Compliance Guardian 4. Installation and Administration User Guide

Transcription

1 Cmpliance Guardian 4 Installatin and Administratin User Guide Service Pack 1 Issued Octber 2016

2 Table f Cntents What Is New in this Guide... 9 Abut Cmpliance Guardian Cmplementary Prducts Submitting Dcumentatin Feedback t AvePint Accessibility Infrmatin fr Screen Reading Sftware Preparatins Befre the Installatin Prts Used by Cmpliance Guardian Cmpliance Guardian Manager System Requirements System Requirements fr Cntrl Service Installatin Cmpliance Guardian Agent System Requirements Requirements fr Agent Accunt Where t Install Cmpliance Guardian Agent System Requirements fr Agent Service Installatin SQL Server Requirements fr Cmpliance Guardian Databases SharePint Envirnment Requirements fr Cmpliance Guardian Agents Overview f Cmpliance Guardian Manager and Agent Services Installing Cmpliance Guardian Cmpliance Guardian Manager Installing Cmpliance Guardian Manager Cmpliance Guardian Agent Installing Cmpliance Guardian Agent Accessing the Cmpliance Guardian GUI Internet Explrer Setup Lgging Int Cmpliance Guardian Hw t Use Yur Keybard in Cmpliance Guardian Cmpliance Guardian Manager and Agent Maintenance Updating Cmpliance Guardian Uninstalling Cmpliance Guardian Uninstalling Cmpliance Guardian Manager Uninstalling Cmpliance Guardian Agent Cmpliance Guardian Installatin and Administratin User Guide

3 Reslving Issues That Occurred During the Cmpliance Guardian Installatin Unattended Installatin: Cmpliance Guardian Manager Generating the Installatin Answer File fr Cmpliance Guardian Manager Imprt the UnattendedInstallatin.dll File Cmmands and Cmmand Parameters fr Cmpliance Guardian Manager Unattended Installatin.. 45 Installatin Cmmand Unattended Installatin: Cmpliance Guardian Agent Generating the Installatin Answer File fr Cmpliance Guardian Agent Imprt the UnattendedInstallatin.dll File Cmmands and Cmmand Parameters fr Cmpliance Guardian Agent Unattended Installatin Installatin Cmmand Installing Cmpliance Guardian App fr Real-Time Scanner Permissin Requirement fr Installing the App Installing the App Registering the App in Office Installing the App n an On-Premises Server Uninstalling Cmpliance Guardian App fr Real-Time Scanner Navigating Cmpliance Guardian Cntrl Panel Getting Started Launching Cntrl Panel Mnitring Using the Health Analyzer Using the Lg Manager Using the Manager Mnitr Using the Agent Mnitr System Cnfiguratin Settings General Settings Agent Grups Jb Pruning Jb Perfrmance Alert Auditing Cmpliance Guardian Installatin and Administratin User Guide 3

4 Cnfiguring Pruning Settings Exprting Auditr Data Reprt License and Update License Manager Update Manager Accunt Managing Users Managing Grups Permissin Level My Settings General Security Authenticatin Manager Managed Service Accunts Security Prfile Cmmn Settings Backgrund Infrmatin n Test Suite and Check Test Suite Manager Check Manager Filter Plicy Ntificatin Settings Templates Recipient Prfile Subscriptin Deplyment Database Manager Cnnectin Manager Slutin Manager Allwed Lcatin Exprt Lcatin Archive and Search Archiving Searching Website Scanner Prfile Cnfiguring Authenticatin Prfile Cmpliance Guardian Installatin and Administratin User Guide

5 Cnfiguring User Agent Prfile Scanner Manager Launching Scanner Manager Overview Selecting Mde t Create a Plan r Rule Scheduled Scanner Cnfiguring a Scheduled Scanner fr SharePint Plan Cnfiguring a Scheduled Scanner fr File System Plan Cnfiguring a Scheduled Scanner fr Website Plan Cnfiguring a Scheduled Scanner fr Database Plan Cnfiguring a Scheduled Scanner fr Lync Plan Cnfiguring a Scheduled Scanner fr Yammer Plan Cnfiguring a Scheduled Scanner fr Bx Plan Real-Time Scanner Creating Real-Time Classificatin Scanner Rules fr SharePint Creating Real-Time Classificatin Scanner Rules fr Yammer Creating Real-Time Classificatin Scanner Rules fr Bx Incident Management Center Launching Mdules in Incident Management Center Jb Mnitr Getting Started Launching Jb Mnitr Understanding Jb Mnitr Jb Mnitr Interface Jb Mnitr vs. Scheduled Jb Mnitr Cnfiguring the Viewing Pane The View Tlbar The Filter Tlbar Searching Jbs Managing Jbs Operatins in the Jb Mnitr Tab Operatins in the Scheduled Jb Mnitr Tab Using Check Validatr Tl Cmpliance Guardian Installatin and Administratin User Guide 5

6 Related Cnfiguratin File Using Cmpliance Guardian Transactin Capture System Requirements fr Using Cmpliance Guardian Transactin Capture Installing Cmpliance Guardian Transactin Capture Using the Tl Mnitring Cmpliance Guardian Jb Perfrmance in Perfrmance Mnitr Using the Fingerprinting Tl Using the Perfrmance Matrix Tl Generating the Average Speed f a Scan Prviding the Target Envirnment Infrmatin Estimating Scan Time Appendix A: Using CustmScan in Cmpliance Guardian Methd CustmCheck Using CustmCheck Methd Cnfiguratin Example Related Cnfiguratin File Appendix B: Supprted File Types in Cmpliance Guardian Appendix C: Using the Scan Engine API Initialize the ScanEngine Class Parameters f the ScanEngine.Scan Methd Usage Example Scan Files Using Test Suite Scan Metadata CCE.EngineWrker.exe Mde Appendix D: Using the CmplianceSetting.cnfig file Cnfiguring t Scan User Prfiles Cnfiguring Restricted Attachment Types and Mdifying the Allwed Maximum Size f Upladed Attachments Custmizing the Directry Where the Checks r Test suites Will Be Temprarily Unzipped Appendix E: Cnfiguring fr Supprting Lad Balancing Cmpliance Guardian Installatin and Administratin User Guide

7 Cnfiguring fr Supprting Netwrk Lad Balancing Wrking Prcess Installing Netwrk Lad Balancing Feature Editing Netwrk Lad Balancing Cluster Prperties Cnfiguring File Share Lcatins Using CCE.EngineService.exe file t Encrypt Passwrds and D Operatins n the <FS> Nde Cnfiguring Cmmunicatin Settings Cntrl Service Lad Balancing Installing Cmpliance Guardian Manager Cntrl Service Lad Balancing Envirnment Appendix F: Cmpliance Guardian Cntrl Service Disaster Recvery Preparatins and Cnfiguratin Prerequisite Cmpliance Guardian Installatin Synchrnizing Databases frm PROD Envirnment t DR Envirnment Simulating the Disaster Recvery Prcess Appendix G: Limitatins f Scanning Oracle Database and SQL Server Prerequisite and Limitatin f Scanning Oracle Database Prerequisite Installing ODP.NET Prvider Limitatin f Scanning Oracle Database Limitatin f Scanning SQL Server Appendix H: Using the Discvery Functin Using the EXE File Using the BAT File Cnfiguring the CSV File Using the Script Running the Script t Generate Discvery Results Appendix I: Analysis Technlgies in Cmpliance Guardian Summary Current Analysis Technlgies Keywrd RegEx Cmpliance Guardian Installatin and Administratin User Guide 7

8 Lexicn Structure Cntext Fingerprint Cmb Custm Appendix J: Preparing t Create Bx Cnnectins Creating a Bx Applicatin Enabling Required Bx APIs Ntices and Cpyright Infrmatin Cmpliance Guardian Installatin and Administratin User Guide

9 What Is New in this Guide Supprt Bx fr bth Real-Time Scanner and Scheduled Scanner. Added infrmatin abut hw t start an incident in Incident Manager withut sending any s fr the Ntificatin Only actin. Added infrmatin abut scanning files based n whether r nt they are shared t external users fr the SharePint Online surce in Cntext Type Check. Cmpliance Guardian Installatin and Administratin User Guide 9

10 Abut Cmpliance Guardian Cmpliance Guardian is designed t ensure that infrmatin is available and accessible t the peple wh shuld have it and prtected frm the peple wh shuld nt. Cmpliance Guardian helps Chief Privacy Officers, Chief Infrmatin Security Officers, Cmpliance Managers, Recrds Managers, SharePint Administratrs, and Cmpany Executives practively prtect their IT envirnments frm harmful infrmatin leaks, cntaminatin, r misuse while simultaneusly ensuring that all activities and cntent residing in their envirnments are cmpliant, accessible, and manageable. Cmpliance Guardian is designed t empwer rganizatins t cmply with regulatry, statutry, r rganizatin specific requirements t manage and versee access t sensitive data. Cmpliance Guardian wrks with AvePint's extended Cmpliance Slutins t prvide a "heat map" that prvides additinal actinable cntext abut the dcument including: hw ld is the dcument, wh authred it, hw many times has it been accessed, wh can access it, wh has accessed it, and what have they dne with it. In this way, rganizatins can take specific steps t prtect and mitigate their risk. By identifying, classifying, and taking actin n cmpliance risks, and presenting this infrmatin in easily digestible frmats fr varius stakehlders, rganizatins can mre effectively build and maintain a cmpliant framewrk. 10 Cmpliance Guardian Installatin and Administratin User Guide

11 Cmplementary Prducts Many prducts and prduct suites n the Cmpliance Guardian platfrm wrk in cnjunctin with ne anther. The DcAve Auditr Reprts are recmmended fr use with Cmpliance Guardian. Auditr Reprts are available in DcAve 6 Reprt Center under Cmpliance Reprts. Cmpliance Guardian Installatin and Administratin User Guide 11

12 Submitting Dcumentatin Feedback t AvePint AvePint encurages custmers t prvide feedback regarding ur prduct dcumentatin. Yu can Submit Yur Feedback n ur website. 12 Cmpliance Guardian Installatin and Administratin User Guide

13 Accessibility Infrmatin fr Screen Reading Sftware Ensure that the fllwing requirements are met befre yu use Jb Access with Speech (JAWS) r NnVisual Desktp Access (NVDA) t read Micrsft Silverlight: 1. JAWS des nt read ActiveX cntrls. In rder t enable JAWS t read Silverlight, the fllwing text must be added t the FsDmSrv.ini file, and JAWS must be restarted. Add this text t the FsDmSrv.ini file: [MS Silverlight Embedded in Internet Explrer using OBJECT Tag with type] DLLName=SDmNdeMSAA ; TagNameMatch ParamAndValueMatch MappingFlags=96 Param=applicatin/x-silverlight-2 TagName=OBJECT StartString=Silverlight applicatin start EndString=Silverlight applicatin end ImplementatinFlags=7 InteractinMdeFlags=3 The user must disable the Virtual Cursr by pressing Ins + Z after the page cntaining the Silverlight applicatin (Cmpliance Guardian interface) has laded. 2. Fr the NVDA screen reader, the fllwing step must be perfrmed in rder t enable NVDA t read Silverlight: The user must enable NVDA Virtual Buffer Pass-thrugh using Ins + Space after the page cntaining the Silverlight applicatin (Cmpliance Guardian interface) has laded. Cmpliance Guardian Installatin and Administratin User Guide 13

14 Preparatins Befre the Installatin Refer t the fllwing sectins fr the prerequisites befre installing Cmpliance Guardian. Prts Used by Cmpliance Guardian Befre the installatin, make sure the prts required fr Cmpliance Guardian Manager and Agents can be accessed thrugh the firewall sftware installed n the crrespnding machines. Fr example, if the Windws Firewall is enabled n the servers which have installed Cmpliance Guardian, yu must make sure the and prts are allwed in the Inbund Rules n the crrespnding servers. *Nte: If there are multiple Cmpliance Guardian services installed n the same server, make sure all f the required prts are enabled n that server. 1. Remtely cnnect t the server where the Cmpliance Guardian Timer Service is installed. 2. Navigate t Start > Administrative Tls > Windws Firewall with Advanced Security. 3. Select Inbund Rules under Windws Firewall with Advanced Security n Lcal Cmputer and select New Rule. 4. In the Rule Type step, select Prt t cnfigure the inbund rule fr the prts used by Cmpliance Guardian Timer Service, and select Next. 5. In the Prtcl and Prts step, specify the rule t be applied t TCP, and then select Specific lcal prts ptin. Enter in the textbx, and then select Next. 6. In the Actin step, select the Allw the cnnectin ptin t allw the cnnectin t prt 14400, and then select Next. *Nte: The prt numbers may vary accrding t the settings cnfigured when installing Cmpliance Guardian in yur envirnments. 7. In the Prfile step, keep the default selectin s that all three ptins are selected, and then select Next. 8. In the Name step, enter the Name and an ptinal Descriptin fr this inbund rule. 9. Select Finish t cmplete the inbund rule creatin. 10. Repeat the same steps n all f the ther servers that have Cmpliance Guardian Agents installed and have Windws Firewall enabled. The prt used by the Cmpliance Guardian Agent is Cmpliance Guardian Installatin and Administratin User Guide

15 Cmpliance Guardian Manager System Requirements Cmpliance Guardian Manager cnsists f ne service called the Cmpliance Guardian Timer Service (a cntrl service). Yu can either run it n the same server as yur Cmpliance Guardian Agent r n a separate server. Fr mre infrmatin n Cmpliance Guardian Manager, refer t Installing Cmpliance Guardian Manager. While it is pssible t have the Cmpliance Guardian Manager and Agent n a single server, it is nt recmmended. T maximize perfrmance, AvePint recmmends yu install the Manager Service n ne server, and install nly the necessary agents n the agent servers. Refer t System Requirements fr Cntrl Service Installatin fr the system requirements f the Cmpliance Guardian Cntrl Service. Nte that the Windws Identity Fundatin 3.5 feature must be installed n the server where the Cmpliance Guardian Manager will reside t ensure incident related functins (like starting an incident, reslving an incident, etc.) wrk nrmally. Fr Windws Server 2008 r Windws Server 2008 R2, dwnlad the installatin file Windws Identity Fundatin (KB974405) and then install it. Fr Windws Server 2012 r Windws Server 2012 R2, refer t the fllwing steps t install the feature: 1. Open Server Manager, and select the Manage buttn at the upper-right crner f the Server Manager windw. 2. Select Add Rles and Features frm the drp-dwn list. The Add Rles and Features Wizard windw appears. 3. G t the Server Rles step, and select the checkbx next t Windws Identity Fundatin Select Next. Then, select Install t install the feature. System Requirements fr Cntrl Service Installatin Operating System Editin: Windws Server 2008, Windws Server 2008 R2, Windws 7, Windws Server 2012, Windws Server 2012 R2 Rules Ttal Physical Memry Available Disk Space.Net Framewrk Versin.Net Framewrk Features Requirements Required: 512MB r abve Recmmended: 2GB Required: 1GB r abve.net Framewrk 3.5 SP1 r abve (excluding.net Framewrk 4.0) The Windws features, including WCF Activatin, HTTP Activatin and Nn-HTTP Activatin must be installed Cmpliance Guardian Installatin and Administratin User Guide 15

16 Operating System Editin: Windws Server 2003, Windws Server 2003 R2 Rules Net.Tcp Prt Sharing Service Windws Prcess Activatin Service Wrld Wide Web Publishing Service Web Server (IIS) Rle Requirements Net.Tcp Prt Sharing Service is started Windws Prcess Activatin Service is started Prcess Mdel,.NET Envirnment and Cnfiguratin APIs are installed Wrld Wide Web Publishing Service is started The fllwing Windws features are installed: Web Server Cmmn HTTP Features (Static Cntent, Default Dcument) Applicatin Develpment (ASP.NET,.NET Extensibility, ISAPI Extensins and ISAPI Filters) Management Tls (IIS Management Cnsle, IIS 6 Management Cmpatibility and IIS 6 Metabase Cmpatibility) Ttal Physical Memry Required: 512MB r abve Recmmended: 2GB Available Disk Space Required: 1GB r abve.net Framewrk Versin.NET Framewrk 3.5 SP1 r abve (excluding.net Framewrk 4.0) Net.Tcp Prt Sharing Net.Tcp Prt Sharing Service is started Service Wrld Wide Web Wrld Wide Web Publishing Service is started Publishing Service ASP.NET ASP.Net r abve Applicatin Server Netwrk COM+ access is enabled. IIS Service HTTP SSL Internet Infrmatin Services (IIS) is started, including the fllwing installed features: Cmmn Files, IIS Manager, and Wrld Wide Web Service IIS Admin Service is started IIS versin must be 6.0 r abve HTTP SSL Service is started 16 Cmpliance Guardian Installatin and Administratin User Guide

17 Required Applicatin Pl Settings The fllwing applicatin pl settings are required by Cmpliance Guardian Cntrl Service Installatin. If yu chse t create a new applicatin pl, Cmpliance Guardian will autmatically cnfigure these settings. If yu chse t use an existing applicatin pl, yu must cnfigure the applicatin pl accrding t the fllwing table: IIS Versin IIS7 IIS Setting Value Nte Advanced Settings > General >.NET Framewrk Versin Advanced Settings > General > Enable 32-bit Applicatins Advanced Settings > General > Managed Pipeline Mde Prcess Mdel > Lad User Prfile Advanced Settings > General > Start Autmatically v2.0 / v4.0 N Managed Cde is nt supprted. False Integrated / Classic True True / False False is required since Cmpliance Guardian must lad sme third-party dlls which are 64-bit nes. It is nt supprted t use Classic tgether with.net Framewrk v4.0. True is required by Cmpliance Guardian SSO, and False is nt supprted. True is strngly recmmended because if yu set the value t False, the applicatin pl requires manual start up. Required Applicatin Pl Accunt Permissins The applicatin pl accunt must have the fllwing lcal system permissins. The selected applicatin pl accunt will be granted Full Cntrl permissin t the fllwing grups and flders autmatically during Cmpliance Guardian Manager installatin: IIS_WPG (fr IIS 6.0) r IIS_IUSRS (fr IIS 7.0) Full Cntrl t HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian 4 Full Cntrl t Cmpliance Guardian Manager flder Member f the Perfrmance Mnitr Users grup Full Cntrl t Cmpliance Guardian Certificate private keys Full Cntrl (r Read, Write, Mdify, and Delete) t C:\WINDOWS\Temp (nly fr Windws 2003 envirnment) Yu can add the applicatin pl accunt t the lcal Administratrs grup t meet the required permissins. Cmpliance Guardian Installatin and Administratin User Guide 17

18 The applicatin pl accunt must have the fllwing permissins t use the AvePint Yammer Cnnectr Web Part: Full Cntrl t Cmpliance Guardian Agent flder Full Cntrl HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian 4 SQL Server Permissins The applicatin pl accunt must have the database rle f db_wner fr all existing databases, and dbcreatr fr creating databases. The applicatin pl accunt must have the Read and Write permissin t Cmpliance Guardian Cntrl Service Database, Reprt Database fr different data surces and Incident Management Center database, and ther Cmpliance Guardian database. The Cmpliance Guardian wrkflw pl accunt must have the Read and Write permissin t Cmpliance Guardian Cntrl Service Database, Reprt Database fr different data surces and Incident Management Center database, and ther Cmpliance Guardian database. Cmpliance Guardian Agent System Requirements The Cmpliance Guardian Agent has ne service called the Cmpliance Guardian Agent Service. A Cmpliance Guardian Agent cmmunicates with SharePint based n the cmmands it receives frm the Cmpliance Guardian Manager s Cntrl Service. Multiple agent setups prvide redundancy as well as scalability fr large envirnments by allwing yu t use different accunts fr different farms where multiple farms exist. The Cmpliance Guardian Agent can be installed n different machines accrding t the rle f the machine, and the Cmpliance Guardian mdules and functinalities yu want t use. Fr mre infrmatin n where t install the Cmpliance Guardian Agents, refer t Where t Install Cmpliance Guardian Agent. *Nte: Cmpliance Guardian supprts scanning Micrsft Office files in a 2003 r earlier frmat using ifilter. If yu are using an earlier versin f Cmpliance Guardian r if yu updated t Cmpliance Guardian 3 SP3 frm an earlier versin, yu must dwnlad a cmpatibility pack and dwnlad an update pack t scan the Micrsft Office files (can keep the file s accessibility attributes). If yu prefer t scan these files thrugh installing the cmpatibility pack but nt thrugh ifilter, yu can install Micrsft Office Cmpatibility Pack fr Wrd, Excel, and PwerPint File Frmats, and install Micrsft Office Cmpatibility Pack Service Pack 3 (SP3). Then, add the fllwing nde under the OfficeFileMapping nde in the cnfiguratin file CntentCmplianceCnfig.xml (yu can find the file under the path \Cmpliance Guardian 4\Agent\Bin): <NeedCnvert> <Extensin>.xls</Extensin> 18 Cmpliance Guardian Installatin and Administratin User Guide

19 </NeedCnvert> Figure 1: NeedCnvert nde. The value in the Extensin attribute is the extensin f the file that yu want t scan thrugh the cmpatibility pack. Requirements fr Agent Accunt Ensure the Agent accunt specified fr the Cmpliance Guardian Agent has the fllwing permissins: Lcal System Permissins The Agent Accunt has Full Cntrl permissin t the fllwing grups and flders during the Cmpliance Guardian Agent installatin: *Nte: The lcal administratr permissin is required fr the Agent Accunt when yu are installing the Cmpliance Guardian slutins using the Agent Accunt in Slutin Manager. IIS_WPG (fr IIS6.0) r IIS_IUSRS (fr IIS7) Perfrmance Mnitr Users Cmpliance Guardian Users (the grup is created by Cmpliance Guardian autmatically and it has the fllwing permissins): Full Cntrl t the Registry f HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian 4. Full Cntrl t the Registry f HKEY_LOCAL_MACHINE\SYSTEM\CurrentCntrlSet\services\eventlg. Cmpliance Guardian Installatin and Administratin User Guide 19

