories and Applying Rule Weights
Deleting a Rule
Advanced Rule Applications
Working with Text Extractors
Identifying Text Extractors used within the System
Creating Text Extractors
Validating the Text Extractor
Editing Text Extractors
Removing Text Extractors
Working with Regular Expression Text Extractors
Working with Dictionary Text Extractors
Managing Public Dictionary Text Extractors
Managing Protected Dictionary Text Extractors
Managing Dictionary Text Extractors with PowerShell
Working with Advanced Text Extractors
Testing and Reviewing Automated Classification
Testing a Rule against a Resource
Testing all Rules Against a Resource
Viewing the Text from a Resource
Determining Why Categorizations Were Applied to a Resource
Viewing Categorized Resources
Making a Category Available to the Classification System
Adding the PowerShell Snap-ins
Finding a Taxonomy, Category, or Extractor ID using PowerShell
Deploying the Classification Server and the Classification Worker
Troubleshooting Deployment
Managing Taxonomies
Appendix B: Oracle Configuration
Appendix C: Classifying Data with Data Governance Templates
Available Templates
Appendix D: Creating a Taxonomy to Classify Data
Managing the File Types to be Classified
To reduce the amount of network traffic and expedite the process of classifying only the data that is of interest to you, you can easily configure the scans to focus on specific types of data.
 |
If you change the file types to be processed for classification from the web portal you must restart the agent for the changes to take effect. If you exclude a file type for resources that were previously classified, these resources will continue to be sent for classification if you trigger a full request for re-classification using PowerShell. |
The following data types are enabled for classification by default.
| Format | Application (Extension) |
| Archive | 7-Zip (7Z) GZIP (GZ) PKZIP (Zip) RAR archive (RAR) WINZIP (ZIP) |
| CAD | Microsoft Visio (VSD,VSS,VTS) |
| Display | Adobe PDF (pdf) |
| Microsoft Outlook (MSG,OFT) Microsoft Outlook Offline Storage File (OST) Microsoft Outlook Personal Folder(PST) | |
| Presentation | Microsoft PowerPoint (PPT,PPS,POT) Microsoft PowerPoint Windows (PPT,PPS,POT) Microsoft PowerPoint Windows XML(PPTX,PPTM,POTX,POTM,PPSX,PPSM) OASIS Open Document Format (SXD,SXI,ODG,ODP) OpenOffice Impress (SXI,SXP,ODP) StarOffice Impress (SXI,SXP,ODP) |
| Spreadsheet | Comma Separated Values (CSV) Microsoft Excel Charts (XLS) Microsoft Excel Macintosh (XLS) Microsoft Excel Windows (XLS,XLW,XLT,XLA) Microsoft Excel Windows XML (XLSX,XLTX,XLSM,XLTM,XLAM) OASIS Open Document Format (ODS,SXC,STC) OpenOffice Calc (SXC,ODS,OTS) StarOffice Calc (SXC,ODS) |
| Text and Markup | ANSI(TXT) ASCII (TXT) HTML (HTM) Microsoft Excel Windows XML (XML) Microsoft Word Windows XML (XML) Rich Text Format (RTF) Unicode HTML (HTM) Unicode Text (TXT) XHTML (HTM) XML (generic) (XML) |
| Word Processing | Microsoft Word Macintosh (DOC) Microsoft Word Macintosh (DOT) Microsoft Word PC (DOC) Microsoft Word Windows (DOC) Microsoft Word Windows (DOT) Microsoft Word Windows XML (DOCM) Microsoft Word Windows XML (DOCX) Microsoft Word Windows XML (DOTX) Microsoft Word Windows XML (DOTM) WordPad (RTF) |
To manage the files to be considered for classification
- In the Manager/Identity Manager select the Data Governance navigation view, expand the Classification node, and select File Types.
You will see a list of file types currently being assessed during agent scans. - Use the arrows to add and remove the file types that you want scanned and click Save.
Ensure that the enabled file type extensions have not been explicitly excluded from agent scans. For details, see Managing Exclusions in the Data Governance Edition User Guide.
Starting Initial Classification
For locally managed hosts, you must restart an agent for the classification process to take effect when you enable classification on an existing security index root. When you add a new security index root and enable classification, a restart is not required.
For remotely managed hosts and Sharepoint managed hosts, you must also have the “Immediately scan on agent restart option” enabled for the classification process to take effect. Classification will happen on the next scan after the automatic classification was enabled.
To restart an agent
- In the Manager/Identity Manager select the Data Governance navigation view, and select the Agents View.
- Select the required agents in the Agents view tab, and select Restart agent in the Tasks view.
- Click Yes to confirm.
| |
When a Data Governance agent is restarted, it re-creates all information within its local index. The server index is updated when the full scan completes. Local managed hosts/agents will always scan on restart and rebuild the index - all other types of hosts require the Immediately scan on agent restart option enabled in the Master data form | Scanning Schedule tab (in order to scan on restart). |
Upgrade an Agent for Classification
To upgrade an agent
| |
An agent upgrade may initiate a re-scan of the security index root. |
| |
When you upgrade an agent on a computer that hosts multiple agents that are scanning different managed hosts, the agent services will be upgraded for all the managed hosts the agent host computer is scanning.In the case where you have multiple agents on different computers scanning different security index roots on a single managed host, and you select to upgrade one of the agents through the Agents view, all the agents on all computers scanning that host will be upgraded. If you choose to enable classification on a managed host that was not previously classification enabled, the security indexing agents associated with the host will also be upgraded to the current version. |
- In the Manager/Identity Manager select the Data Governance navigation view, select the Agents View, right-click the agent, and choose Upgrade agent. Note: You can multi-select agents to upgrade.
-OR-
In the Manager/Identity Manager select the Data Governance navigation view, select the Managed hosts node, right-click the managed host, and choose Upgrade agent. Note: You can multi-select managed hosts to upgrade.
Re-classify Data
Using PowerShell you can cause an immediate re-classification of all NTFS and SharePoint data for all of the managed hosts within your environment or on only selected data. For details, see Re-classifying Data.