20 Full Cntrl t the Cmmunicatin Certificate. Permissin f Lg n as a batch jb (it can be fund within Cntrl Panel\Administrative Tls\Lcal Security Plicy\Security Settings\Lcal Plicies\User Rights Assignment) Full Cntrl Permissin f Cmpliance Guardian Agent installatin directry SQL Server Permissins The Agent Accunt must have the database rle f db_wner fr all f the databases related with SharePint, including cntent databases, SharePint cnfiguratin database, and Central Admin database, and fr the Cmpliance Guardian databases. The Agent Accunt must have the database rle f dbcreatr and securityadmin t SQL Server, and database rle f dbcreatr fr creating new Cmpliance Guardian database. Required Permissins fr Scanning SharePint In rder t scan SharePint cntent, the Agent Accunt must meet the fllwing permissin requirements: Member f the Farm Administratrs grup Full Cntrl permissin t all znes f all Web Applicatins via User Plicy fr Web Applicatins User Prfile Service: User Persnal Features Create Persnal Site Use Scial Features Managed Metadata Service: Term Stre Administratr Business Data Cnnectivity Service: Full Cntrl Search Service: Full Cntrl SharePint Permissins fr SharePint 2007 Member f the Farm Administratrs grup Full Cntrl permissin t all znes f all Web applicatins via the User Plicy fr Web Applicatins Manage User Prfiles f Shared Services Rights 20 Cmpliance Guardian Installatin and Administratin User Guide

21 SharePint Permissins fr SharePint 2010 Member f the Farm Administratrs grup Full Cntrl permissin t all znes f all Web applicatins via the User Plicy fr Web Applicatins User Prfile Service Applicatin permissins: Permissins > Cnnectin Permissins fr User Prfile Service: Full Cntrl Administratrs > Administratrs fr User Prfile Service Applicatin: Manage Prfiles Administratrs > Administratrs fr User Prfile Service Applicatin: Manage Scial Data Use Persnal Features Create Persnal Site Use Scial Features Managed Metadata Service: Term Stre Administratr Business Data Cnnectivity Service: Full Cntrl Search Service: Full Cntrl SharePint Permissins fr SharePint 2013 Member f the Farm Administratrs grup Full Cntrl permissin t all znes f all Web applicatins via the User Plicy fr Web Applicatins User Prfile Service Applicatin permissins: Permissins > Cnnectin Permissins fr User Prfile Service: Full Cntrl Administratrs > Administratrs fr User Prfile Service Applicatin: Manage Prfiles Administratrs > Administratrs fr User Prfile Service Applicatin: Manage Scial Data Use Persnal Features Create Persnal Site Use Scial Features Managed Metadata Service: Term Stre Administratr Business Data Cnnectivity Service: Full Cntrl Search Service: Full Cntrl Cmpliance Guardian Installatin and Administratin User Guide 21

22 SharePint Online Fr regular scan In scan mde Site cllectin administratr f the target site cllectins Glbal administratr rle, and the user must apply a valid SharePint Online license Required Permissins fr Scanning Lync Cntent In rder t scan the Lync cntent, the agent accunt must meet the fllwing permissin requirements: Lcal System Permissins Cmpliance Guardian users must have Read permissin t the Registry HKEY_LOCAL_MACHINE\SOFTWARE\Micrsft\Real-Time Cmmunicatins\{A593FD00-64F A6F4-E699ED9DCA35}. PwerShell Permissin The agent accunt must be member f Dmain Users and RTCUniversalServerAdmins. The PwerShell cmdlet: Get-CsSite, Get-CsPl, Get-CsManagementStreReplicatinStatus requires the permissin f RTCUniversalServerAdmins. Database Permissin Database rle f db_wner fr all databases that are related with Lync, including LcsLg and LcsCDR. Cmpliance Guardian archiving database (db_wner fr existing database and db_creatr fr new database) Cmpliance Guardian reprt database (db_wner fr existing database and db_creatr fr new database) Lync File Share Flder Permissin At least Read permissin t the Files Stres that are defined in the tplgy t stre attachments. Dmain Permissin Member f the Dmain Users grup under Default Grup Plicy. Required Permissins fr Scanning Oracle Database In rder t scan an Oracle database, the user wh creates the cnnectin with the database must meet the fllwing permissin requirements: The CREATE SESSION permissin 22 Cmpliance Guardian Installatin and Administratin User Guide

23 The SELECT permissin t the table that will be scanned. The SELECT permissin t the captured table. The SELECT permissin t the remte bjects if using distributin CDC. If the table that will be scanned has the BFILE clumn, the BFILE table will use ne r mre directries. The user must have the READ permissin t these directries. The SELECT permissin t the fllwing bjects: CHANGE_TABLES (required t be authrized by sys) CHANGE_SETS (required t be authrized by sys) CHANGE_SOURCES (required t be authrized by sys) ALL_USERS ALL_CONSTRAINTS ALL_CONS_COLUMNS ALL_DB_LINKS ALL_TAB_COLUMNS ALL_INDEXES ALL_IND_COLUMNS ALL_TABLES ALL_TYPES ALL_COLL_TYPES ALL_TYPE_ATTRS v$instance v$database v$services The EXECUTE permissin t ANY TYPE. If yu want t use Oracle netwrk alias t cnnect t the database, make sure the agent accunt has the READ permissin t the fllwing files: %ORACLE_HOME%\netwrk\admin\listener.ra %ORACLE_HOME%\netwrk\admin\tnsnames.ra %ORACLE_HOME%\netwrk\admin\sqlnet.ra *Nte: %ORACLE_HOME% means yur ORACLE_HOME envirnment. *Nte: If yu want t cnnect t Oracle database, yu must first install the ODP.NET_Managed file n the machine where Cmpliance Guardian Agent resides. Cmpliance Guardian Installatin and Administratin User Guide 23

24 Required Permissins fr Scanning SQL Database If Windws Authenticatin r SQL Authenticatin was selected when creating the cnnectin with the database, the agent accunt r the user wh creates the cnnectin must meet the fllwing permissin requirements: The Database-Level rle is db_datareader fr the database that will be scanned; the Server-Level Rle is Public. The SELECT permissin t the table clumns. The SELECT permissin t the captured table. The EXECUTE permissin t the fllwing functins r prcedures: Prcedure:sys.sp_cdc_help_change_data_capture Prcedure:sys.sp_cdc_get_captured_clumns Functin:SERVERPROPERTY Functin:COLLATIONPROPERTY Functin:DATEDIFF Functin:DATEADD Functin:sys.fn_cdc_map_time_t_lsn Functin:SQL_VARIANT_PROPERTY Functin:GET_FILESTREAM_TRANSACTION_CONTEXT() Functin:[FileStreamClumn].PathName() The SELECT permissin t the fllwing system views: sys.databases sys.clumns sys.identity_clumns sys.indexes sys.index_clumns sys.freign_key_clumns sys.freign_keys sys.schemas sys.tables sys.types 24 Cmpliance Guardian Installatin and Administratin User Guide

25 Where t Install Cmpliance Guardian Agent In rder t install Cmpliance Guardian Agents, the fllwing requirements must be met t make all f the functins and cnfiguratins f the prduct available: All f the installed Cmpliance Guardian Agents must be prperly licensed in the mdules yu want t use. In rder t use Cmpliance Scanner, Cmpliance Guardian Agent must be installed n at least ne f the frnt-end Web servers. In rder t use the Scheduled Classificatin Scanner, Cmpliance Guardian Agent must be installed n at least ne f the frnt-end Web servers. In rder t use the Real-Time Classificatin Scanner, Cmpliance Guardian Agents must be installed n all f the frnt-end Web servers. Cmpliance Guardian Installatin and Administratin User Guide 25

26 System Requirements fr Agent Service Installatin Operating System Editin: Windws Server 2003, Windws Server 2003 R2, Windws Server 2008, Windws Server 2008 R2, Windws Server 2012, Windws Server 2012 R2 Rules Ttal Physical Memry Available Disk Space.NET Framewrk Versin.Net Framewrk Features (nly in Windws Server 2008, Windws Server 2008 R2 and Windws Server 2012 envirnments) Net.Tcp Prt Sharing Service SharePint Versin Requirements Required: 512MB r abve Recmmended: 2GB Required: 1GB r abve.net Framewrk 3.5 SP1 r abve (excluding.net Framewrk 4.0) The Windws features, including HTTP Activatin and Nn-HTTP Activatin are installed. Net.Tcp Prt Sharing Service has started. SharePint Server 2007, SharePint Server 2010, r SharePint 2013 is installed. SQL Server Requirements fr Cmpliance Guardian Databases Databases SQL Server Editin Cntrl Database Micrsft SQL Server 2005 Reprt Database Micrsft SQL Server 2008 R2 Micrsft SQL Server 2012 Micrsft SQL Server 2014 Micrsft SQL Server 2016 SharePint Envirnment Requirements fr Cmpliance Guardian Agents Cmpliance Guardian Agents can be installed and used in the fllwing SharePint envirnments: 26 Micrsft Office SharePint Server 2007 with SP2 Windws SharePint Services 3.0 with SP2 Micrsft SharePint Server 2010 with SP1 Micrsft SharePint Fundatin 2010 with SP1 Micrsft SharePint Server 2010 RTM Cmpliance Guardian Installatin and Administratin User Guide

27 Micrsft SharePint Fundatin 2010 RTM Micrsft SharePint Server 2013 with SP1 Micrsft SharePint Fundatin 2013 with SP1 Micrsft SharePint Server 2013 RTM Micrsft SharePint Fundatin 2013 RTM Overview f Cmpliance Guardian Manager and Agent Services After prperly installing all f the services, including Cmpliance Guardian Manager and Agent Services, yu are able t manage the cmpliance f yur SharePint data via the Cmpliance Guardian prduct. Cntrl Service receives the request frm Cmpliance Guardian Manager, and then sends the request t Agent Services which retrieves the data frm SharePint. Agent Services then send the data t the Cntrl Service fr analyzing. If an actin shuld be perfrmed n the SharePint cntents that are cnsidered nt cmpliant by Cmpliance Guardian, thse actins will be perfrmed by the Agent Services. The Agent Services will als be used t exprt the cmpliance reprts frm the reprt database. Cmpliance Guardian Installatin and Administratin User Guide 27

28 Installing Cmpliance Guardian The Cmpliance Guardian Installatin Wizard will guide yu thrugh the installatin prcess. In rder t cmplete the installatin successfully, a lcal administratr accunt must be used t run the Installatin Wizard. *Nte: Install Cmpliance Guardian in the fllwing rder: 1. Install the Cmpliance Guardian Manager with the Manager Installatin Wizard. 2. Install the Cmpliance Guardian Agents with the Agent Installatin Wizard. 3. Lg int Cmpliance Guardian t make sure the Manager and Agent are able t cmmunicate with each ther prperly. Cmpliance Guardian Manager Make sure the system requirements are met befre starting installatin fr Cmpliance Guardian Manager. Fr mre infrmatin, refer t System Requirements fr Cntrl Service Installatin. *Nte: When running the Manager Installatin Wizard n the server running Windws Server 2003/Windws Server 2003 R2, make sure the Windws cmpnents are nt being added r remved during the rule scanning; therwise, the scanning result will be affected. *Nte: When running the Manager Installatin Wizard n the server running Windws Server 2008/Windws Server 2008 R2/Windws 7, make sure the Server Manager is nt being used t add r remve Windws features during the rule scanning; therwise, the scanning result will be affected. Installing Cmpliance Guardian Manager T install Cmpliance Guardian Manager, cmplete the fllwing steps: 1. Dwnlad the Manager ZIP file, either by requesting a dem versin r by cntacting an AvePint representative fr links t this package. 2. Unzip the package, and then pen the unpacked Cmpliance Guardian Manager directry. Run the Setup.exe file. 3. After the welcme screen appears, select Next. 4. Enter yur Name and Organizatin int the prvided fields. Select Next. 5. Carefully review the Cmpliance Guardian License Agreement. After yu have read the agreement, check the I accept the terms in the license agreement checkbx, and select Next. 6. Select Brwse, and then select the lcatin fr the Manager installatin. By default, the installatin lcatin is C:\Prgram Files\AvePint. Select Next. 28 Cmpliance Guardian Installatin and Administratin User Guide

29 7. Select the Cmpliance Guardian Manager Service yu want t install by checking the crrespnding checkbx. There is nly ne service t install. Cntrl Service Manage all Cmpliance Guardian peratins and achieve the Web-based Cmpliance Guardian platfrm, allwing users t interact with the sftware. All agents can cmmunicate with the manager thrugh the Cntrl Service, s it is imperative that the machine yu install the cntrl service n is accessible by all agent machines. Select Next. 8. Cmpliance Guardian will perfrm a brief pre-scan f the envirnment t ensure that all rules meet the requirements. The status fr each rule will be listed in the Status clumn. Select the hyperlink f the status, and the detailed infrmatin abut the scan result will be listed in the pp-up windw. Yu may select Details t view the detailed infrmatin f all f the requirements. If any rules have failed the pre-scan, update yur envirnment t meet the requirements, and then select the Rescan buttn t check yur envirnment again. Once all the rules pass, select Next. 9. Set up the Cntrl Service Cnfiguratin: Cntrl Service Address Specify the current machine s hstname r IP address. The Cntrl Service manages internal cnfiguratin data, user access cntrl, scheduling, and jb mnitring. IIS Website Settings Cnfigure the IIS website settings fr the Cntrl Service. Yu can select t use an existing IIS website r create a new IIS website. The IIS website is used t access Cmpliance Guardian Manager. Use an existing IIS website Select an existing IIS website frm the drp-dwn list, and if necessary, yu can adjust the Website Prt used t access the Cmpliance Guardian Cntrl Service. Create a new IIS website Enter the website name and create a new IIS website fr the Cntrl Service. The default Website Prt used t access Cmpliance Guardian Cntrl Service is 14400; yu d nt need t change it unless a knwn prt cnflict exists. Website Prt Cntrl Service cmmunicatin prt. The default prt is Applicatin Pl Settings Cnfigure the IIS applicatin pl settings fr the crrespnding website. Yu can select t use an existing applicatin pl r create a new applicatin pl. The applicatin pl is used t handle the requests sent t the crrespnding website. The fllwing settings can be cnfigured: Use an existing applicatin pl (nt recmmended) Select an existing applicatin pl frm the drp-dwn list. If yu chse t use an existing applicatin pl, the Applicatin Pl Accunt settings are greyed ut and cannt be changed. Cmpliance Guardian Installatin and Administratin User Guide 29

30 Create a new applicatin pl Enter the applicatin pl name and applicatin pl accunt settings t create a new IIS applicatin pl fr the crrespnding website. By default, the new applicatin pl s name is CmplianceGuardian. Select Next t cntinue t cnfigure the database settings fr Cntrl Service. 10. In this page, MS SQL is selected in the Database Type drp-dwn menu. The fllwing infrmatin must be cnfigured fr the MS SQL database: Select Next. Database Server The MS SQL server name. Cntrl Service Database Name Enter a database name fr the Cntrl Service, if the database des nt exist, it will be created in the prvided MS SQL server. Database Credentials Select the credentials fr this Cntrl Service database. Windws Authenticatin (the default ptin) Use this methd when yu want the user identity t be cnfirmed by Windws. The specified accunt must have permissin t access the SQL Server machine where yu want t create the Cntrl Service Database. SQL Authenticatin SQL server will cnfirm the user identity itself accrding t the specified accunt and passwrd. The specified accunt must have the fllwing permissin: DB Owner f the existing Cmpliance Guardian Cntrl Database r DB Creatr f the newly created Cmpliance Guardian Cntrl Database. Passphrase Settings Enter the passphrase yu want t use fr prtecting Cmpliance Guardian Manager data. Yu can select Shw characters, then the entered passphrase characters are displayed. Advanced Database Settings Yu can chse t assciate the Cmpliance Guardian Cntrl database with a specific failver SQL server that is used in cnjunctin with SQL Server database mirrring. 11. Set up the Advanced Cnfiguratin. Select Next. SSL Certificatin Specify the methd fr encrypting infrmatin and prviding authenticatin fr Cmpliance Guardian: Built-in Certificate Uses the certificate prvided by Cmpliance Guardian. N additinal cnfiguratin is necessary. User-defined Certificate Enabling this ptin allws yu t select a certificate frm yur lcal machine. It will use the Certificate Authenticatin server f the current machine t check whether the certificate is revked. After the certificates are filtered, nly the certificates that are nt revked will be displayed. 30 Cmpliance Guardian Installatin and Administratin User Guide

31 12. In the Ready t install Cmpliance Guardian Manager page, all f the infrmatin cnfigured in the previus steps is listed. Select Install t begin the installatin. Select Back t change any f the previus settings. Select Cancel t abandn all f the cnfiguratins and exit the installatin wizard. 13. When the Manager installatin is cmpleted, the Manager Passphrase yu specified t prtect Cmpliance Guardian Manager data will be displayed n the Install Cmpleted page. Save this passphrase t enter it during the Agent installatin. After the installatin is cmplete, select Finish t exit the installatin wizard. Cmpliance Guardian Agent Make sure the system requirements are met befre starting the Cmpliance Guardian Agent installatin. Fr mre infrmatin, refer t System Requirements fr Agent Service Installatin. Check that the Cmpliance Guardian Manager services have started befre installing the Cmpliance Guardian Agents. Installing Cmpliance Guardian Agent After the Manager s services have started, cmplete the fllwing steps t install the Cmpliance Guardian Agent: 1. Dwnlad the Agent ZIP file, either by requesting a dem versin r by cntacting an AvePint representative fr links t this package. 2. Unzip this package and navigate t the Cmpliance Guardian Agent directry. Run the Setup.exe file. 3. Frm the welcme screen, select Next. 4. Enter yur Name and Organizatin int the prvided fields, and then select Next. 5. Carefully review the Cmpliance Guardian License Agreement. After yu have read the terms in the license agreement, check the I accept the terms in the license agreement checkbx, and then select Next. 6. Select Brwse, and then select the lcatin fr the Agent installatin. By default, the installatin lcatin is C:\Prgram Files\AvePint. Select Next. 7. Cmpliance Guardian will perfrm a brief pre-scan f the envirnment t ensure that all rules meet the requirements. The status fr each rule will be listed in the Status clumn. Select the hyperlink f the status, and the detailed infrmatin abut the scan result will be listed in the pp-up windw. Cmpliance Guardian Installatin and Administratin User Guide 31

32 8. Select Details t view the detailed infrmatin f all f the requirements. Update yur envirnment t meet the requirements if there are sme checked rules that failed. 9. Select the Rescan buttn t check yur envirnment again. Once all rules pass, select Next. 10. Set up the Cmmunicatin Cnfiguratin. Cmpliance Guardian Agent Hst Specify the current server s hstname, IP address, r fully qualified dmain name (FQDN). Cmpliance Guardian Agent Prt The prt specified here is used by the Manager r ther Agents fr cmmunicatin. The default prt number is Cntrl Service Hst The hstname r IP address f the machine where the Cntrl Service is installed. *Nte: If yu want t cnfigure the cnnectin with Yammer fr scanning psts, yu must enter the hstname f the machine where the Cntrl Service is installed. Fr mre infrmatin n cnfiguring the cnnectin, refer t Creating a Yammer Cnnectin. Select Next. Cntrl Service Prt This is the prt used fr cmmunicatin with Cntrl Service and shuld match the infrmatin prvided during the Manager cnfiguratin. The default prt number is SSL Certificatin Specify the SSL Certificatin used fr the specified Cmpliance Guardian Manager. 11. Set up the Agent Cnfiguratin: Select Next. Agent Authenticatin Enter the Manager Passphrase specified when cnfiguring the Cmpliance Guardian Manager installatin. If yu frget the passphrase, yu can view it by navigating t Cmpliance Guardian > General Settings. Fr mre infrmatin, refer t Viewing Security Infrmatin. Select Shw characters, the passphrase characters can display. Agent Accunt Specify the Agent Accunt under which the agent activities are perfrmed. Fr mre infrmatin n the permissins required fr each Cmpliance Guardian mdule, refer t the sectin f that mdule in this user guide. Refer t Requirements fr Agent Accunt fr the ideal accunt permissins fr all Cmpliance Guardian prducts. 12. In the Ready t install Cmpliance Guardian Agent Page, review the custmer infrmatin yu defined, and then select Install t begin the installatin. Select Back t change any f the previus settings. Select Cancel t abandn all cnfiguratins and exit the installatin wizard. 13. After the installatin is cmplete, select Finish t exit the installatin wizard. 32 Cmpliance Guardian Installatin and Administratin User Guide

33 Cngratulatins! Cmpliance Guardian is nw installed and cnfigured. Once yu have cmpleted the prduct installatin, yu can begin t cnfigure the reprt database needed t stre the reprt data. Accessing the Cmpliance Guardian GUI The fllwing table displays the supprted brwsers and their requirements n the Silverlight versin if yu want t access the Cmpliance Guardian GUI in a Windws Server 2008 R2 Enterprise SP1 envirnment. Rules Silverlight Versin 5.0 r abve Internet Explrer IE 7 r abve Ggle Chrme Mzilla Firefx Requirement Internet Explrer Setup When first accessing Cmpliance Guardian using Micrsft Internet Explrer (IE), sme initial security settings must be cnfigured. Run Cmpliance Guardian s server applicatin fund in the Start menu n the machine where the Cmpliance Guardian Cntrl Service is installed, and cmplete the fllwing steps: 1. When yu access Cmpliance Guardian by IE, the brwser will display a security certificate prmpt. Select the Cntinue t this website ptin listed next t the shield. Figure 2: Security certificate prmpt. 2. Select the Certificate Errr buttn next t the address bar. Cmpliance Guardian Installatin and Administratin User Guide 33

34 Figure 3: Certificate Errr buttn. 3. Select View certificates in the pp-up. The Certificate windw appears. Figure 4: View certificates link. 4. Select the Install Certificate buttn t install the Cmpliance Guardian certificate. The name f this certificate is the same as the hstname f the server that has Cmpliance Guardian Cntrl Service installed. Figure 5: Install Certificate buttn. 5. Select Next t cntinue installing the certificate. 34 Cmpliance Guardian Installatin and Administratin User Guide

35 6. Select the Place all certificates in the fllwing stre ptin and select Brwse t brwse t the Trusted Rt Certificatin Authrities flder. Select OK t cnfirm the selectin and select Next. Figure 6: Certificate Imprt Wizard. 7. Select Finish t cmplete the certificate imprt. 8. Select OK in the prmpt windw t acknwledge the successful imprt. 9. Chse t temprarily allw the Cmpliance Guardian GUI pp-up windw r t always allw the Cmpliance Guardian GUI in the prmpt windw. Figure 7: Chse hw t allw the pp-ups. Yu can nw lg int Cmpliance Guardian frm Internet Explrer. Cmpliance Guardian Installatin and Administratin User Guide 35

36 Lgging Int Cmpliance Guardian The Cmpliance Guardian GUI can be launched frm Web brwsers within the same netwrk as the Cmpliance Guardian Manager. Refer t Accessing the Cmpliance Guardian GUI fr the supprted Web brwsers. Cnnect t the interface using the IP/hstname fr the Cmpliance Guardian Manager Cntrl Service, as well as the Cntrl Service Prt if it was changed. 1. Open an Internet Explrer windw and enter where <machine> is the hstname r IP address f the machine running the Cmpliance Guardian Cntrl Service. If the default prt number has been changed frm 14400, enter the new prt number. *Nte: If the hstname f the machine running the Cmpliance Guardian Cntrl Service cntains the underline (_), use the IP address f the crrespnding machine t access Cmpliance Guardian. 2. The Cmpliance Guardian lgin screen pps up. Select Lcal System frm the Lg n t drpdwn list and enter the default lgin accunt infrmatin: 3. Select Lgin. Lgin ID: admin Passwrd: admin *Nte: When yu lg n t Cmpliance Guardian fr the first time, it is strngly recmmended that yu back up the Cmpliance Guardian security keys fr prtectin. Fr mre infrmatin, refer t Viewing Security Infrmatin. Yu can als lg n Cmpliance Guardian using the integratin with ther authenticatin methds. Fr mre infrmatin, refer t Authenticatin Manager. Hw t Use Yur Keybard in Cmpliance Guardian Please refer t the fllwing table fr instructins n using the keybard in Cmpliance Guardian. Keybard Key Tab Enter Space F2 When t Use Switch amng all f the functins in ne page. Select ne buttn. Select ne checkbx/radi buttn/buttn. Gain fcus in ne cell f a table. Switch amng ptins in ne list bx, ptins in ne cmb bx, r amng cells in ne table. 36 Cmpliance Guardian Installatin and Administratin User Guide

37 Cmpliance Guardian Manager and Agent Maintenance If yu want t mdify the cnfiguratin f Cmpliance Guardian Manager/Agent after the installatin, pen the Start Menu in Windws n the Cmpliance Guardian Manager/Agent server, and navigate t All Prgrams > AvePint Cmpliance Guardian. Then, pen the Cmpliance Guardian Manager Tls/ Cmpliance Guardian Agent Tls flder and select Manager Cnfiguratin Tl/Agent Cnfiguratin Tl. Select the items listed n the left part f the tl and yu can mdify the crrespnding settings. Refer t Installing Cmpliance Guardian Manager and Installing Cmpliance Guardian Agent fr detailed infrmatin abut the settings. Cmpliance Guardian Installatin and Administratin User Guide 37

38 Updating Cmpliance Guardian T update Cmpliance Guardian, cmplete the fllwing steps: 1. Navigate t Cmpliance Guardian Manager > Cntrl Panel > Update Manager. The Update Manager interface appears. 2. Select Manage Updates n the ribbn. The Manage Updates interface appears. 3. Select Dwnlad t dwnlad the selected update frm Cmpliance Guardian update server, r select Brwse n the ribbn t brwse and lad the update file int Cmpliance Guardian Manager. 4. Select the update yu want t install and select Install. The Server Selectin pp-up windw shws all f the available Manager services n the Manager tab and all f the available Agents n the Agent tab. 5. On the Manager tab, select the Install the update fr all the managers belw checkbx t install the update n the Manager services. 6. On the Agent tab, select the farms whse Agent services yu want t update by selecting the crrespnding checkbxes. The update will be installed n the selected Agents. 7. Select Install n the ribbn r n the lwer-right crner. A message appears t prmpt yu whether t autmatically restart the IIS service immediately. 8. Select OK t autmatically restart the IIS service, r select Cancel t manually restart the IIS service later. The Update Installatin page appears, displaying the prgress. After installatin, a message appears t indicate that the installatin is successful. 9. Select Finish. After updating Cmpliance Guardian and the IIS service finishes restarting, yu must update the reprt databases if yu still want t use the databases in the updated Cmpliance Guardian versin. 10. Navigate t Cntrl Panel > Slutin Manager. 11. If a message appears after a slutin (The Current slutin versin is lwer than the agent versin), then select the checkbx befre the slutin, and select Upgrade n the ribbn t update the slutin. 38 Cmpliance Guardian Installatin and Administratin User Guide

39 Uninstalling Cmpliance Guardian The Cmpliance Guardian Uninstallatin Wizard is there t guide yu thrugh this uninstallatin prcess. By fllwing the steps belw, yu will have Cmpliance Guardian remved frm yur envirnment very quickly. In rder t cmplete the uninstallatin successfully, the Uninstallatin Wizard must be run by a lcal administratr. Uninstalling Cmpliance Guardian Manager In rder t uninstall Cmpliance Guardian Manager, please ensure the Manager Service being remved is nt in use by anther prcess. T uninstall Cmpliance Guardian Manager, cmplete the fllwing steps: *Nte: Once the uninstallatin is in prgress, it cannt be cancelled and the uninstallatin interface cannt be clsed. 1. Open the Start Menu in Windws n the Cmpliance Guardian Manager Server, and navigate t All Prgrams > AvePint Cmpliance Guardian. 2. Open the Cmpliance Guardian Manager Tls flder, and then select Manager Uninstall. 3. Select the Remve ptin, and then select Next. 4. In the Ready t Remve Cmpliance Guardian Manager page, cnfigure the Remve cnfiguratin file ptin. Select this ptin if yu want t remve all f the flders and cnfiguratin files generated by the Cmpliance Guardian Manager installatin. *Nte: The Lgs flder will nt be remved whether yu select the Remve cnfiguratin file ptin r nt. 5. Select Remve t start the Manager uninstallatin prcess. If the applicatin pl created by Cmpliance Guardian Manager installatin is still useful, it will nt be deleted during the Manager uninstallatin. If the applicatin pl created by Cmpliance Guardian Manager installatin is nt used by any ther applicatins, it will be deleted during the Manager uninstallatin. *Nte: The Manager uninstallatin will nt delete the Manager databases. 6. Select Finish t cmplete the uninstallatin. Cmpliance Guardian Installatin and Administratin User Guide 39

40 Uninstalling Cmpliance Guardian Agent In rder t uninstall Cmpliance Guardian Agent, please ensure there are n current jbs running n the agent. T uninstall Cmpliance Guardian Agent, cmplete the fllwing steps: *Nte: Once the uninstallatin is in prgress, it cannt be cancelled and the uninstallatin interface cannt be clsed. 1. Open the Start Menu in Windws n the Cmpliance Guardian Agent server, and navigate t All Prgrams > AvePint Cmpliance Guardian. 2. Open the Cmpliance Guardian Agent Tls flder, and then select Agent Uninstall. 3. Select the Remve ptin, and then select Next. 4. In ready t Remve Cmpliance Guardian Agent page, cnfigure the Remve cnfiguratin file ptin. Select this ptin if yu want t remve all f the flders and cnfiguratin files generated by the Cmpliance Guardian Agent installatin. *Nte: The Lgs flder will nt be remved whether yu select the Remve cnfiguratin file ptin r nt. 5. Select Remve and the Agent uninstallatin prcess starts. 6. Select Finish t cmplete the uninstallatin. Reslving Issues That Occurred During the Cmpliance Guardian Installatin If yu encunter ther issues when installing the Cmpliance Guardian Manager r Agents, fllw the prmpt messages t reslve the issue, and run the installatin prgram again. If the issue persists, refer t the site fr additinal help. 40 Cmpliance Guardian Installatin and Administratin User Guide

41 Unattended Installatin: Cmpliance Guardian Manager Make sure the system requirements are met befre starting the Cmpliance Guardian Manager unattended installatin. Fr mre infrmatin, refer t Cmpliance Guardian Manager System Requirements. Generating the Installatin Answer File fr Cmpliance Guardian Manager The Answer file is an XML file which prvides cnfiguratin infrmatin required fr the unattended installatin. Befre perfrming the unattended installatin, the Answer file must be generated using the Cmpliance Guardian Setup Manager. Navigate t the \UnattendedInstall\SetupManager flder inside the unzipped Manager installatin package, and duble select SetupManager.exe t run it. Cmplete the fllwing steps: 1. On the welcme screen, select Next. 2. Select Create a new answer file fr Cmpliance Guardian Manager. Mdify an existing answer file If yu want t reuse an existing Answer file, select Mdify an existing answer file. If this is selected, the path field will be enabled. Enter the full path f the answer file is r select Brwse t brwse fr an answer file. Fr example, C:\AnswerFile.xml *Nte: We recmmend yu create a generic Answer file s that it can be reused later with mdificatin. Select Next. 3. Carefully review the Cmpliance Guardian License Agreement. 4. After yu have read the terms in the license agreement, check the I accept the terms in the license agreement checkbx t agree t the terms. Select Next. 5. Enter yur name and the rganizatin int the prvided field. Select Next t cntinue the cnfiguratin, r select Back t return t the previus interface. 6. Set up the installatin lcatin using the fllwing cnditins: Default directry The Cmpliance Guardian Manager will be installed t the default installatin lcatin n the specified destinatin server, which is \Prgram Files\AvePint\Cmpliance Guardian 4\Manager. Cmpliance Guardian Installatin and Administratin User Guide 41

42 Custmized directry If yu select this ptin, enter a custmized path in the Installatin Path field where yu want t install the Cmpliance Guardian Manager n the destinatin server. Use the default directry if yur custmized directry is invalid Enable this ptin t install Cmpliance Guardian Manager t the default directry shuld the path yu defined fr custmized directry be invalid. Fr example, if the drive indicated by the path yu specified des nt exist n the destinatin server. 7. Select the Cmpliance Guardian Manager service yu want t install. There are nly ne service yu can install. Select Next. Cntrl Service Manages all Cmpliance Guardian peratins and cmmunicates with Cmpliance Guardian, allwing users t interact with the sftware. All agents cmmunicate with the Manager via the Cntrl Service, s it is imperative that the machine yu install the Cntrl Service n is accessible by all agent machines. This service can be run n a Windws Netwrk Lad Balanced cluster t ensure lad balancing which leverages the Windws Netwrk Lad Balancer t autmatically select the prper Cmpliance Guardian Cntrl Service fr ptimal perfrmance. 8. Set up the Cntrl Service Cnfiguratin: IIS Website Settings Cnfigure the IIS website settings fr the Cntrl Service. The IIS website is used t access Cmpliance Guardian Manager. IIS website Enter the website name and create a new IIS website fr the Cntrl Service. The default Website Prt used t access Cmpliance Guardian Cntrl Service is 14400, yu d nt need t change it unless a knwn prt cnflict exists. Website Prt Cntrl Service cmmunicatin prt. The default prt is Applicatin Pl Settings Cnfigure the IIS applicatin pl settings fr the crrespnding website. The applicatin pl is used t handle the requests sent t the crrespnding website. Applicatin pl Enter the applicatin pl name fr the crrespnding website. Applicatin Pl Accunt Enter an applicatin pl accunt t be the administratr f the specified applicatin pl, and the crrespnding passwrd. *Nte: The applicatin pl accunt fr cnnecting an existing IIS website r creating a new IIS website must have the fllwing Lcal System Permissins: Member f the fllwing lcal grup: IIS_WPG (fr IIS 6) r IIS_IUSRS (fr IIS 7 and IIS 8) 42 Cmpliance Guardian Installatin and Administratin User Guide

43 Full Cntrl t HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian 4 Full Cntrl t Cmpliance Guardian Manager flder Member f the Perfrmance Mnitr Users grup Full Cntrl t Cmpliance Guardian Certificate private keys Full Cntrl (r Read, Write, Mdify and Delete) t C:\WINDOWS\Temp (nly fr Windws 2003 envirnment) Yu can add the applicatin pl accunt t the lcal Administratrs grup t meet the required permissins. Select Next t cntinue t cnfigure the database settings fr the Cntrl Service. 9. Cnfigure a database fr string the relevant data f Cntrl Service. Select Next. Database Type Only MS SQL Server is supprted t serve as the database server fr Cntrl Service. Database Server Enter the MS SQL server name. Cntrl Database Name Enter a database name fr the Cntrl Service. If the database des nt exist, it will be created in the prvided MS SQL server. Database Credentials Select the credential fr this Cntrl Service database. Windws Authenticatin (the default ptin) Use this methd when yu want the user identity t be cnfirmed by Windws. The specified accunt must have the necessary permissin t access the SQL Server machine where yu want t create the cntrl service database. SQL Authenticatin SQL server will cnfirm the user identity itself accrding t the specified accunt and passwrd. The specified accunt must have the fllwing permissin: DB Owner f the existing Cmpliance Guardian Cntrl Database r DB Creatr f the newly created Cmpliance Guardian Cntrl Database. Passphrase Settings Enter the passphrase yu want t use fr prtecting Cmpliance Guardian Manager data. Advanced Database Settings Yu can chse t assciate the Cmpliance Guardian Cntrl Database with a specific failver SQL server that is used in cnjunctin with SQL Server database mirrring. 10. Once all f the required infrmatin has been cnfigured, all f the infrmatin cnfigured in the previus steps is listed n the Installatin Summary page. Select Save, and specify the path yu want t save the Answer file t. Yu can als mdify the Answer file s name in the pp-up windw. Cmpliance Guardian Installatin and Administratin User Guide 43

44 Imprt the UnattendedInstallatin.dll File Befre perfrming the Cmpliance Guardian Manager unattended installatin, the UnattendedInstallatin.dll file must be imprted int Windws PwerShell using either f the tw methds belw. *Nte: If the UnattendedInstallatin.dll file is nt imprted successfully, use the Set-ExecutinPlicy cmmand t set the executin plicy t Unrestricted, RemteSigned, r AllSigned in Windws PwerShell and perfrm the imprt again using ne f the fllwing methds. T manually imprt the UnattendedInstallatin.dll file, cmplete the fllwing steps: 1. Select Start n the server with the unzipped Manager installatin package residing in, and find Windws PwerShell. Right-click n it, and select Run as administratr t run it. 2. Enter the fllwing cmmand, and press Enter t imprt the UnattendedInstallatin.dll file: Imprt-Mdule \UnattendedInstall\PwerShellMdules\UnattendedInstallatin.dll T autmatically imprt the UnattendedInstallatin.dll file, cmplete the fllwing steps: 1. Navigate t the \UnattendedInstall\PwerShellMdules flder inside the unzipped Manager installatin package. 2. Right-click n the UnattendedInstallatinLauncher.bat file, and select Run as administratr t run it. Nw that yu have imprted the UnattendedInstallatin.dll file, yu can use the cmmands in the fllwing sectins t check yur envirnment, perfrm the manager installatin, and cnfigure settings. 44 Cmpliance Guardian Installatin and Administratin User Guide

45 Cmmands and Cmmand Parameters fr Cmpliance Guardian Manager Unattended Installatin T perfrm the Cmpliance Guardian Manager unattended installatin, refer t the fllwing sectins fr the cmmands. Installatin Cmmand The Cmpliance Guardian Manager Unattended Installatin cmmand fr installing Cmpliance Guardian Manager remtely is Install-CGManager. Fr example: Install-CGManager -CustmTDFPath C:\Users\add\Desktp\custm checks.zip -TargetName hstmachine -Username AvePint\Cmpliance Guardian -Passwrd Ave -PackageFilesFlder "C:\Cmpliance Guardian Manager" -AnswerFilePath "C:\AnswerFile.xml" -RemteTempPath C:\TempFlder This table cntains detailed infrmatin fr each f the parameters: Parameter Type Descriptin -CustmTDFPath Optinal The path f the ZIP file that cntains the custm ZIP checks. After Cmpliance Guardian is installed, the ZIP file will lcate in Cmpliance Guardian 4\Manager\Cntrl\bin\Resurces. The name f the ZIP file will be changed t Custm XML AIO.zip. Cmpliance Guardian s built-in checks and the checks in this ZIP file will be laded in Test Suite Manager f Cmpliance Guardian. -TargetName Required The name r IP address f the destinatin machine where yu want t install the Cmpliance Guardian Manager. *Nte: If the hstname is used, ensure that the specified cmputer name can be reslved thrugh the lcal Hsts file, by using Dmain Name System (DNS) queries, r thrugh NetBIOS name reslutin techniques. -Username Required The username f the user used t access the destinatin machine where yu want t install the Cmpliance Guardian Manager. The frmat f the username is: dmain\username. Cmpliance Guardian Installatin and Administratin User Guide 45

46 Parameter Type Descriptin The permissins f the user specified here are as fllws: If the specified user is the lcal administratr f the destinatin machine, it can be used directly. Enter.\administratr fr the Username parameter. If the specified user is frm the dmain which the destinatin machine belngs t, the dmain user must be added t the Administratrs grup n the destinatin machine. The user specified here must have the Full Cntrl permissin t the path specified in RemteTempPath parameter. -Passwrd Required The passwrd f the user specified abve. Qute the passwrd if it cntains any special character r space. -PackageFilesFlder Required The lcal path n the machine where yu run the cmmand. The specified path stres the unzipped Cmpliance Guardian Manager installatin package (Manager ZIP file). The frmat f the path is: C:\package. Qute the path if it cntains any special character r space. -AnswerFilePath Required The lcal path where yu saved the Answer file. The path must be detailed t the name f the Answer file. Fr example, C:\AnswerFile.xml. -RemteTempPath Required A lcal path n the destinatin machine that the Cmpliance Guardian Manager is installed t. The frmat f the path is: C:\temp. The path will be used t stre the temprary files generated during the Cmpliance Guardian Manager unattended installatin. The temprary files will be deleted as sn as the unattended installatin finishes. -Lg Optinal This is an ptinal parameter. If used, the lgs f the unattended installatin will be saved t the.txt file in the specified path. The path specified in this parameter must be detailed t the name f the lg file. Fr example, C:\Lg.txt. 46 Cmpliance Guardian Installatin and Administratin User Guide

47 Parameter Type Descriptin If the specified lg file des nt exist, it will be generated autmatically. -UseIPv6frCmmunicatin Optinal This is an ptinal parameter used t specify the cmmunicatin methd between the machine where the cmmand is run and the destinatin machine that the Cmpliance Guardian Manager is installed. If an IPv6 address is entered in TargetName parameter, this parameter must be entered. *Nte: When using this parameter, bth the destinatin machine and the machine where yu run this cmmand must supprt IPv6. -ReceiveInfPrt Optinal This is an ptinal parameter t specify a prt fr the surce machine t receive the data frm the destinatin machine. This prt and the destinatin machine s IP are added t an inbund rule f the surce machine s firewall s it allws all the cnnectins frm the destinatin machine. Cmpliance Guardian recmmends yu cnfigure this parameter t ensure smth cmmunicatin between the surce machine and the destinatin machine. -Timeut Optinal This is an ptinal parameter t specify a timeut value fr the cnnectin t the destinatin machine. A timeut errr will ccur if there is n cnnectin t the destinatin machine in the specified perid. Cmpliance Guardian Installatin and Administratin User Guide 47

48 Unattended Installatin: Cmpliance Guardian Agent The Cmpliance Guardian Agent can be installed remtely using the unattended installatin after the Manager s services have started. Ensure the system requirements are met befre starting the Cmpliance Guardian Agent unattended installatin. Fr mre infrmatin, refer t System Requirements fr Agent Service Installatin. Generating the Installatin Answer File fr Cmpliance Guardian Agent The Answer file is an XML file which prvides cnfiguratin infrmatin required fr the unattended installatin. Befre perfrming the unattended installatin, the Answer file must be generated using the Cmpliance Guardian 6 Setup Manager. Navigate t the \UnattendedInstall\SetupManager flder inside the unzipped Manager installatin package, and duble select SetupManager.exe t run it. Yu will be guided thrugh the fllwing steps. 1. On the welcme screen, select Next. 2. Select Create a new answer file fr Cmpliance Guardian Agent. Mdify an existing answer file If yu want t reuse an existing Answer file, select Mdify an existing answer file. If this is selected, the path field will be enabled. Enter the full path f the answer file r select Brwse t brwse fr an answer file. Fr example, C:\AnswerFile.xml *Nte: We recmmend yu create a generic Answer file s that it can be reused later with mdificatin. 3. Select Next. 4. Carefully review the Cmpliance Guardian License Agreement. After yu have read the terms in the license agreement, select n the check-bx t select I accept the terms in the license agreement. Select Next. 5. Enter yur name and the rganizatin int the prvided field. Select Next t cntinue the cnfiguratin. Select Back t g back t the previus interface. 6. Set up the installatin lcatin using the fllwing cnditins. Default Directry The Cmpliance Guardian Agent will be installed t the default installatin lcatin n the specified destinatin server, which is \Prgram Files\AvePint\Cmpliance Guardian 4\Agent. 48 Cmpliance Guardian Installatin and Administratin User Guide

49 Custmized Directry If select this ptin, the Installatin Path field will be enabled, enter a custmized path and the Cmpliance Guardian Agent will be installed t the specified path n the destinatin server. Use the default directry if yur custmized directry is invalid If this ptin is selected, the Cmpliance Guardian Agent will be installed t the default directry when the custmized directry is invalid. Fr example, the path yu specified is n a drive which des nt exist n the destinatin server. 7. Set up the Cntrl Service cnfiguratin: Cmpliance Guardian Cntrl Service Hst The hstname r IP address f the machine where installed Cntrl Service. Cmpliance Guardian Cntrl Service Prt This is the prt used fr cmmunicatin with Cntrl Service and shuld match the infrmatin prvided during the Manager cnfiguratin. The default prt number is Set up the Agent prt: Cmpliance Guardian Agent Prt The prt specified here is used by the Manager r ther Agents fr cmmunicatin. The default prt number is Set up the Agent cnfiguratin: Use a randm prt number if the specified ne is being used If select this ptin, Cmpliance Guardian will use a randm prt number if the prt yu specified has already been used. This ptin is selected by default. Manager Passphrase Enter the Manager Passphrase specified when cnfiguring the Cmpliance Guardian Manager installatin answer file. Cmpliance Guardian Agent Accunt Specify the username and passwrd f the Agent accunt under which the Agent activities are perfrmed. 10. Once all the required infrmatin has been cnfigured, all f the infrmatin cnfigured in the previus steps is listed in the Installatin Summary page. Select Save, and specify the path yu want t save the Answer file t. Yu can als mdify the Answer file s name in the pp-up windw. Imprt the UnattendedInstallatin.dll File Befre perfrming the Cmpliance Guardian Agent unattended installatin, the UnattendedInstallatin.dll file must be imprted int Windws PwerShell using either f the tw methds belw. *Nte: If the UnattendedInstallatin.dll file is nt imprted successfully, use the Set-ExecutinPlicy cmmand t set the executin plicy t Unrestricted, RemteSigned, r AllSigned in Windws PwerShell and perfrm the imprt again using either f the tw methds belw. Cmpliance Guardian Installatin and Administratin User Guide 49

50 T manually imprt the UnattendedInstallatin.dll file, cmplete the fllwing steps: 1. Select Start, and find Windws PwerShell. 2. Right-click n Windws PwerShell, and select Run as administratr t run it. 3. Enter the fllwing cmmand. Imprt-Mdule \UnattendedInstall\PwerShellMdules\UnattendedInstallatin.dll 4. Press Enter t imprt the UnattendedInstallatin.dll file. T autmatically imprt the UnattendedInstallatin.dll file, cmplete the fllwing steps: 1. Navigate t the \UnattendedInstall\PwerShellMdules flder inside the unzipped Manager installatin package. 2. Right-click n the UnattendedInstallatinLauncher.bat file, and select Run as administratr t run it. *Nte: The value f the Set-ExecutinPlicy f the Pwershell must be set as AllSigned. Nw that yu have imprted the UnattendedInstallatin.dll file, yu can use the cmmands in the fllwing sectins t check yur envirnment, perfrm the agent installatin and cnfigure settings. Cmmands and Cmmand Parameters fr Cmpliance Guardian Agent Unattended Installatin T perfrm the Cmpliance Guardian Agent unattended installatin, run the cmmands in the fllwing sectins. Installatin Cmmand The Cmpliance Guardian Agent Unattended Installatin cmmand fr installing Cmpliance Guardian Agent remtely is Install-CGAgent. Fr example: Install-CGAgent -TargetName hstmachine -Username AvePint\Cmpliance Guardian -Passwrd Ave -PackageFilesFlder "C:\Cmpliance Guardian_Agent" -AnswerFilePath "C:\AnswerFile.xml" - RemteTempPath C:\TempFlder Detailed infrmatin abut the parameters is listed in the fllwing table: 50 Cmpliance Guardian Installatin and Administratin User Guide

51 Parameter Type Descriptin -TargetName Required The name r IP address f the destinatin machine where yu want t install the Cmpliance Guardian Agent. *Nte: If the hstname is used, ensure that the specified cmputer name can be reslved thrugh the lcal Hsts file, by using Dmain Name System (DNS) queries, r thrugh NetBIOS name reslutin techniques. -Username Required The username f the user used t access the destinatin machine where yu want t install the Cmpliance Guardian Agent. The frmat f the username is: dmain\username. The permissins f the user specified here are as fllws: If the specified user is the lcal administratr f the destinatin machine, it can be used directly. Enter.\administratr fr the Username parameter. If the specified user is frm the dmain which the destinatin machine belngs t, the dmain user must be added t the Administratrs grup n the destinatin machine. The user specified here must have the Full Cntrl permissin t the path specified in RemteTempPath parameter. -Passwrd Required The passwrd f the user specified abve. Qute the passwrd if it cntains any special character r space. -PackageFilesFlder Required The lcal path n the machine where yu run the cmmand. The specified path stres the unzipped Cmpliance Guardian Agent installatin package (Agent ZIP file). The frmat f the path is: C:\package. Qute the path if it cntains any special character r space. -AnswerFilePath Required The lcal path where yu saved the Answer file. The path must be detailed t the name f the Answer file. Fr example, C:\AnswerFile.xml. -RemteTempPath Required A lcal path n the destinatin machine that the Cmpliance Guardian Agent is installed t. The frmat f the path is: C:\temp. Cmpliance Guardian Installatin and Administratin User Guide 51

52 Parameter Type Descriptin The path will be used t stre the temprary files generated during the Cmpliance Guardian Agent unattended installatin. The temprary files will be deleted as sn as the unattended installatin finishes. -Lg Optinal This is an ptinal parameter. If used, the lgs f the unattended installatin will be saved t the.txt file in the specified path. The path specified in this parameter must be detailed t the name f the lg file. Fr example, C:\Lg.txt. If the specified lg file des nt exist, it will be generated autmatically. - UseIPv6frCmmunicatin Optinal This is an ptinal parameter. It specifies the cmmunicatin methd between the machine where the cmmand is run and the destinatin machine that the Cmpliance Guardian Agent is installed t. If an IPv6 address is entered in TargetName parameter, this parameter must be entered. *Nte: When using this parameter, bth the destinatin machine and the machine where yu run this cmmand must supprt IPv6. -ReceiveInfPrt Optinal This is an ptinal parameter t specify a prt fr the surce machine t receive the data frm the destinatin machine. This prt and the destinatin machine s IP are added t an inbund rule f the surce machine s firewall s it allws all the cnnectins frm the destinatin machine. Cmpliance Guardian recmmends yu cnfigure this parameter t ensure smth cmmunicatin between the surce machine and the destinatin machine. -Timeut Optinal This is an ptinal parameter t specify a timeut value fr the cnnectin t the destinatin machine. A timeut errr will ccur if there is n cnnectin t the destinatin machine in the specified perid. 52 Cmpliance Guardian Installatin and Administratin User Guide

53 Installing Cmpliance Guardian App fr Real- Time Scanner Cmpliance Guardian App fr Real-Time Scanner is used t supprt scanning SharePint Online sites in real time. T scan SharePint Online sites, yu must first install the app, and then activate the app in Cntrl Panel > Cnnectin Manager > Create SharePint Online Cnnectin interface. Fr mre infrmatin n Real-Time Scanner, refer t Real-Time Scanner. *Nte: Micrsft.NET Framewrk 4.5 r abve versin must be installed befre installing this app. Permissin Requirement fr Installing the App The user wh installs the app must have lcal system permissins. The user will be granted Full Cntrl permissin t the fllwing grups and flders autmatically during the Cmpliance Guardian Manager App installatin: IIS_IUSRS (fr IIS 7.0) Full Cntrl t HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian 4\App Full Cntrl t Cmpliance Guardian App flder Member f the Perfrmance Mnitr Users grup Full Cntrl t Cmpliance Guardian Certificate private keys The applicatin pl accunt needs t be added t the lcal Administratrs grup t meet the required permissins. Installing the App Cmpliance Guardian App fr Real-Time Scanner is a prvider hsted app fr SharePint. The app is required t be installed n an n-premises server. In rder t receive real-time event data frm Office 365, an Internet facing secure URL (prt 443, HTTPS prtcl, with valid certificate) is required. T install the app, yu must: 1. Register the app in the SharePint Online App Catalg. Refer t Registering the App in Office Install the prvider hsted app n an n-premises server. Refer t Installing the App n an On- Premises Server. Cmpliance Guardian Installatin and Administratin User Guide 53

54 Registering the App in Office 365 Refer t the fllwing steps t btain the Client Id and related infrmatin: 1. Lg int the Office 365 SharePint admin center, and select apps. 2. Select App Catalg in the apps interface n the right pane. 3. Select Create a new app catalg site t create a new site if yu dn t already have an app catalg site. 4. Navigate t and register a new app in the app registry. Fr example, if the catalg site URL is then pen the path 5. The App Infrmatin interface appears. Cmplete the fllwing steps t btain the accunt infrmatin: Client Id Select Generate t generate a Client Id. This is a GUID that can be generated (when yu chse Generate) r pasted int AppRegNew.aspx. The value must be unique fr each app, and must be lwer case. Client Secret Select Generate t generate a Client Secret. This is the passwrd fr the SharePint app. It is generated n the AppRegNew.aspx page by using the Generate buttn. Title Enter a user-friendly title, fr example: CG Real-time Scanner App. Users are prmpted t grant r deny the add-in permissins that the add-in is requesting. This title appears as the name f the add-in n the cnsent prmpt. App Dmain Enter a dmain. This is the hst name f the remte cmpnent f the SharePint APP. Fr Cmpliance Guardian Real-Time App, the remte applicatin must use the prt 443. The app dmain must match the URL bindings yu use fr yur Web applicatin. D nt include prtcl ( r the / characters in this value. If yur Web applicatin hst is using a DNS CNAME alias, use the alias. Fr examples: CGAPP.AVEPOINT.COM. *Nte: The dmain must be the public dmain in the extranet. All f the dmain's crrespnding requests shuld be ruted t the remte cmpnent f the IIS website that was cnfigured when installing the Cmpliance Guardian app. 54 The dmain must be the public dmain in the internet. All f the dmain's crrespnding requests shuld be ruted t the remte cmpnent f the IIS website that was cnfigured when installing the Cmpliance Guardian app. Redirect URI Enter the URL f the page where the app gets the tken used t btain trust fr Office 365. This is the endpint that is used t receive an authenticatin cde, with the cde the Cmpliance Guardian app can get authrized access t SharePint data. The value must be a cmplete endpint URL including the prtcl, which must be https. The frmat is Dmain}/Pages/RedirectAccept.aspx. Fr example: Cmpliance Guardian Installatin and Administratin User Guide

55 The URL must be in the app dmain. 6. Select Create. Then, cpy the app infrmatin displayed in the appeared interface. It will be used while installing the app. 7. Check if the Client Id is crrect. a. Open the path b. Paste the cpied Client Id in the App Id field, and then select Lkup. If the Title, App Dmain, Redirect URL are all displayed, the Client Id is crrect. Installing the App n an On-Premises Server Refer t the fllwing steps t install the app: 1. Dwnlad the CmplianceGuardian_O365APP_Serial_Number.zip file t a machine by cntacting yur AvePint representative. 2. Unzip the package, and then pen the extracted directry. Run the Setup.exe file. 3. The Cmpliance Guardian App fr Real-Time Scanner Installatin Wizard interface appears. Select Next. 4. Enter yur Name and Organizatin int the prvided fields. Select Next. 5. Carefully review the Cmpliance Guardian License Agreement. After yu have read the agreement, check the I accept the terms in the license agreement checkbx, and select Next. 6. Select Brwse, and then select the lcatin fr the app installatin. By default, the installatin lcatin is C:\Prgram Files\AvePint. Select Next. 7. Cmpliance Guardian will perfrm a brief pre-scan f the envirnment t ensure that all rules meet the requirements. The status fr each rule will be listed in the Status clumn. Select the hyperlink f the status, and the detailed infrmatin abut the scan result will be listed in the pp-up windw. Yu may select Details t view the detailed infrmatin f all f the requirements. If any rules have failed the pre-scan, update yur envirnment t meet the requirements, and then select the Rescan buttn t check yur envirnment again. Once all the rules pass, select Next. 8. Set up the Cmmunicatin Cnfiguratin: Cmpliance Guardian App Hst Specify the current server s hstname, IP address, r fully qualified dmain name (FQDN). Cmpliance Guardian App Prt The prt entered here is used by the Manager r ther Agents fr cmmunicatin. The default prt number is Cntrl Service Hst The hstname r IP address f the machine where the Cmpliance Guardian Cntrl Service is installed. Cmpliance Guardian Installatin and Administratin User Guide 55

56 Select Next. Cntrl Service Prt This is the prt used fr cmmunicatin with the Cmpliance Guardian Cntrl Service and shuld match the infrmatin prvided during the Manager cnfiguratin. The default prt number is Manager Passphrase Manager Passphrase yu entered t prtect Cmpliance Guardian Manager data. SSL Certificatin Select the methd fr encrypting infrmatin and prviding authenticatin fr Cmpliance Guardian: 9. Set up the App Cnfiguratin: Select Next. Built-in Certificate Uses the certificate prvided by Cmpliance Guardian. N additinal cnfiguratin is necessary. User-defined Certificate Enabling this ptin allws yu t select a certificate frm yur lcal machine. It will use the Certificate Authenticatin server f the current machine t check whether the certificate is revked. After the certificates are filtered, nly the certificates that are nt revked will be displayed. Cnfigure the App Accunt settings: App Catalg Site Enter the catalg site URL used t stre the app in SharePint Online. Username Enter the username that is used t lg int Office 365. Passwrd Enter the passwrd. Cnfigure the App Address settings: the values f Client ID, Client Secret, App Title, App Dmain, Redirect URL are created in Registering the App in Office Set up the website cnfiguratin: IIS Website Settings Cnfigure the IIS website settings fr the app. Yu can select t use an existing IIS website r create a new IIS website. The IIS website is used t cmmunicate between Office 365 and Cmpliance Guardian. Use an existing IIS website Select an existing IIS website frm the drp-dwn list. Create a new IIS website Enter the website name and create a new IIS website fr the app. Applicatin Pl Settings Cnfigure the IIS applicatin pl settings fr the crrespnding website. Yu can select t use an existing applicatin pl r create a new applicatin pl. The applicatin pl is used t handle the requests sent t the crrespnding website. The fllwing settings can be cnfigured: 56 Cmpliance Guardian Installatin and Administratin User Guide

57 Use an existing applicatin pl (nt recmmended) Select an existing applicatin pl frm the drp-dwn list. If yu chse t use an existing applicatin pl, the Applicatin Pl Accunt settings are greyed ut and cannt be changed. Create a new applicatin pl Enter the applicatin pl name and applicatin pl accunt settings t create a new IIS applicatin pl fr the crrespnding website. IIS SSL Certificatin: Nt Use IIS SSL Certificate D nt select an IIS SSL certificate. If yu select this radi buttn, yu are required t add a certificate in IIS manually fr the website after yu finish installing the app. Select SSL Certificate Select an IIS SSL certificate. *Nte: The certificate must be valid and safe, and it must be the crrespnding certificate f the App Dmain entered in the App Cnfiguratin step. The server n which yu want t install the app must have a publicly accepted certificate frm a certificate authrity. Select Next. 11. In the Ready t install Cmpliance Guardian App page, all f the infrmatin cnfigured in the previus steps is listed. Select Install t begin the installatin. Select Back t change any f the previus settings. Select Cancel t abandn all f the cnfiguratins and exit the installatin wizard. 12. After the installatin is cmplete, select Finish t exit the installatin wizard. 13. After the installatin, check the fllwing pints: Check if the app has been upladed in the catalg site. Check if the applicatin pl and website have been created in IIS Manager. Cmpliance Guardian Installatin and Administratin User Guide 57

58 Uninstalling Cmpliance Guardian App fr Real-Time Scanner T uninstall Cmpliance Guardian App fr Real-Time Scanner, cmplete the fllwing steps: *Nte: Once yu have initiated the uninstallatin, it cannt be cancelled and the uninstallatin interface cannt be clsed. 1. Open the Start Menu in Windws n the Cmpliance Guardian Manager Server, and navigate t All Prgrams > AvePint Cmpliance Guardian. 2. Open the Cmpliance Guardian Manager Tls flder, and then duble-click Cmpliance Guardian App fr Real-Time Scanner Uninstall. 3. In the appeared page, select the Remve cnfiguratin file ptin if yu want t remve all f the flders and cnfiguratin files generated by app installatin. 4. Select Remve t start the uninstallatin prcess. 5. Select Finish t cmplete the uninstallatin. 58 Cmpliance Guardian Installatin and Administratin User Guide

59 Navigating Cmpliance Guardian Cmpliance Guardian mimics the lk and feel f many Windws prducts, making fr an intuitive and familiar wrking envirnment. While there are many windws, pp-up displays, and messages within Cmpliance Guardian, they share similar features and are navigated in the same ways. Belw is a sample windw in Cmpliance Guardian. It features a familiar, dynamic ribbn, and a searchable, cntent list view. Figure 8: Navigating Cmpliance Guardian. Cmpliance Guardian Installatin and Administratin User Guide 59

60 Figure 9: The Refresh functin. 1. Ribbn Buttns Allws users t access the functinality f the active Cmpliance Guardian functins. 2. Manage clumns ( ) Allws users t manage which clumns are displayed in the list. Select the manage clumns ( ) buttn, and then select the checkbx next t the clumn name in the drp-dwn list. 3. Search Filter the cntent displayed by the keywrd yu designate; the keywrd must be cntained in a clumn value. At the tp f the viewing pane, enter the keywrd fr the permissin level yu want t display. Yu can select t Search all pages r Search current page. *Nte: The search functin is nt case sensitive. 4. Filter the clumn ( ) Allws users t filter the infrmatin in the List View. Select the filter the clumn ( ) buttn next t the clumn and then select the checkbx next t the clumn name. 5. Hide the clumn ( ) Allws users t hide the selected clumn. 6. Change the number f items displayed per page, select the desired number frm 5, 8, 10, 15, 20, 25, 50, 100 in the Shw rws drp-dwn menu at the lwer-right crner. 7. Enter the page number in the G t f text bx at the lwer-right crner and press Enter t g t the specified page 8. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 60 Cmpliance Guardian Installatin and Administratin User Guide

61 9. When yu create a new plicy, template, r cnnectin, select the Refresh functin t refresh the cnnectin tree r plicy/template drp-dwn list, the newly created ne will be displayed. Cmpliance Guardian Installatin and Administratin User Guide 61

62 Cntrl Panel The Cmpliance Guardian Cntrl Panel is the central interface fr managing Cmpliance Guardian and hw it interacts with ther envirnments. Cntrl Panel is als integrated int ther Cmpliance Guardian prducts, enabling yu t cnfigure relevant settings withut having t leave the interface f the mdule yu are using. Getting Started Refer t the fllwing sectins fr imprtant infrmatin n getting started with Cntrl Panel. Launching Cntrl Panel T launch Cntrl Panel and access its functinality, cmplete the fllwing steps: 1. Lg int Cmpliance Guardian. In the Hme interface f Cmpliance Guardian, yu can see the Cntrl Panel field. Select the mdules in Cntrl Panel directly t launch the mdule. Select View All in the Cntrl Panel field t g t the Cntrl Panel interface. 2. If yu are already in the sftware, select Cntrl Panel n the tp f the screen. 62 Figure 10: Launching Cntrl Panel. Cmpliance Guardian Installatin and Administratin User Guide

63 Mnitring Mnitring in the Cntrl Panel f Cmpliance Guardian allws yu t view and manage the fllwing features: Health Analyzer, Lg Manager, Manager Mnitr, and Agent Mnitr. Using the Health Analyzer Health Analyzer scans the farm accrding t the rules yu selected in the Health Analyzer prfile. T access Health Analyzer in the Cntrl Panel interface, select Health Analyzer under the Health Analyzer heading. Select Clse n the ribbn t clse the Health Analyzer interface. Health Analyzer prvides rules in fur categries regarding the health f the Cmpliance Guardian mdules. Cnnectin Checks the cnnectivity amng the Cmpliance Guardian services. Permissin Verifies apprpriate permissins fr the Agent accunt and the Cmpliance Guardian applicatin pl accunt. Service Checks the status f the Cmpliance Guardian services. Others Verifies that all f the requirements fr each mdule are met. T use Health Analyzer t check the health f the Cmpliance Guardian mdules, cmplete the fllwing prcedures: 1. Create a Health Analyzer prfile t include the rules yu are abut t scan fr the Cmpliance Guardian mdules. Fr mre infrmatin, refer t Creating a Health Analyzer Prfile. 2. Run the newly created prfile. 3. After the jb is finished, check the status f the rules in the prfile. If the status is Warning r Errr, select the rule t view the prvided slutin. Fr mre infrmatin, refer t Managing Rules in a Health Analyzer Prfile. 4. Slve the issue accrding t the prvided slutin. Yu can als re-scan the rules, after yu have slved the issue, t ensure that the prvided slutin slved the prblem. Managing Health Analyzer Prfiles Use the Health Analyzer prfile t include the rules yu are abut t check fr yur Cmpliance Guardian mdules. In the Health Analyzer interface, select Prfile Manager n the ribbn. In the appeared interface, yu can see a list f previusly cnfigured prfiles and perfrm the fllwing actins t the prfiles: Cmpliance Guardian Installatin and Administratin User Guide 63

64 Create Create a prfile. T d s, select Create n the ribbn. View Details Views the detailed infrmatin f the selected prfile. T d s, select a prfile by selecting the crrespnding checkbx, and then select View Details n the ribbn. Edit Edits the selected prfile. Select a prfile by selecting the crrespnding checkbx, and then select Edit n the ribbn. Delete Deletes the selected prfiles. T d s, select ne r mre prfiles by selecting the crrespnding checkbxes, and then select Delete n the ribbn. Run Nw Run the selected prfile immediately. Select a prfile by selecting the crrespnding checkbx, and then select Run Nw n the ribbn. Jb Mnitr View and manage the prfiles' jbs. T d s, select Jb Mnitr n the ribbn. A default prfile is created autmatically after the installatin r upgrade. This prfile will be run at midnight (00:00:00) every Mnday and includes all f the existing Agents, mdules and rules. Creating a Health Analyzer Prfile In the Prfile Manager interface, select Create n the ribbn t create a new Health Analyzer prfile. Cmplete the fllwing steps t create a new prfile: 1. Prfile Name Enter a name fr yur prfile, and then enter an ptinal descriptin fr future reference. Select Next. 2. Scan Filter Filters the mdules and the Agents whse health yu want t check. Mdule Select mdules yu are abut t check by selecting the crrespnding checkbxes. Agent Filter Select ne r mre available Agents yu are abut t check by selecting the crrespnding checkbxes and select the Include New checkbx t include newly registered r restarted Agent services when scanning all f the available rules. 3. Select Next t prceed. 4. Scan Rules Select the rules yu are abut t include in yur prfile by selecting the crrespnding checkbxes. When running the newly created prfile, Cmpliance Guardian checks all f the rules included in the prfile. 5. Select Next t prceed. 6. Scan Schedule Cnfigure the scan schedule and ntificatin settings fr yur prfile. Schedule Selectin Select ne f the fllwing ptins: N schedule Scans the rules included in the prfile nly when yu running the prfile. Cnfigure the schedule myself Scans the rules included in the prfile accrding t the custmized schedule settings. If yu select this checkbx, the 64 Cmpliance Guardian Installatin and Administratin User Guide

65 Schedule Settings field will appear. Fr mre infrmatin, refer t Cnfiguring Scan Schedule Settings fr the Health Analyzer Prfile. Ntificatin Settings Select an existing ntificatin prfile frm the drp-dwn list, r select New Ntificatin Prfile t create a new ne. After selecting the ntificatin prfile, select View t view mre details f this prfile. Select when t receive the ntificatin by selecting the crrespnding checkbxes. 7. Select Next t prceed. Passed Yu will receive a ntificatin with a reprt that includes all f the rules that have a Passed status. Warning Yu will receive the reprt including all f the rules that are in Warning status thrugh the ntificatin . Errr Yu will receive a ntificatin with a reprt that includes all f the rules that have an Errr status. Skipped Yu will receive a ntificatin with a reprt that includes all f the rules that have a Skipped status. Stpped Yu will receive a ntificatin with a reprt that includes all f the rules that have a Stpped status. 8. View the detailed infrmatin f yur prfile in the Overview step. 9. Select Finish t save the prfile, r select Finish and Run Nw t save and run the prfile. Cnfiguring Scan Schedule Settings fr the Health Analyzer Prfile In the Schedule Settings field, select Cnfigure the schedule myself, and select the Add Schedule link t add a new schedule fr the prfile. The Add Schedule interface appears. Cmplete the fllwing steps t cnfigure the scan settings: 1. Type Select a type f recurring schedule fr the schedule yu are abut t add frm the fllwing fur ptins: By hur By day By week By mnth 2. Schedule Settings Select the frequency f the recurring schedule: Every _ hurs Enter a number in the text bx. This ptin appeared when yu select By hur in the Type field. Select Advanced t cnfigure mre specific settings: Specify prductin time Select the start and end time in this field. Cmpliance Guardian Installatin and Administratin User Guide 65

66 Select time belw Select when yu will scan the rules. Select Add t add mre time pint. Every _ day(s) Enter a number in the text bx. This ptin nly appears when yu select By day in the Type field. Every _ week(s) Enter a number in the text bx. This ptin nly appears when yu select By week in the Type field. Select Advanced t cnfigure mre specific settings: Run every _ week(s) Enter a number in the text bx. On _ Select ne r mre ptins frm the drp-dwn list, and then select OK. Every _ mnth(s) Enter a number in the text bx. This ptin appears when yu select By mnth in the Type field. Select Advanced t cnfigure mre specific settings: On day _ f _ Enter a number in the text bx, and then select ne r mre mnth frm the drp-dwn list. Day_ f every _ mnth(s) Select a day frm the drp-dwn list, and then enter a psitive integer in the text bx. The f every _ mnth(s) Select an rdinal numeral frm the first drpdwn list, select ne r mre day frm the secnd drp-dwn list, and then enter a psitive integer in the text bx. The f _ Select an rdinal numeral frm the first drp-dwn list, select ne r mre days frm the secnd drp-dwn list, and then select ne r mre mnths frm the third drp-dwn list. 3. Range f Recurrence Select when the recurring schedule will end: Start time Select a start time. N end date The schedule will run until yu manually stp it. End after _ ccurrences Enter a psitive integer in the text bx. The schedule will end after the entered number f ccurrences. End by _ Select the end date. The schedule will end n the selected end date. 4. Select OK t save yur changes and return t Scan Schedule interface, r select Cancel t return t Scan Schedule interface withut saving any changes. 5. Select Add Schedule t add mre schedules fr yur prfile. 6. Select Calendar View t view the verall schedules. Managing Rules in a Health Analyzer Prfile In the Health Analyzer interface, yu can perfrm the fllwing actins: Prfile Manager Manages all f the Health Analyzer prfiles. Fr mre infrmatin, refer t Managing Health Analyzer Prfiles. Exprt Reprt Exprts a reprt fr all f the rules in the selected prfile. 66 Cmpliance Guardian Installatin and Administratin User Guide

67 View Details Views the detailed infrmatin f the selected rule. Select a rule and then select View Details n the ribbn. Stp Scanning Stps scanning the selected rules. Select ne r mre rules and then select Stp Scanning n the ribbn. Rescan Rescans the selected rules. Select ne r mre rules and then select Rescan n the ribbn. Jb Mnitr Mnitrs all f the Health Analyzer jbs. Exprting a Health Analyzer Reprt T exprt a Health Analyzer reprt, cmplete the fllwing steps: 1. In the Health Analyzer interface, select a prfile frm the Prfile Name drp-dwn list. 2. Select a cllectin time frm the Cllectin Time drp-dwn list. By default, the latest cllectin time f the selected prfile is displayed. 3. T exprt all f the scan results, select Exprt Reprt. T exprt particular scan results, select the checkbxes f the rules yu want t exprt and select Exprt Reprt. 4. Select Exprt Reprt n the ribbn t exprt a Health Analyzer reprt. The Exprt Reprt interface appears. 5. In the Scan Results Selectin field, chse t exprt all f the scan results r nly the selected scan results. 6. Select a reprt frmat frm the Select a reprt frmat drp-dwn list in the Reprt Frmat field. 7. Select OK. The reprt will be exprted t a lcatin yu specified. Using the Lg Manager Lg Manager has Jb Mnitr integrated within the interface. Here yu can manage the lgs f all f the Cmpliance Guardian services. Lgs prvide the AvePint supprt staff with imprtant infrmatin fr mre efficient trubleshting. T see the prgress f yur lg cllectin jbs, select Jb Mnitr n the ribbn. Fr mre infrmatin abut Jb Mnitr, refer t Jb Mnitr. *Nte: A Reprt Lcatin must be cnfigured in Jb Mnitr befre yu can use the Lg Manager when Cmpliance Guardian Cntrl Service High Availability is used. T access the Lg Manager fr Cmpliance Guardian, g t the Cntrl Panel interface, and then select Lg Manager under the Mnitring heading. Select Clse n the ribbn t clse the Lg Manager interface. Cmpliance Guardian Installatin and Administratin User Guide 67

68 Cnfiguring Lg Settings T cnfigure the lg settings, g t the Lg Manager interface, and then select Lg Settings n the ribbn. Yu can cnfigure the lg settings fr the fllwing services by selecting either the Cntrl Service r Agent tab. In each f the tabs, yu will see the name f the service. Fr each service, the fllwing ptins can be cnfigured: Lg Level Lgs culd be cnfigured t generate n each f the fllwing levels. Infrmatin (default) Lgs f this level recrd the basic infrmatin f Cmpliance Guardian, such as the jbs that yu have run, the peratins yu have perfrmed, and imprtant prcesses f jbs. Infrmatin level lgs als cntain all f the lgs frm warning t errr levels. Debug Lgs f this level recrd the detailed infrmatin related t the internal peratins such as the cmmunicatin between Cmpliance Guardian Manager and Cmpliance Guardian Agents, the peratins in the database, and the utput message f the data. Lgs f this level are used fr finding ut all f the details f the jbs, and it is recmmended that yu set the level t Debug befre trubleshting. Debug level lgs als cntain all f the lgs frm infrmatin, warning, and errr levels. Errr Lgs f this level recrd the errr messages fr jbs. Nt all f the errrs culd lead t the failure f the jbs, sme f the errrs may have already been dealt with and the lgs recrded the detailed infrmatin. Warning Lgs f this level recrd exceptins fr jbs. Warning level lgs als cntain all f the lgs frm the errr level. Size f Each Lg The default size fr a lg is 5 MB. Yu can adjust the size accrding t yur requirements by entering a different number int the text bx. Ttal Lg Cunt The maximum number f lg files in the Lgs flder under the installatin flder f each Manager Service. Fr each Agent Server, the Ttal Lg Cunt is the maximum number f lg files which can be generated by each.exe file. The Agent lgs are stred in the Lgs flder under the installatin flder f each Agent. When the number f lg files exceeds the threshld, the ldest lg files will be deleted. When yu are finished cnfiguring the Lg Settings, select Save t save all changes and return t the Lg Manager interface, r select Cancel t return t the Lg Manager interface withut saving any changes. Cllecting Lgs In rder t cllect lgs, yu must first select the Manager services r Agents that yu want t cllect the lgs frm in the Lg Cllectin sectin f the Lg Manager interface. 68 Cmpliance Guardian Installatin and Administratin User Guide

69 T receive ntificatin cntaining the reprt, select an ntificatin prfile in the drpdwn list r select New Ntificatin t set up a new ntificatin prfile. Fr mre infrmatin abut hw t cnfigure the ntificatin prfile, refer t Recipient Prfile. Select Cllect n the ribbn t begin cllecting lgs fr the selected services r agents. Using the Manager Mnitr Here yu can view details abut yur Cmpliance Guardian Cntrl Service. T access Manager Mnitr in the Cntrl Panel interface, select Manager Mnitr under the Mnitring heading. In Manager Mnitr, yu will see the Cmpliance Guardian Cntrl Service. Yu can select the Cntrl Service by checking the checkbx next t the service name, then select View Details n the ribbn t bring up the View Details page with infrmatin abut the selected Manager Service. When yu are finished viewing the infrmatin abut the Cntrl Service, select Clse n the ribbn t clse the Manager Mnitr tab and return t the Cntrl Panel main page. Using the Agent Mnitr Here yu can view and cnfigure yur Cmpliance Guardian Agents currently installed n yur SharePint envirnment. This can be useful if there is a change in persnnel, and the SharePint accunt that the Agent uses t cmmunicate with SharePint needs t be changed. With Agent Mnitr, yu can als perfrm basic maintenance peratins n yur agents if an agent ever becmes unrespnsive r is having issues, r temprarily disable the Cmpliance Guardian Agent Service t perfrm server maintenance. T access Agent Mnitr, pen the Cntrl Panel interface, and then select Agent Mnitr under the Mnitring heading. In Agent Mnitr, yu will see a list f Cmpliance Guardian Agents which have been registered t the current Cmpliance Guardian Cntrl Service. Once yur Cmpliance Guardian Agents are apprpriately displayed, yu can select an agent by checking the checkbx next t the Agent Name, and then select: Cnfigure Once yu select an agent, this buttn will becme available. Select Cnfigure n the ribbn t access the Agent Cnfiguratin interface. Here yu can cnfigure the SharePint Accunt fr the agent as well as the agent type. SharePint Accunt Select an accunt prfile. Select New Accunt Prfile t create a new accunt prfile. Fr mre infrmatin, refer t Managed Service Accunts. The accunt is used by the Cmpliance Guardian Agent t prvide Cmpliance Guardian with access and cntrl t yur SharePint envirnment. The accunt selected here must have the required permissins fr the Cmpliance Guardian prducts that are enabled. Cmpliance Guardian Installatin and Administratin User Guide 69

70 Agent Type Cnfiguratin In rder t use a certain prduct, the crrespnding agent type must first be cnfigured. Befre selecting the prduct, the necessary agents fr that prduct must already be installed. T cnfigure the agent type fr the agent, check the checkbx next t the crrespnding prduct. Yu can navigate thrugh the different prduct suites that are enabled by selecting n the name f the suite. The cnfiguratin f the agent type is n yur lcal envirnment. Jb Restrictin Limit the maximum number f jbs that are allwed t run simultaneusly by this agent by enabling the Restrict the simultaneusly running jb cunt ptin and enter a psitive integer int the text bx. Once yu are finished cnfiguring the agent, select Save t save the cnfiguratins and return t the Agent Mnitr interface, r select Cancel t return t the Agent Mnitr interface withut saving any changes. Cnfiguratin File Uplad agent cnfiguratin files t the Manager Server and change them fr the specified agents. Select the desired Cmpliance Guardian Agents in Agent Mnitr and select Cnfiguratin File n the ribbn t change the cnfiguratin file fr them. In the pp-up windw, select OK t cnfirm the mdificatin actin and yu will be redirected t the cnfiguratin page. Refer t the instructins belw t change the cnfiguratin file. *Nte: Since mdifying the agent cnfiguratin files can be risky, it is nt recmmended fr end-users t d it. Agent Infrmatin In this field, yu can view the agents yu have selected previusly. Brwse Cnfiguratin File Uplad the cnfiguratin file t the Manager Server. Select Brwse t find the specified.cnfig file and select Open t uplad it. Yu are able t uplad multiple cnfiguratin files. *Nte: The name f the cnfiguratin file yu uplad must have the same name as the existing ne, and then yu are able t apply the cnfiguratin file t destinatin. Destinatin Path Enter the place where yu want t uplad the cnfiguratin file. Cmpliance Guardian supprts cnfiguratin file change in Agent\Bin and Agent\data paths. Cnflict Reslutin Select a reslutin when tw cnfiguratin files have the same name. Merge The cntent f the newly upladed cnfiguratin file will be merged int the ld ne. Replace The newly upladed cnfiguratin file will replace the ld ne. 70 Cmpliance Guardian Installatin and Administratin User Guide

71 Select OK t change the cnfiguratin files as yu have cnfigured r select Cancel t exit the interface withut saving the cnfiguratin. If yu select OK, yu will be asked t restart the Agent Service. Select Aut t autmatically restart the Agent Service immediately r select Manual t manually restart the Agent Service later. View Details Select View Details n the ribbn t bring up the View Details page with infrmatin abut the selected Cmpliance Guardian Agent. Restart Select Restart n the ribbn t restart the selected Cmpliance Guardian Agent. This is useful in situatins where the agent is sluggish, r if a jb it is running hangs. Yu can restart the agent and try again. *Nte: Any jbs that are running when yu restart the agent will fail. Remve Select Remve n the ribbn t remve the selected Cmpliance Guardian Agent frm the Agent Mnitr. The remved agent will n lnger be used by the Cntrl Service. Yu can nly remve agents that have a dwn arrw ( ) in the Status clumn. Remving an agent des nt uninstall the agent. *Nte: When remving the last agent f ne farm in Agent Mnitr, the assciated farm and plans will als be deleted frm the Cmpliance Guardian databases. Deactivate Select Deactivate n the ribbn t deactivate the selected Cmpliance Guardian Agent. Once the agent is deactivated, it is marked as Inactive, and will nt be used by the current cntrl service. Hwever, the deactivated service will still run nrmally. This is useful when yu want t perfrm maintenance n a specified Cmpliance Guardian Agent. *Nte: Any jbs that are running when yu deactivate the agent will fail. Activate Select Activate n the ribbn t activate the selected Cmpliance Guardian Agent. Once the agent is activated, it is marked as Active, and will be used by the current cntrl service. When yu are finished viewing and managing yur Cmpliance Guardian Agents, select Clse n the ribbn t clse the Agent Mnitr tab and return t the Cntrl Panel main page. Cmpliance Guardian Installatin and Administratin User Guide 71

72 System Cnfiguratin System Cnfiguratin in the Cntrl Panel f Cmpliance Guardian allws yu t view and manage the fllwing features: Settings, General Settings, Agent Grups, Jb Pruning, and Jb Perfrmance Alert. Settings The utging server must be cnfigured befre Cmpliance Guardian can send ut ntificatins. T access Settings fr Cmpliance Guardian, g t the Cntrl Panel interface, and then select E- Mail Settings under the System Cnfiguratin heading. Select Clse n the ribbn t clse the Settings interface. T cnfigure the utging server, cmplete the fllwing steps: 1. Check the Enable Sending Servers Settings checkbx in rder t activate the server settings. 2. Send server (SMTP) Enter the address f the utging server. 3. Secure passwrd authenticatin Check this checkbx if yu have this ptin enabled in yur accunt cnfiguratin. 4. Prt Enter the SMTP prt. The default SMTP prt is 25. Fr SSL authenticatin, the default prt is Sender Enter the address fr all Cmpliance Guardian s t be sent frm. 6. Username n SMTP Enter the sender s username n the SMTP server. 7. Passwrd n SMTP Enter the sender s passwrd t lg nt the SMTP server. 8. SSL authenticatin Cnfigure this ptin accrding t yur settings. 9. Select the Validatin Test buttn t verify the infrmatin entered. If the infrmatin yu entered is verified successfully, a test will be sent t the sender yu cnfigured. Select Save t save yur cnfiguratins and select Clse t exit the interface. General Settings These settings affect Cmpliance Guardian s interface, which includes settings fr Appearance and SharePint Farm Settings. Yu can display Cmpliance Guardian in the language f yur preference, use date and time frmat that yu are cmfrtable with, insert a custm lg fr yur reprts and templates, and rename yur SharePint farms s that it is easier fr yu t recgnize them. 72 Cmpliance Guardian Installatin and Administratin User Guide

73 T access General Settings fr Cmpliance Guardian, g t the Cntrl Panel interface, and then select General Settings under the System Cnfiguratin heading. Select Clse n the ribbn t clse the General Settings interface. The fllwing settings can be cnfigured in the General Settings page: Language Preference Specify a language fr Cmpliance Guardian t be displayed in, r allw users t utilize a translatin engine t have Cmpliance Guardian displayed in the language f the user s brwser. Display fr all users Select this ptin t display Cmpliance Guardian in the language specified here. T change the display language, select the drp-dwn menu, and select yur desired language. Change t the end user brwser used language Select this ptin t allw Cmpliance Guardian t be displayed in the language used by the user s brwser. Then select a language fr Cmpliance Guardian t default t in the If the language des nt change successfully, please select t use a default language drp-dwn menu. This way, if Cmpliance Guardian des nt prperly display in the user s brwser language, Cmpliance Guardian will be displayed in the language specified here. Time Zne Select the time zne fr Cmpliance Guardian Manager. Date and Time Frmat Set the frmat fr all date and time displayed in Cmpliance Guardian by selecting a date frmat frm the Date drp-dwn menu, and selecting a time frmat frm the Time drp-dwn menu. Custmize Lg Custmize the lg fr Cmpliance Guardian system reprts and e- mail templates. Select Brwse t find the desired lg file in the pp-up, then select the lg, and select Open t pen it. Select Preview t view the lg in the Shw Preview area. T hide the Shw Preview area, select Hide Preview. Select and drag the lg in the display field t change its placement. Select the zm in buttn ( ), the zm ut buttn ( ), r the reset buttn ( ) t reset the settings f the new lg. Select Restre t Default buttn t rll back t the default lg. Farm Name Mapping Custmize the display names fr yur farms in Cmpliance Guardian. T find a specific farm, enter the farm name in the search text bx, and select the search buttn ( ). Fr each farm, enter the desired display name in the crrespnding Display Name in Cmpliance Guardian text field. *Nte: The search functin is nt case sensitive. When yu are finished cnfiguring Cmpliance Guardian General Settings, select Save t save all changes, then Clse t exit the System Optins interface. If yu select Clse withut saving first, any changes yu have made will be lst. Cmpliance Guardian Installatin and Administratin User Guide 73

74 Cnfiguring Security Settings Select Security n the ribbn in the General Settings interface. There are tw tabs: System Security Plicy and System Passwrd Plicy. System Security Plicy In the System Security Plicy tab, the fllwing ptins can be cnfigured: Maximum User Sessin Cnfigure the number f simultaneus lgns allwed fr Cmpliance Guardian. Fr any new sessins that surpass the designated number, the earliest sessin will be terminated. Sessin Timeut Cnfigure hw lng a user can be inactive befre being autmatically lgged ff. Enter a number int the Lgn will expire in: text bx, and then select either Minute(s) r Hur(s) in the drp-dwn menu. Select the Remind a user t extend the sessin _ minutes befre the sessin times ut checkbx and then cnfigure the specific number f minutes. A pp-up windw will appear the cnfigured number f minutes befre the sessin times ut and ask whether r nt the user wuld like t remain signed in. Failed Lgn Limitatin Specify the maximum number f failed lgn attempts allwed in ne day. If a specific accunt fails t prvide the crrect lgin infrmatin in a single day, it will be lcked. T unlck the specified accunt, refer t Managing Users. *Nte: The default admin accunt cannt be lcked. Inactive Perid Cnfigure hw lng a user can be inactive befre the accunt is autmatically disabled. Enter a number int the Deactivate the accunt when the inactive perid reaches: text bx, then select either Day(s) r Mnth(s) in the drpdwn menu. Once deactivated, a Cmpliance Guardian administratr must reactivate the accunt befre the user can lg nt Cmpliance Guardian. Netwrk Security Cnfigure the IP addresses t have the desired level f access t Cmpliance Guardian. T access these settings, check the Enable netwrk security checkbx, and then select either: Trusted netwrk If selected, nly the IP addresses added t this field can access Cmpliance Guardian. T add an IP address as a trusted netwrk, enter the IP address in the Equals text bx, and then select Add. Repeat these steps t add additinal IP addresses. Restricted netwrk If selected, the IP addresses added t this field cannt access Cmpliance Guardian. T add an IP address as a restricted netwrk, enter the IP address in the Equals text bx, and then select Add. Repeat these steps t add additinal IP addresses. System Passwrd Plicy In the System Passwrd Plicy tab, the fllwing ptins can be cnfigured: 74 Cmpliance Guardian Installatin and Administratin User Guide

75 Default Passwrd Settings Specify the rules t be applied n the passwrd after it has been saved. Select Accunt is inactive if yu wuld like t manually activate the accunt befre it can be used. *Nte: If n ptin is selected in this field, the passwrd des nt need t be mdified at first lgin, and it will never expire. Maximum and Minimum Passwrd Length Enter a number fr the maximum and minimum number f characters allwed in a passwrd. Passwrd Rule Cnfigure the requirements fr the passwrd. Minimum number f alpha Enter a number f letters. There must be at least the specified number f letters in the passwrd. Minimum number f numeric Enter a psitive number. There must be at least the specified amunt f numbers in the passwrd. Minimum number f special characters Enter a number f characters, there must be at least the specified number f special characters in the passwrd. The special characters #, $, %, ^, &, and *. Passwrd cannt cntain user ID If yu select this ptin, the passwrd cannt cntain the user s name. Passwrd cannt cntain space If yu select this ptin, the passwrd cannt cntain spaces. Passwrd Expiratin Warning Send ut warnings if the passwrd f a user will expire in the specified time perid. Set the perid by entering a time using the Day(s) r Mnth(s) ptin. Yu can chse the frms f the warning by selecting the Pp-up message and/r ntificatin. Viewing Security Infrmatin Cmpliance Guardian uses a passphrase t prtect the Cmpliance Guardian databases and secure cmmunicatin. Befre cnnecting t the Cmpliance Guardian Manager when installing the Cmpliance Guardian Agents, the passphrase must be entered t verify the access. The default passphrase is generated autmatically at the end f the Manager s Installatin. T manage the passphrase, select Security Infrmatin n the ribbn t perfrm the fllwing actins: Back Up Select this buttn t back up the passphrase t the fllwing path: \AvePint\Cmpliance Guardian 4\Manager\KeysBak. It is strngly recmmended that yu back up the security keys and save the backup in a safe place. Manage Passphrase Select this buttn t view and mdify the passphrase. The Mdify ptin will be displayed. By default, the passwrd cannt be mdified. Yu can select this buttn t enable the mdificatin f the default passwrd. Enter a new passphrase in the crrespnding text bx and select OK t save it. Cmpliance Guardian Installatin and Administratin User Guide 75

76 Agent Grups Agent Grups allw yu t assign specific agents t perfrm certain jbs. This way, yu can maintain balanced wrklads fr different agents. T access Agent Grups fr Cmpliance Guardian, select Agent Grups under the System Cnfiguratin heading. Select Clse n the ribbn t clse the Agent Grup interface. Managing Agent Grups In the Agent Grups interface, yu will see a list f Agent Grups. The fllwing settings can be cnfigured in the Agent Grups interface: Create Select Create n the ribbn t create a new Agent Grup. In the Create interface, yu can cnfigure the fllwing settings: Agent Grup Name Enter a name fr the new Agent Grup, and then enter an ptinal descriptin fr future reference. Agent Grup Type Select ne f the fllwing Agent Grup Types: SharePint On-premises, File System, Website, SharePint Sites, Lync, Database, Yammer, and Bx. If SharePint On-premises is selected, yu must select a farm where yu want t create this new Agent Grup. Available Agents Available agents will be displayed in the lwer panel. Select the desired agent by checking the crrespnding checkbx, then select Add t add the agent t the Agent Grup. T remve an agent frm the Agent Grup, select the desired agent in Agents in Grup by checking the crrespnding checkbx, then select Remve. When yu are finished, select OK t save these cnfiguratins and return t the Agent Grups interface, r select Cancel t return t the Agent Grups interface withut saving this new Agent Grup. View Details Select an Agent Grup by checking the crrespnding checkbx, then select View Details n the ribbn t view detailed infrmatin abut the Agent Grup. In the View Details interface, select Edit n the ribbn t make changes t the cnfiguratins f this Agent Grup. Fllw the instructins in the next bullet pint t edit Agent Grups. Edit Select an Agent Grup by checking the crrespnding checkbx, then select Edit n the ribbn t make changes t the cnfiguratins. In the Edit Agent Grup interface, yu can enter a new name fr the Agent Grup, and then enter a descriptin fr future reference. Select the desired agent by checking the crrespnding checkbx, and then select Add t add the agent t the Agent Grup. T remve an agent frm the Agent 76 Cmpliance Guardian Installatin and Administratin User Guide

77 Grup, select the desired agent in the Agents in Grup clumn by checking the crrespnding checkbx, then select Remve. When yu are finished, select Save t save all changes made t the cnfiguratins f this Agent Grup, select Save As t save the new cnfiguratins as a new Agent Grup, r select Cancel t return t the Agent Grups interface withut saving any changes. Delete Select an Agent Grup by checking the crrespnding checkbx, then select Delete t delete the selected Agent Grup. A cnfirmatin windw will pp up t ask if yu are sure yu want t delete the selected Agent Grups. Select OK t delete the selected Agent Grups, r select Cancel t return t the Agent Grups interface withut deleting the selected Agent Grups. Jb Pruning Jb pruning allws yu t set up pruning rules fr all jb recrds acrss yur farms. When a jb recrd is pruned, it will be deleted frm the Jb Mnitr and the Cmpliance Guardian Cntrl database. *Nte: It is highly recmmended that yu cnfigure a Jb Pruning plicy if yu are running scan jbs frequently t ensure yur databases are nt verladed with jb data. In Jb Pruning, yu can cnfigure Jb Pruning Rules fr Cmpliance Guardian mdules t retain a desired number f jbs, r jbs within a desired time frame. Once yu have cnfigured the Jb Pruning Rule fr a mdule, yu may cnfigure a schedule in the Settings tab t have Cmpliance Guardian prune jbs accrding t the Jb Pruning Rules at a specified time with a specified ntificatin, r manually run pruning jbs by selecting a mdule by checking the crrespnding checkbx, and select Prune Nw n the ribbn t prune jbs fr the selected mdule based n the Jb Pruning Rules yu have cnfigured fr each mdule. Jb Pruning has Jb Mnitr integrated within the interface. T see the prgress f yur pruning jbs, select Jb Mnitr n the ribbn. Fr mre infrmatin abut Jb Mnitr, refer t Jb Mnitr. T access Jb Pruning fr Cmpliance Guardian in the Cntrl Panel interface, select Jb Pruning under the System Cnfiguratin heading. Select Save n the ribbn t save any changes made in Jb Pruning. Select Clse n the ribbn t clse the Jb Pruning interface. Cnfiguring Pruning Rules In the Rules tab f the Jb Pruning interface, select a Cmpliance Guardian mdule by checking the crrespnding checkbx, then select Cnfigure n the ribbn, r select the crrespnding Jb Pruning Rule fr a mdule. The Cnfigure interface appears. The fllwing ptins can be cnfigured: N Pruning Select this ptin t nt prune the jb recrds f this mdule. When cnfiguring pruning rules, yu will be presented with the fllwing ptins: Cmpliance Guardian Installatin and Administratin User Guide 77

78 Keep the last jb(s) Select this ptin t keep nly the desired number f recent jbs fr this mdule. Set the number f jbs t keep by entering a number int the text bx. Fr example, if yu enter 5 in the text bx, nly the 5 mst recent jbs fr this mdule will be kept. All ther jb recrds fr this mdule will be deleted. Keep the last Day(s)/Week(s)/Mnth(s) f jb(s) Select this ptin t keep nly the jbs within the desired time frame fr this mdule. Set the time frame fr the jbs yu want t keep by entering a number int the text bx, then select Day(s), Week(s), r Mnth(s) frm the drp-dwn menu. Fr example, if yu enter 7 in the text bx, and select Day(s), nly jbs perfrmed within the last 7 days by this mdule will be kept. All f the previus jb recrds f this mdule will be deleted. When yu are finished, select Save t save yur cnfiguratins and return t the Jb Pruning interface, r select Cancel t return t the Jb Pruning interface withut saving any changes. Cnfiguring Settings Once yu have cnfigured Jb Pruning Rules fr Cmpliance Guardian mdules, yu can set up a schedule fr Cmpliance Guardian t run pruning jbs, and ntify the designated users with reprts abut the pruning jbs. In the Settings tab f the Jb Pruning interface, cnfigure the fllwing settings: 1. Schedule Selectin Set up a schedule fr Cmpliance Guardian t run pruning jbs, r select t manually run pruning jbs. N Schedule Select this ptin if yu want t manually run pruning jbs. Cnfigure the schedule myself Select this ptin t have Cmpliance Guardian run pruning jbs at a designated time. If this is selected, the Schedule Settings cnfiguratin will appear. Here yu will see a list f all f yur previusly cnfigured schedules. T add a new schedule, select Add Schedule. T edit a previusly cnfigured schedule, select the text in the Summary clumn. T delete a schedule, select ( ). T preview the added schedules in a calendar, select Calendar View. Fr mre infrmatin abut adding r editing a schedule, refer t Cnfiguring a Schedule. 2. Ntificatin Select an ntificatin prfile yu have previusly cnfigured, r select New Ntificatin t set up a new ntificatin prfile. Fr mre infrmatin abut hw t cnfigure the ntificatin prfile, refer t Recipient Prfile. Cnfiguring a Schedule T add r edit a schedule, cmplete the fllwing steps: 1. Type Select the time unit f the time interval fr this schedule. By hur Cnfigure the schedule by hur. By day Cnfigure the schedule by day. By week Cnfigure the schedule by week. By mnth Cnfigure the schedule by mnth. 78 Cmpliance Guardian Installatin and Administratin User Guide

79 2. Schedule Settings Cnfigure the frequency fr this schedule by entering a number in the text bx. If yu want t set up a mre specific schedule, check the Advanced checkbx, mre ptins will appear depending n the Type yu have selected in step 1: If yu selected By hur, select ne f the fllwing ptins and cnfigure its settings: Specify prductin time: Frm t Specify the prductin time, it will run the jb pruning in the specified prductin time frame. *Nte: All pruning jbs that have started within this time frame will finish even if the end time has been reached. Select time belw Specify the time yu want t run the jb pruning. T add several time pints, select Add. If yu select By week, cnfigure the fllwing settings: Run every week(s) Enter the frequency in terms f weeks in the text bx. On Specify the days f the week t run the jb pruning n. If yu select By mnth, select ne f the fllwing ptins and cnfigure its settings: On day f Select the day f the specific mnths t run the pruning jbs. Fr example, if yu select On day 3 f January and July, the pruning jbs will run n the third f January and July. Day f every mnth(s) Select the day f the mnth and frequency t run the pruning jbs n. Fr example, if yu select Day 3 f every 3 mnth(s), the pruning jbs will run every three mnths, n the third f the mnth. The f every mnth(s) Specify n which ccurrence f which days f the mnth, and the frequency t run the pruning jbs. Fr example, if yu select The First Mnday f every 3 mnth(s), the pruning jbs will run every three mnths, n the first Mnday f the mnth. The f Specify n which ccurrence f which days f which mnth t run the pruning jbs. Fr example, if yu select The First Mnday f January and July, the pruning jbs will run n the first Mnday f January and July. 3. Range f Recurrence Specify the Start time fr pruning jbs. Select ne f the fllwing ptins fr the end time and cnfigure its settings: N end date The pruning jbs will run n the cnfigured schedule until yu manually end it. End after ccurrence(s) The pruning jbs will stp running after the number f times yu specify here. End by The pruning jbs will end n the date and time yu specify here. When yu are finished cnfiguring the new schedule yu want t add, select OK t save, r select Cancel t clse the Add Schedule interface withut saving. Cmpliance Guardian Installatin and Administratin User Guide 79

80 Jb Perfrmance Alert Use Jb Perfrmance Alert t cnfigure the settings f the jb perfrmance alert fr the unrespnsive jbs fr Scheduled Scanner, Real-Time Scanner, Lg Manager, and Jb Pruning. When a jb is nt respnded fr the cnfigured time, a ntificatin will be sent abut this issue. T access Jb Perfrmance Alert in the Cntrl Panel interface, select Jb Perfrmance Alert under the System Cnfiguratin Alert heading. Select Save n the ribbn t save any changes made in Jb Perfrmance Alert. Select Clse n the ribbn t clse the Jb Perfrmance Alert interface. Cnfiguring Jb Perfrmance Alert Settings T cnfigure the jb perfrmance alert fr the unrespnsive jbs in the Jb Perfrmance Alert interface, cmplete the fllwing steps: 1. Select the mdules yu want t cnfigure the jb perfrmance alerts by selecting the crrespnding checkbxes. 2. Select Cnfigure n the ribbn t cnfigure the jb perfrmance alert fr the selected mdules. 3. In the Cnfigure interface, the N alert ptin buttn is selected by default. Select the Cnfigure alert settings ptin buttn t cnfigure the fllwing settings: a. Threshld Enter the time perid t identify the unrespnsive jbs. The entered value shuld be an integer n less than 30. b. Actins Select at least ne actin t perfrm n the unrespnsive jbs nce they have been identified. Autmatically fail the jb It will fail the jb autmatically if the prgress has been unrespnsive fr the minutes that yu entered in the Threshld field. Cllect the relevant lgs fr the jbs Select this checkbx t cllect the relevant lgs fr the unrespnsive jbs nce they have been identified. Send a ntificatin t the addresses cnfigured in the fllwing prfile Cnfigure t receive a ntificatin nce the unrespnsive jbs are identified. Yu can chse t select a previusly cnfigured ntificatin prfile frm the drp-dwn list, r select New Ntificatin frm the drp-dwn list t create a new ntificatin prfile. c. Select Save n the ribbn t save the cnfiguratins and return t the Jb Perfrmance Alert interface, r select Cancel n the ribbn t return t the Jb Perfrmance Alert interface withut saving changes. 80 Cmpliance Guardian Installatin and Administratin User Guide

81 Auditing Cmpliance Guardian Auditr mnitrs the activities in Cmpliance Guardian, such as creating, mdifying, r deleting a plan, exprting a reprt, r making changes n test suite, etc. It als allws yu t view and exprt the desired auditr data reprt by cnfiguring the pruning settings. T access Cmpliance Guardian Auditr fr Cmpliance Guardian in the Cntrl Panel interface, select Cmpliance Guardian Auditr under the Auditing heading. Select Clse n the ribbn t clse the Cmpliance Guardian Auditr interface. In the Cmpliance Guardian Auditr interface, yu will see all f the activities and the related infrmatin including the users f the activities, the grups t which the users belngs, the time f the activities, the mdules in which the activities are perfrmed, and the statuses f the activities. Cnfiguring Pruning Settings There may be quite a number f activities that the users perfrmed in Cmpliance Guardian, fr the cnsideratin f perfrmance, yu can cnfigure the pruning settings and get yur desired auditr data displayed in the Cmpliance Guardian Auditr. T cnfigure pruning settings, cmplete the fllwing steps: 1. Select Pruning n the ribbn f the Cmpliance Guardian Auditr interface. The Cnfigure interface appears. 2. Cnfigure the fllwing settings: Pruning Rule Cnfigure the pruning rule. N pruning Select this checkbx, the auditr data will nt be pruned. Keep the last _ items Enter a value t specify the number f items that will be kept in the Cmpliance Guardian Auditr interface. Keep the items f the last _ days/weeks/mnths Enter a value and select a unit (Days, Weeks r Mnths) t specify a time, the activities during the specified time will be kept in the Cmpliance Guardian Auditr interface. Schedule Selectin Set up a schedule fr Cmpliance Guardian t run pruning jbs, r select t manually run pruning jbs. N Schedule Select this ptin if yu want t manually run pruning jbs. Cnfigure the schedule myself Select this ptin t have Cmpliance Guardian run pruning jbs at a designated time. If this is selected, the Schedule Settings cnfiguratin page will appear. Here yu will see a list f all f yur previusly cnfigured schedules. T add a new schedule, select Add Schedule. T edit a previusly cnfigured schedule, select the text in the Summary Cmpliance Guardian Installatin and Administratin User Guide 81

82 clumn. T delete a schedule, select the delete ( ) buttn. T preview the added schedules in a calendar, select Calendar View. 3. Select Prune Nw at the lwer-right crner r n the ribbn t prune the data accrding t the settings immediately, after the pruning jb finishes, the kept items will be displayed in the Cmpliance Guardian Auditr interface. Select Save t save the cnfigured pruning settings, but the data will nt be pruned. The next time yu navigate int this Cnfigure Pruning Settings interface, the cnfigured settings will be laded. Select Cancel t return t the Cmpliance Guardian Auditr interface withut saving any changes. Exprting Auditr Data Reprt The auditr data displayed in the Cmpliance Guardian Auditr supprts exprting t a datasheet fr yur review. Select Exprt t Datasheet n the ribbn and then save the reprt t yur desired lcatin, and then review it in the datasheet. License and Update License and Update in the Cntrl Panel f Cmpliance Guardian allws yu t view and manage the License Manager and Update Manager. License Manager License Manager prvides yu with infrmatin regarding yur Cmpliance Guardian license. Here yu imprt and exprt license files, generate license reprts, set up expiratin ntificatins, as well as mnitr the number f servers yu have used up in yur license. T access License Manager fr Cmpliance Guardian, pen the Cntrl Panel interface and select License Manager under the License and Update heading. Select Clse n the ribbn t clse the License Manager interface. Viewing License Infrmatin In the License Manager interface, the fllwing infrmatin is displayed: License Type Whether r nt yu have a Trial license r an Enterprise license. Server Hst/IP The hst/ip f the server used t install Cmpliance Guardian Cntrl Service. 82 Cmpliance Guardian Installatin and Administratin User Guide

83 Maintenance Expiratin Details The start time and expiratin date f the Cmpliance Guardian maintenance service yu have purchased. License Details The detailed license infrmatin fr every SharePint versin in SharePint mde, File System mde, Website mde, Yammer mde, Lync mde, r Database mde by selecting the crrespnding tab under License Details. SharePint Select the SharePint tab under License Details t see every SharePint versin r remte farm (fr SharePint Online) license infrmatin specific t: Surce The SharePint versin. License Type The type f license purchased fr the prduct. Number f Servers The number f servers yu purchased. Registered Servers The number f servers yu have used. Expiratin Time The expiratin time f the license fr this SharePint. Status The current status f the SharePint which reflects prper licensing. Number f User Seats The number f user seats fr SharePint Online (displayed fr the remte farm). If the License Type is Trial, the fllwing tw clumns appear: Max Scanning Files The maximum number f files that can be scanned. Remaining Scanning Files The number f the files that can still be scanned. *Nte: Yu are nly able t view the SharePint yu are licensed fr. File System Select the File System tab under License Details t see the file system license infrmatin specific t: License Type The type f license purchased fr the prduct. Number f Agents The number f agents yu have purchased. Registered Agents The number f agents yu have used. Expiratin Time The expiratin time f the license fr the file system. Status The current status f the file system which reflects prper licensing. If the License Type is Trial, the fllwing tw clumns appear: Max Scanning Files The maximum number f files that can be scanned. Cmpliance Guardian Installatin and Administratin User Guide 83

84 Remaining Scanning Files The number f the files that can still be scanned. Website Select the Website tab under License Details t see the Website license infrmatin specific t: License Type The type f license purchased fr the prduct. Expiratin Time The expiratin time f the license fr the website. Status The current status f the website which reflects prper licensing. Test Suite Grups Display the test suite grups. Used Hst The number f hsts yu have used. Remaining Hst The number f hsts yu have nt used. Used Dmain The number f dmains yu have used. Remaining Dmain The number f dmains yu have nt used. If the License Type is Trial, the fllwing tw clumns appear: Max Scanning Files The maximum number f files that can be scanned. Remaining Scanning Files The number f the files that can still be scanned. Select Details t the right f Test Suite Grups t view details abut the used hsts, remaining hsts, used dmains, and remaining dmains. Select Clse t return t the License Manager interface. Scial Netwrks Select the Scial Netwrks tab under the License Details t see the Yammer license infrmatin: Surce Yammer is displayed. License Type The type f license purchased. Number f Allwed Users The number f users that Cmpliance Guardian can scan in Yammer in ne dmain. Expiratin Time The expiratin time f the license fr using Cmpliance Guardian fr Yammer. Status The current status f the Cmpliance Guardian fr Yammer license. Bx Select the Bx tab under the License Details t see the Bx license infrmatin: Surce Bx is displayed. License Type The type f license purchased. 84 Cmpliance Guardian Installatin and Administratin User Guide

85 Number f Allwed Users The number f users that Cmpliance Guardian can scan in Bx. Expiratin Time The expiratin time f the license fr using Cmpliance Guardian in Bx. Status The current status f the Cmpliance Guardian fr Bx license. Instant Message/Cmmunicatins Select the Instant Message/Cmmunicatins tab under the License Details t see the Lync license infrmatin: Surce Instant Message/Cmmunicatins is displayed. License Type The type f license purchased. Number f Allwed Users The number f users wh can use the Lync functin. Expiratin Time The expiratin time f the license fr using the Lync functin. Status The current status f the Lync license. Database Select the Database tab under the License Details t see the Database license infrmatin: License Type The type f license purchased fr the prduct. Expiratin Time The expiratin time f the license fr using the Database functin. Status The current status f the Database license. Imprting and Exprting the License File In License Manager, yu can imprt a license file t apply that new license. Since all f Cmpliance Guardian prducts are installed as a single platfrm, activating any prduct is as simple as applying the new license file. T imprt a license file, select Imprt n the ribbn. In the Imprt License interface, select Brwse. Find and chse the desired LIC file, then select Open. Yu will see a summary view f this license. Select Apply t apply this license, r select Cancel t return t the previus page withut applying this license. T exprt a license file, cmplete the fllwing steps: 1. Select Exprt n the ribbn. 2. Select t exprt the license file r license reprt. 3. Save the exprted file r reprt. *Nte: Cmpliance Guardian will autmatically lg yu ff in rder t use the new license upn lgging in again. Cmpliance Guardian Installatin and Administratin User Guide 85

86 Cnfiguring License Renewal Ntificatins Cmpliance Guardian can be cnfigured t ntify yu befre licenses r maintenance expires. Yu can set hw many days prir t expiratin and at what interval yu want t be ntified, as well as cnfigure the methd f ntificatin t use. T cnfigure License Renewal Ntificatins, select Settings n the ribbn. Yu will be redirected t the Settings interface. Here yu can cnfigure the fllwing settings fr the Ntificatin Schedule: By expiratin date Cnfigure these settings fr ntificatins f license expiratin: Enter a number int the text bx and select Day, Week r Mnth frm the Remind me starting frm befre license expires fr any mdules drp-dwn menu. Check the Interval checkbx t have the reminder repeat at a set interval. Enter a number int the text bx and select Day, Week r Mnth frm the drp-dwn menu. By maintenance expiratin date Cnfigure these settings fr ntificatins f maintenance expiratin: Enter a number int the text bx and select Day, Week r Mnth frm the Remind me starting frm befre license maintenance expires drp-dwn menu. Check the Interval checkbx t have the reminder repeat at a set interval. Enter a number int the text bx and select Day, Week r Mnth frm the drp-dwn menu. By number f servers Cnfigure these settings fr ntificatins f the number f available servers left fr any farm. Enter a number int the text bx and Cmpliance Guardian will send yu a ntificatin when the number f servers left f the farm is less than the specified value. Check the Interval checkbx t repeat the reminder at a set interval. Enter a number int the text bx and select Day, Week, r Mnth frm the drp-dwn menu. Cnfigure the fllwing settings fr the Ntificatin Methd: *Nte: Yu must select at least ne f the ptins in rder fr the License Renewal Ntificatins t wrk. Pp-up message bx when yu lgin Select this ptin t have a message bx pp up with a reminder fr expiring licenses r maintenance. ntificatin Select this ptin t be ntified f expiring licenses r maintenance by based n the Ntificatin Schedule yu cnfigured abve. A drp-dwn menu will appear where yu can either select a previusly cnfigured Ntificatin Prfile r 86 Cmpliance Guardian Installatin and Administratin User Guide

87 yu can chse New Ntificatin Prfile t set up a new ntificatin prfile. Fr mre infrmatin n hw t cnfigure the ntificatin prfile, refer t Recipient Prfile. When yu are finished cnfiguring the License Renewal Ntificatin Settings, select OK t save and return t the License Manager interface, r select Cancel t return t the License Manager interface withut saving the new cnfiguratins. Cnfiguring Server Usage In Server Usage, yu can register a new farm/agent r remve a previusly registered farm/agent. Select Server Usage n the ribbn r the server number/agent number in the Registered Servers/Registered Agents clumn f the License Details area t enter the Server Usage interface. Refer t the instructins belw t cnfigure the settings. Select a SharePint/File System tab, and then mdify its registered farms r agents. Yu can perfrm the fllwing actins: Register a farm/agent Select the farm r agent yu want t register in the Unregistered Farms/Unregistered Agents list and select Add>>. The farm r agent will be mved t the Registered Farms/Registered Agents list. Unregister a farm Select the farm r agent yu want t unregister in the Registered Farms/Registered Agents list and select <<Remve buttn. The farm r agent will be mved t the Unregistered Farms/Unregistered Agents list. *Nte: If the number f servers in the Registered Farms/Registered Agents list reaches the number f servers/agents fr which the license yu have purchased allws, Cmpliance Guardian will nt allw yu t register mre farms r agents and the exclamatin pint ( SharePint/File System name. ) will appear t the left f the Select OK t save the changes r select Cancel t cancel the peratin. Yu will then be redirected t the License Manager interface. Update Manager Cmpliance Guardian Update Manager prvides yu with infrmatin regarding Cmpliance Guardian versins. Yu can check whether r nt yu are running the mst up t date versin f Cmpliance Guardian, dwnlad updates, view dwnlad and installatin histry, and cnfigure dwnlad and update settings. Update Manager allws yu t update the current versin f Cmpliance Guardian within the Cmpliance Guardian GUI t reduce the time and risk f a manual update. T access Update Manager fr Cmpliance Guardian, navigate t the Cntrl Panel interface, and then select Update Manager under the License and Update heading. Select Clse n the ribbn t clse the Update Manager interface. Cmpliance Guardian Installatin and Administratin User Guide 87

88 Cnfiguring Update Settings In Update Manager, yu can cnfigure settings fr custm lcatins t dwnlad updates, set the Update Manager t dwnlad r check fr updates autmatically, and cnfigure a prxy server fr dwnlading Cmpliance Guardian updates. T cnfigure these settings, select Update Settings n the ribbn. Yu will be redirected t the Update Settings interface where yu can cnfigure the fllwing settings: Dwnlad Lcatin Dwnlad Cmpliance Guardian updates t a net share path and stre them fr future use. T utilize this capability, check the Use the Net Share path as the update strage lcatin checkbx, and then enter the UNC path, Username, and Passwrd int the crrespnding text bxes. *Nte: The UNC path shuld be entered in the fllwing frmat: \\admin-pc\c$\data r \\admin-pc\c$\shared flder. Select Validatin Test t verify the access t the specified path. Befre perfrming an update, if multiple Cmpliance Guardian Cntrl Services are installed in the Windws Netwrk Lad Balance envirnment, the Dwnlad Lcatin must be cnfigured befre yu can perfrm the update peratin successfully. Managing Updates T manage available updates, select Manage Updates n the ribbn. All available updates fund by using the Check fr Updates functin will be listed in this page. Yu can perfrm the fllwing actins n these updates: View Histry Select View Histry n the ribbn t view a list f previusly installed Cmpliance Guardian updates. T see mre infrmatin abut an update, select the update by checking the crrespnding checkbx, and then select View Details n the ribbn. In the pp-up windw, yu can perfrm the fllwing actins: Uninstall Select Uninstall t uninstall the selected update. The fllwing ptins can be cnfigured in the pp-up windw: *Nte: Only htfixes and feature packs can be uninstalled. Service packs and cumulative updates cntain majr imprtant changes between different versins, they cannt be uninstalled. In the Manager tab, all f the installed Manager services will be displayed. Select Uninstall the update frm all the managers belw when uninstalling updates frm the Cmpliance Guardian Manager services since all f the available manager services must be updated at the same time. 88 Cmpliance Guardian Installatin and Administratin User Guide

89 In the Agent tab, select a farm t remve the update frm all Cmpliance Guardian Agents in that farm. Brwse Select Brwse n the ribbn t lk fr the updates n yur lcal server. Select the desired update, and then select Open t lad the update file int Cmpliance Guardian. The htfix will be stred in the UNC path yu specified in Update Settings. If there is n UNC path cnfigured, the htfix will be stred under the default path: \AvePint\Cmpliance Guardian 4\Manager\Wrk\patchFlder. Stp Select Stp t interrupt the selected dwnlading update. *Nte: The dwnlad prgress will be reset t 0%. Install Select Install t install the selected updates. The fllwing ptins can be cnfigured in the pp-up windw: In the Manager tab, all f the installed Manager services will be displayed. Select Install the update fr all the managers belw when installing updates fr the Cmpliance Guardian Manager services since all f the available manager services must be updated at the same time. In the Agent tab, select a farm t update all Cmpliance Guardian Agents in that farm. Delete Select Delete t delete the selected updates frm Cmpliance Guardian. The dwnladed/brwsed update files will be deleted at the same time. Reviewing the Installatin Histry f Updates T review the installatin histry f yur Cmpliance Guardian updates, select View Histry n the ribbn. Yu will see a list f all f the previusly installed Cmpliance Guardian updates. T see mre infrmatin abut an update, check the crrespnding checkbx next t the update, and then select View Details n the ribbn. In the pp-up windw, yu can select Uninstall if yu want t uninstall the selected update. The fllwing ptins can be cnfigured in the pp-up windw: *Nte: Only htfixes and feature packs can be uninstalled. Service packs (SP) and cumulated updates (CU) cntain majr imprtant changes between different versins and cannt be uninstalled. In the Manager tab, all f the installed Manager services will be displayed. Select Uninstall the update frm all the managers belw when uninstalling updates frm the Cmpliance Guardian Manager services since all f the available manager services must be updated at the same time. In the Agent tab, select a farm t remve the update frm all Cmpliance Guardian Agents in that farm. When yu are finished, select Clse t clse the pp-up windw, and then select Cancel t return t the Update Manager interface. Cmpliance Guardian Installatin and Administratin User Guide 89

90 Accunt Accunt allws yu t view and manage users and cnfigure user grups with custm permissin levels fr Cmpliance Guardian. This part allws yu t give specific peple, r grups f peple yur desired level f access t Cmpliance Guardian. Yu can give specified permissins t Cmpliance Guardian users t limit which Cmpliance Guardian mdule a user is able t access and which farms specific Cmpliance Guardian users can access. A user can belng t multiple grups. *Nte: If yu wuld like t leverage authenticatin credentials frm Windws Authenticatin, AD r ADFS, yu must first cnfigure the relevant integratin settings in Authenticatin Manager. Users Users allw yu t view and manage users. Grups User grups allw yu t apply the same permissin levels t all users within the same user grup. This way, yu can change the permissin levels f multiple users by editing yur user grup rather than individually cnfiguring permissin levels fr each user. Yu can als change the permissin levels f a user by changing the grup they belng t with pre-cnfigured permissin levels. Permissin Level The Permissin Level mdule allws yu t create pre-cnfigured permissins that can be applied t user grups r users t quickly and easily apply the same permissin cnfiguratin fr multiple users. Managing Users T access Users fr Cmpliance Guardian, navigate t the Cntrl Panel interface, and then select Users under the Accunt heading. Select Clse n the ribbn t clse the Users interface. *Nte: If a dmain is integrated with Cmpliance Guardian and a user frm its parent dmain, subdmain r trust dmain is added in Cmpliance Guardian Accunt Manager, the crrespnding parent dmain, subdmain r trust dmain will be integrated int Cmpliance Guardian and added t the Lg n t drp-dwn list in Cmpliance Guardian lgin page. In the Users interface, yu will see a list f previusly added users. T manage users, yu can perfrm the fllwing actins: 90 Add User T add a user fr Cmpliance Guardian, select Add User n the ribbn. Yu will be redirected t the Add User interface. Select the User Type t cnfigure the methd fr authenticatin: Lcal User Select Lcal User t manually enter the authenticatin credentials fr this user. Cnfigure the fllwing settings t add a lcal user: Enter the Username and f the user yu are adding, as well as an ptinal Descriptin fr future reference. Cmpliance Guardian Installatin and Administratin User Guide

91 Enter the desired passwrd int the Passwrd and Cnfirm passwrd text bxes, and then cnfigure the Passwrd Settings. The passwrd entered here must meet the System Passwrd Plicy. Fr mre infrmatin, refer t System Passwrd Plicy. Yu can select t use the Default passwrd settings, r select Custmized t cnfigure the passwrd settings manually. Check the crrespnding checkbx next t the User must change passwrd at next lgn, User cannt change passwrd, Passwrd never expires, Accunt is inactive setting. Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup r manually cnfigure the user s permissin levels. Select the Add user t grups drp-dwn menu, and then select the desired user grup frm the drp-dwn menu. The user will have all f the permissins f the specified grup. Active Directry User/Grup Select Active Directry User/Grup t utilize the user s active directry authenticatin credentials fr this new user. Cnfigure the fllwing settings t add an active directry user: Enter the name f the user/grup yu want t add int the AD User/Grup Name field, and then select the check names ( ) buttn t verify that the username yu entered is valid. Alternatively, yu can select the brwse ( ) buttn t search fr the desired user/grup. In the pp-up windw, enter the value t search fr in the Find text bx, then select the find names ( ) buttn. Select the desired user, then select Add. Select OK t add the users, r select Cancel t clse the windw withut adding the users. Enter an ptinal descriptin fr future reference. Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup, r manually cnfigure the user s permissin levels. Select the Add user t grup(s) ptin, and then select the desired user grup frm the drp-dwn menu. The user will have all f the permissins f the specified grup. Windws User/Grup Select Windws User/Grup t utilize the user s Windws authenticatin credentials fr this new user. Cnfigure the fllwing settings t add a Windws user: Enter the username f the user/grup yu want t add int the Windws User/Grup Name field, and then select the check names ( ) buttn t verify that the username yu entered is valid. The users/grups that are in the same dmain as the Cmpliance Guardian Cntrl server can be added t Cmpliance Guardian. Alternatively, yu can select the brwse ( ) buttn t search fr the desired user/grup; In the pp-up windw, enter the value t search fr in the Find text bx, and then select the find name ( ) buttn. Select the desired user, and Cmpliance Guardian Installatin and Administratin User Guide 91

92 then select Add. Select OK t add the users, r select Cancel t clse the windw withut adding the users. Enter an ptinal descriptin fr future reference. *Nte: In rder t lg n Cmpliance Guardian using the added user, the crrespnding user must have the permissin t access the machine where the Cmpliance Guardian Cntrl Service is installed. Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup r, manually cnfigure the user s permissin levels. Select the Add user t grup(s) ptin, and then select the desired user grup frm the drp-dwn menu. The user will have all f the permissins f the specified grup. ADFS Claim Select ADFS Claim t utilize the user s ADFS authenticatin credentials fr this new user. Cnfigure the fllwing settings t add an ADFS user: Select a Claim name frm the drp-dwn menu. Claims are cnfigured in Authenticatin Manager. Enter the username in the Claim value text bx. The value entered in the Claim value text bx will be displayed as the lgn name fr the user in Cmpliance Guardian. Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup r, manually cnfigure the user s permissin levels. Select the Add user t grup(s) ptin, and then select the desired user grup frm the drp-dwn menu. The user then has all f the permissins f the specified grup. Client Certificate User Befre adding Client Certificate user t Cmpliance Guardian Manager, make sure the Client Certificate Authenticatin has been enabled in Authenticatin Manager. Select Client Certificate User in the User Type sectin t utilize the user s Client Certificate authenticatin credentials fr this new user. Cnfigure the fllwing settings t add a Windws user: User Infrmatin Enter the username f the user/grup yu want t add int the Windws User/Grup Name field, and then select the check names ( ) buttn t verify that the username yu entered is valid. The users/grups in the same dmain as the Cmpliance Guardian Cntrl server can be added t Cmpliance Guardian. Alternatively, select the brwse name ( ) buttn t search fr the desired user/grup; in the pp-up windw, enter the value t search fr in the Find text bx, and then select the find name ( ) buttn. Select the desired user, and then select Add. Select OK t add the users, r select Cancel t clse the windw withut adding the users. Enter an ptinal Descriptin fr future reference. *Nte: In rder t lg int Cmpliance Guardian Manager using the added user, the crrespnding user must have the permissin t access 92 Cmpliance Guardian Installatin and Administratin User Guide

93 the machine where the Cmpliance Guardian Cntrl service is installed. Grup Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup, the user will have all f the permissins f the specified grup. When yu are finished, select Save t add the user and return t the Users interface, r select Cancel t return t the Users interface withut saving the cnfiguratins fr this new user. Edit User T edit a user fr Cmpliance Guardian, select the user by checking the crrespnding checkbx, and then select Edit User n the ribbn, r select the username. Yu will be brught t the Edit User interface where yu can cnfigure the fllwing settings fr a user: Edit Infrmatin Edit the user infrmatin fr the current user. Enter the address f the current lgged-n user. Descriptin Enter the ptinal descriptin fr future reference. Passwrd Change the user passwrd and cnfigure the security settings fr the lgged-n user. Check the Change my passwrd checkbx, supply the New passwrd, and re-enter the new passwrd in the Cnfirm new passwrd field. Select the desired security settings by checking the crrespnding checkbxes. If desired, select a deactivatin methd fr the passwrd: Never The passwrd never expires. After day(s) Enter the number f days yu wish the passwrd t be valid fr befre it expires. On Select the calendar buttn ( ) t chse the date when yu wish the passwrd t expire. When yu are finished, select Save t save yur changes and return t the Users interface, r select Cancel t return t the Users interface withut saving any changes made. Delete User T delete users, select the user by checking the crrespnding checkbx, then select Delete User n the ribbn. A cnfirmatin windw will pp up fr this deletin. Select OK t delete the selected users, r select Cancel t return t the Users interface withut deleting the selected users. Activate T activate the Inactive user, select the user by checking the crrespnding checkbx, then select Activate n the ribbn. *Nte: If a user fails t prvide the crrect credentials when attempting t lg int Cmpliance Guardian, they will receive the fllwing alert: Srry, the lgin ID r passwrd is incrrect. If the user receives this alert mre times than the number f Failed Lgin Attempts, the user s accunt will becme Inactive. Cmpliance Guardian Installatin and Administratin User Guide 93

94 Deactivate T deactivate the Active user, select the user by checking the crrespnding checkbx, then select Deactivate n the ribbn. Managing Grups T access Grups fr Cmpliance Guardian, navigate t the Cntrl Panel interface, and then select Grups under the Accunt heading. Select Clse n the ribbn t clse the Users interface. T manage yur user grups, yu can perfrm the fllwing actins: Add Grup T add a new grup, select Add Grup n the ribbn. Yu will be directed t the cnfiguratin page accrdingly, and then yu can perfrm the fllwing actins: Grup Infrmatin Enter a Grup Name fr the new grup, then enter an ptinal Descriptin fr future reference. Grup Permissins In the Scpe sectin, select Glbal permissin t grant the users f this grup access t all farms with the permissin levels cnfigured here r select Permissin fr different farms t grant users f this system grup access t specific farms with the cnfigured system permissin levels. If Glbal permissin is selected, chse which r all f the Permissin Levels yu want t assciate with this Grup. If Permissin fr different farms is selected, fr each farm, chse which r all f the Permissin Levels yu want t assciate with this grup. *Nte: At least ne permissin level must be assigned t the new grup. When yu are finished cnfiguring the settings fr the new grup, select Save t save and return t the Grups interface, r select Cancel t return t the Grups interface withut saving the cnfiguratins. Edit Grup T edit a grup, select the grup by checking the crrespnding checkbx, then select Edit Grup n the ribbn, r select the name f the desired grup. Yu will be redirected t the Edit Grup interface. Here yu can change the descriptin fr this grup, as well as the permissin scpe and permissin levels. When yu have finished making changes t the cnfiguratins fr this grup, select Save t save and return t the Grups interface, r select Cancel t return t the Grups interface withut saving any changes. Shw Users T view and manage the users in a grup, select the grup by checking the crrespnding checkbx, then select Shw Users n the ribbn. Yu will be redirected t the Shw Users interface. Here yu will see a list f all f the users that belng t this grup. Yu can perfrm the fllwing actins n the users f this grup: Add User t Grup T add users t this grup, select Add User t Grup n the ribbn. Yu will be redirected t the Add User t Grup interface. Enter the 94 Cmpliance Guardian Installatin and Administratin User Guide

95 Permissin Level username f the user yu want t add, and then select the check names buttn ( ) t verify that the username yu entered is valid. Alternatively, yu can select the brwse buttn ( ) t search fr the desired user. In the pp-up windw, enter the value t search fr in the Find text bx, and then select the search buttn ( ). Select the desired user, and then select Add. Select OK t add the users, r select Cancel t clse the windw withut adding the users. Remve User frm Grup T remve users frm this grup, select the desired users by checking the crrespnding checkbx, then select Remve User frm Grup n the ribbn. A cnfirmatin pp-up windw will appear t cnfirm the remve peratin. Select OK t delete the selected users, r select Cancel t return t the Shw Users interface withut deleting the users. When yu are finished, select Save t add the defined users t this grup and return t the Shw Users interface. T access Permissin Level fr Cmpliance Guardian, navigate t the Cntrl Panel interface, and then select Permissin Level under the Accunt heading. In the Permissin Level interface, all previusly cnfigured Permissin Levels will be displayed. T manage yur permissin levels, yu can perfrm the fllwing actins: Add T create a new permissin level, select Add n the ribbn. After selecting t add the crrespnding permissin level, yu will be redirected t the cnfiguratin page t perfrm the fllwing actins: Name and Descriptin Enter a name fr the new system permissin level and add an ptinal Descriptin fr future reference. Mdule Select the mdules yu want t grant permissin t fr all grups and users using this permissin level. Select Save t save the cnfiguratin. Select Cancel t return t the Permissin Level Interface withut saving changes. Edit T edit a previusly cnfigured permissin level, select the permissin level yu want t edit by checking the crrespnding checkbx, then select Edit n the ribbn. In the Edit Permissin Level interface, yu can mdify the Name and a Descriptin f this Permissin Level. In the Mdule sectin, yu can select the mdules yu want t allw this permissin level t access by checking the crrespnding checkbxes. Yu can select a prduct suite name t mdify the access t its mdules. Select Save t save the mdificatins fr the permissin level and return t the Permissin Level interface, r select Cancel t return t the Permissin Level interface withut saving the mdificatins. Cmpliance Guardian Installatin and Administratin User Guide 95

96 Delete T delete a previusly cnfigured permissin level, select the permissin level yu want t delete by checking the crrespnding checkbx, and then select Delete n the ribbn. A pp-up windw will appear t cnfirm this actin. Select OK t delete the selected permissin level and return t the Permissin Level interface, r select Cancel t return t the Permissin Level interface withut deleting the selected permissin level. My Settings In Cmpliance Guardian, sme users d nt have the permissin t navigate t the Accunt mdules. Hwever, My Settings allws the user t edit his/her wn accunt infrmatin. When yu lg int the Cmpliance Guardian GUI, the user currently lgged-n will be displayed at the tp right crner f the Cmpliance Guardian interface. Select the username and a drp-dwn list will appear. Select My Settings and enter the My Settings interface where yu can view detailed infrmatin f the current lgged-n user and the Cmpliance Guardian grups it belngs t. Select Edit n the ribbn and yu can cnfigure the settings. Fr mre infrmatin abut hw t cnfigure the settings, refer t Managing Users. After yu have saved the mdificatins, select Cancel t exit the My Settings interface and return t the previus Cmpliance Guardian interface yu are in. General Security General Security in the Cntrl Panel f Cmpliance Guardian allws yu t view and manage the fllwing features: Authenticatin Manager, Managed Service Accunts, and Security Prfile. Authenticatin Manager Authenticatin Manager allws yu t view and manage integrated authenticatin methds usable by Cmpliance Guardian. This means that Cmpliance Guardian can leverage yur pre-existing authenticatin methds, and custmize it fr access t Cmpliance Guardian. These authenticatin methds include: Windws Authenticatin Allws the users t lg nt Cmpliance Guardian using their Windws Authenticatin credentials. AD Integratin Allws the users t lg nt Cmpliance Guardian using their Active Directry authenticatin credentials. ADFS Integratin Allws the users t access Cmpliance Guardian as lng as they have lgged int the lcal machine using their ADFS credentials. Client Certificate Authenticatin Allws the users t access Cmpliance Guardian using Client Certificate Mapping Services. 96 Cmpliance Guardian Installatin and Administratin User Guide

97 T access Authenticatin Manager fr Cmpliance Guardian, pen the Cntrl Panel interface, select Authenticatin Manager under the General Security heading. Select Clse n the ribbn t clse the Authenticatin Manager interface. Cnfiguring Windws Authenticatin T leverage Windws Authenticatin credentials t access Cmpliance Guardian, cmplete the fllwing steps: 1. In the Authenticatin Manager interface, select Windws Authenticatin n the ribbn. 2. Select the Authenticatin Type frm the drp-dwn menu: NTLM Negtiate (Kerbers) *Nte: Kerbers authenticatin methd must be previusly cnfigured in the perating system befre yu select the Negtiate (Kerbers) ptin when enabling the integratin with Windws Authenticatin. Otherwise, the NTLM authenticatin methd will be enabled. 3. Select OK t save any changes made and clse the Windws Authenticatin interface, r select Cancel t clse the Windws Authenticatin interface withut saving any changes made. Cnfiguring AD Integratin T leverage Active Directry authenticatin credentials t access Cmpliance Guardian, cnfigure yur Active Directries in the AD Integratin interface. T access yur Active Directry integratin cnfiguratins, pen the Authenticatin Manager interface, and then select AD Integratin n the ribbn. In the AD Integratin cnfiguratin interface, yu will see a list f previusly cnfigured Active Directries. T manage yur integrated Active Directries, yu can perfrm the fllwing actins: Add T add a new Active Directry, select Add n the ribbn, then enter the Dmain in the crrespnding text bx. Select an AD accunt prfile in the drp-dwn list. Yu can select New Accunt Prfile t create a new prfile. Fr mre infrmatin, refer t Managed Service Accunts. Select Validatin Test t see if the values yu entered are valid, and then select OK t save the cnfiguratins fr the new Active Directry and return t the AD Integratin interface, r select Cancel t return t the AD Integratin interface withut saving the cnfiguratins. Edit T make changes t a previusly cnfigured integrated Active Directry, select the Active Directry by checking the crrespnding checkbx, then select Edit n the ribbn. Make the necessary changes, and then select OK t save the changes and return t the AD Integratin interface, r select Cancel t return t the AD Integratin interface withut saving any changes. Cmpliance Guardian Installatin and Administratin User Guide 97

98 Delete T delete a previusly cnfigured Active Directry, select the Active Directry by checking the crrespnding checkbx, then select Delete n the ribbn. Yu will be presented with a pp-up windw ntifying yu that The user(s) assciated with the selected dmain(s) will be disabled. The user(s) can be enabled nly by adding the selected dmain(s) again. Are yu sure yu want t prceed? There is als an ptin t remve all f the users that are assciated with the selected Active Directries frm Cmpliance Guardian; t d s, check the Remve all users assciated with the selected dmain(s) checkbx. Select OK t cnfirm the deletin, r select Cancel t return t the AD Integratin interface withut deleting the selected Active Directries. Enable Select Enable t allw the use f credentials frm the crrespnding Active Directry t access Cmpliance Guardian. Disable Select Disable t nt allw the use f credentials frm the crrespnding Active Directry t access Cmpliance Guardian. This ptin is useful during the maintenance f the Dmain Cntrller machine. Yu can disable the integratin with the dmain t be maintained and enable the integratin again after the maintenance. After ne Active Directry has been integrated with Cmpliance Guardian, it will be shwn in the Dmain text bx after yu select AD Integratin in the Lg n t drp-dwn list f the Cmpliance Guardian lgin page. If a dmain has father dmain, sub dmain r trust dmain, when a user frm these dmains has been added t Cmpliance Guardian, the crrespnding dmain will als be added int Cmpliance Guardian and yu will be able t view this dmain in Cmpliance Guardian lgin page. Cnfiguring ADFS Integratin T leverage Active Directry Federatin Services (ADFS) authenticatin credentials t access Cmpliance Guardian, cnfigure yur ADFS integratin in the ADFS Integratin interface. T access yur ADFS integratin cnfiguratins, in the Authenticatin Manager interface, select ADFS Integratin n the ribbn, then select ADFS Integratin in the drp-dwn menu. Yu will be brught t the ADFS Integratin Cnfigure Wizard. Cmplete the fllwing steps in the wizard t set up ADFS integratin: 1. ADFS Infrmatin Specify the fllwing general infrmatin f the ADFS yu want t integrate: ADFS Integratin Methd Select Manually t cnfigure the settings yurself, r select Autmatically t get the required infrmatin by using a federatin metadata trust XML file. Manual cnfiguratin Enter the URL f the security tken service (STS) in the ADFS Issuer text bx in the fllwing frmat: qualified dmain name/adfs/ls Autmatic cnfiguratin Enter the URL f the federatin metadata trust XML file in the Federatin Metadata Trust text bx in the fllwing frmat: qualified dmain name/federatinmetadata/ /federatinmetadata.xml 98 Cmpliance Guardian Installatin and Administratin User Guide

99 Relying Party Identifier Enter Cmpliance Guardian s Relying Party Identifier, which must first be cnfigured in ADFS in the Relying Party Identifier text bx. When yu are finished cnfiguring the ADFS Infrmatin, select Next t cnfigure the Security Tken Settings. 2. Security Tken Settings Cnfigure the certificates used in the ADFS integratin: Tken-signing Chse Select. A new Select Certificate pp-up windw will appear fr yu t specify a tken-signing certificate t cmmunicate with ADFS. This certificate must be the same as the ne cnfigured in ADFS. Alternatively, yu may als select Find Certificate t search fr the desired certificate. Select a Find in: parameter frm the drp-dwn menu, enter the keywrds in the Cntains: text bx, select a Lk in field: parameter frm the drp-dwn menu, then select Find Nw t start the search. Select Stp t stp the search. Once yu have selected yur desired certificate, select OK t save and exit the Select Certificate interface, r select Cancel t exit the Select Certificate interface withut saving specifying a certificate. *Nte: The certificate specified here must be the same as the ne cnfigured in ADFS. Tken-decrypting (ptinal) Chse Select. A new Select Certificate pp-up windw will appear fr yu t specify a tken-decrypting certificate t prtect the cmmunicatin between Cmpliance Guardian and ADFS. This certificate must be the same as the ne cnfigured in ADFS. Alternatively, yu may als select Find Certificate t search fr the desired certificate. Select a Find in: parameter frm the drp-dwn menu, enter the keywrds in the Cntains: text bx, select a Lk in field: parameter frm the drp-dwn menu, then select Find Nw t start the search. Select Stp t stp the search. Once yu have selected yur desired certificate, select OK t save and exit the Select Certificate interface, r select Cancel t exit the Select Certificate interface withut saving specifying a certificate. When yu are finished cnfiguring the Security Tken Settings, select Next t cnfigure the Claim Cnfiguratin. 3. Claim Cnfiguratin Cnfigure the mappings between the Claim Name displayed in Cmpliance Guardian and the Claim Type displayed in ADFS. Yu can perfrm the fllwing actins t yur claims: Yu can change the rder f the claims in the Order clumn f the table. If a user can be identified using several claims, Cmpliance Guardian will use the Claim Name f the first claim listed here as the display name fr each respective user. Select t delete the selected claim. Select Autmatically t have the claim type be specified autmatically after yu select the claim name frm the Claim Name drp-dwn menu. Select Manu t add the claims manually. Select Aut t switch back t the default ptin. 4. Overview Review the settings yu have cnfigured in the previus steps. T make changes, select Edit in the crrespnding sectin, and yu will be brught back t that step s yu can make changes. Cmpliance Guardian Installatin and Administratin User Guide 99

100 5. Finish Prvides yu with three ptins t imprt the relying party data fr Cmpliance Guardian in ADFS (using the Add Relying Party Trust Wizard). Optin 1 Select the link t imprt relying party data that is published nline frm the lcal netwrk Federatin metadata address. Optin 2 Select the link t dwnlad the Federatin metadata XML file, then uplad the dwnladed file t the ADFS server. Fllw the wizard t cnfigure ther settings. Optin 3 Enter the relying party data and the relying party identifier manually in the ADFS cnfiguratin wizard. In this step, yu can als chse t exprt the current ADFS cnfiguratin infrmatin t a specified lcatin by selecting Exprt n the ribbn, then explre t the lcatin yu want t save the XML file t. Select Finish t save yur cnfiguratins, and return t the Authenticatin Manager interface, r select Cancel t return t the Authenticatin Manager interface withut saving any f the cnfiguratins made. Once yu have cnfigured an ADFS integratin fr Cmpliance Guardian, the Add Federatin Trust ptin will becme available. Add Federatin Trust allws yu t integrate anther trusted ADFS with the ADFS yu have already cnfigured fr Cmpliance Guardian. T add integratin with anther trusted ADFS, pen the Authenticatin Manager interface, select ADFS Integratin n the ribbn, and then select Add Federatin Trust frm the drp-dwn menu. In the Add Federatin Trust interface, enter the fllwing infrmatin: Name The name entered here will be displayed in the Server drp-dwn menu n the lgin page. Yu can select the crrespnding name t lg n Cmpliance Guardian using the trusted ADFS. URL The identifier f the trusted ADFS. Select Add t add the new recrd r select t delete a selected ADFS trust. Cnfiguring Client Certificate Authenticatin In the Authenticatin Manager interface, cnfigure Client Certificate Authenticatin in any f the fllwing ways: Select Enable in the Actin clumn f the Client Certificate Authenticatin rw t enable the Client Certificate Authenticatin. Select Disable t disable this authenticatin. Select Set as default t set this authenticatin as the default. 100 Cmpliance Guardian Installatin and Administratin User Guide

101 Managed Service Accunts Use Managed Service Accunts t centralize all f the users using Cmpliance Guardian thrugh the Cmpliance Guardian Manager. T access Managed Service Accunts fr Cmpliance Guardian, pen the Cntrl Panel interface, select Managed Service Accunts under the General Security heading. All f the created managed accunt prfiles are displayed in the interface. T manage yur accunt prfiles, yu can perfrm the fllwing actins: Create Select Create t create a new prfile. The Create Accunt Prfile interface appears. Yu must first select the accunt type: If Active Directry is selected, enter the AD username and passwrd; If Office 365 is selected, enter the ID f the user that will be used t scan the SharePint Online site cllectins, and enter the crrespnding passwrd. Then, cmplete the URL f the SharePint admin center site. Select Save t save the changes, r select Cancel t return t the Managed Service Accunts interface withut any change. Edit Select a prfile, and then select Edit t edit the accunt. View Details Select a prfile, and then select View Details t view the detailed infrmatin. Delete T delete an accunt prfile, select the prfiles yu want t delete by checking the crrespnding checkbxes, and then select Delete. A pp-up windw will appear t cnfirm this actin. Select OK t delete the selected prfiles, r select Cancel withut deleting the prfiles. Security Prfile Security prfile can prtect yur backup data using the security keys generated by the specified encryptin methd. In the Security Prfile pane, there is a default security prfile named Default Security Prfile. The default prfile cannt be edited r deleted and nly the users in the System grups and Administratrs grup are able t view it. Prfile Settings T create a new security prfile, select Create n the ribbn, and then cnfigure the fllwing settings: Name Enter a prfile name and an ptinal Descriptin. Encryptin Methd Select encryptin methd and encryptin length t be used in the encryptin. Cmpliance Guardian Installatin and Administratin User Guide 101

102 Specify an encryptin methd Select an encryptin methd in the drp-dwn list frm AES, DES and Blwfish. *Nte: If yu are using an FIPS plicy in yur envirnment, yu can nly use AES as the encryptin methd. Encryptin Length (bit) Specify the length f the encryptin. Encryptin Key Select the way t generate an encryptin key. Autmatically generate an Encryptin Key Cmpliance Guardian will generate a randmized key fr yu. Generate Encryptin Key frm seed Select this ptin t have Cmpliance Guardian generate a key based n the seed yu enter. If yu chse this methd, enter a seed int the Seed text bx and then enter the same seed int the Cnfirm seed text bx. Select OK t save these cnfiguratins and return t the Security Prfile Interface, r select Cancel t return t the Security Prfile interface withut saving these cnfiguratins. The encryptin methd r length f a security prfile cannt be mdified nce the prfile has been created. In the Security Prfile interface, t mdify the descriptin and cnfiguratin fr a previusly cnfigured security prfile, select the prfile yu want t mdify, and then select Edit n the ribbn. T delete a previusly cnfigured security prfile, select the prfile yu want t delete, and then select Delete n the ribbn. *Nte: If the security prfile yu want t delete is already in use, it cannt be deleted. Imprting and Exprting Security Prfiles Yu can create Security Prfiles and exprt them t be used later. T exprt the Security Prfile, select the prfiles yu want t exprt, and select Exprt n the ribbn. Yu will be asked t create a passwrd fr this security prfile. Select OK after entering the desired passwrd in bth the Passwrd and the Cnfirm passwrd text bxes. Then select OK n the ribbn t save the passwrd and exprt the prfiles t the desired lcatin. T imprt the security prfile, select Imprt n the ribbn. Enter the passwrd that was created when the prfile was exprted then select OK n the ribbn. The security prfile will appear in the list f Security Prfiles in the Security Prfile interface nce it has been imprted. T exit the Security Prfile interface, select Clse n the ribbn and return t Cntrl Panel interface. Cmmn Settings Cmmn Settings in the Cntrl Panel f Cmpliance Guardian allws yu t view and manage the fllwing features: Test Suite Manager, Check Manager, and Filter Plicy. 102 Cmpliance Guardian Installatin and Administratin User Guide

103 Backgrund Infrmatin n Test Suite and Check In rder t prvide a flexible and custmizable cmpliance slutin, AvePint develped the AvePint Testing Language (ATL) t prvide rganizatins with the ability t rapidly respnd t new cmpliance threats and requirements. ATL is an XML structured language that is used t validate and classify cntent related t cmpliance t standards r guidelines, including but nt limited t security, privacy, accessibility, and cntent classificatin. Because it is pen and mdifiable, ATL allws fr cverage t specifically match an rganizatin s needs. ATL uses test definitin files (checks) t match yur envirnment and standards, test yur framewrk and repair issues, validate that yur cntent cmplies with rganizatinal standards, and identify all cntent that requires user review and distribute a list f items t the apprpriate parties. A check is an XML file that defines the lgic that Cmpliance Guardian uses t check files. Checks identify the purpse fr the check (the type f check t run, such as a pattern f characters), the cnditin fr the check (such as scial security number pattern), and the pssible result f the check (true r false). Users can change the values in the checks t determine the check cnditins, but the elements specific frmat defined by Cmpliance Guardian in the checks must stay the same. A test suite is a lgical gruping f test definitin files, r a set f checks, that define hw t present the scanned data. Test suites allw yu t build scan plans fr yur specific regulatins and requirements. These cllectins are the basis f Cmpliance Guardian scans. A test suite cntains ne r mre checks and a cnfiguratin file that is used t define hw t cmbine these checks and set risk levels fr scan results. In the Test Suite Manager interface, yu will see a list f the cnfigured test suites (including the built-in test suites). Test Suite Manager T access Test Suite Manager fr Cmpliance Guardian in the Cntrl Panel interface, select Test Suite Manager under the Cmmn Settings heading. In the Test Suite Manager interface, yu will see a list f the cnfigured test suites (including the built-in test suites). Yu can create, uplad, dwnlad, view details abut, edit, rename, delete, r view histry versins abut test suites. Review the fllwing sectins fr infrmatin abut each f these available actins. *Nte: Yu can view the versin f a test suite. When a test suite is upladed t Cmpliance Guardian r created thrugh Cmpliance Guardian, Cmpliance Guardian will autmatically assign a versin fr this test suite. If a test suite is updated via Test Suite Manager, Cmpliance Guardian will als autmatically update its versin when it is saved. Cmpliance Guardian Installatin and Administratin User Guide 103

104 Creating Test Suites T create a new test suite, select Create. Then, the Create Test Suite interface appears. There are three methds t create a test suite: Apply a template supplied by Cmpliance Guardian Use an existing test suite as a template fr the new ne. Imprt a pre-cnfigured test suite Imprt a test suite utside f Cmpliance Guardian. Create a blank test suite Create a new test suite, and yu can custmize the settings and rules based n yur wn requirements. Selecting the Apply a Template Supplied by Cmpliance Guardian Methd If yu select the Apply a template supplied by Cmpliance Guardian methd, cmplete the fllwing steps: 1. Select Next. 2. The General Settings step appears. Cmplete the fllwing settings: Select the type f infrmatin yu are checking: Privacy, infrmatin assurance, r peratinal security issues The file will be scanned, stripping f its frmatting. The cntent that is nt related t the accessibility will be scanned. Accessibility r site quality issues The file will be scanned keeping its frmatting. The accessibility related data will be scanned. Select a test suite as the template. Yu can search fr the desired ne by entering a keywrd in the search bx. Select each test suite template, the descriptin f the test suite is displayed in the right pane. Select if yu want t custmize the checks in the selected test suite: Yes, I want t custmize the checks If yu select this ptin, yu must select cmplete the check related settings. N, use them directly If yu select this ptin, yu will use the selected template and all f the checks included in it. Then, select Finish. Enter a test suite name and an ptinal descriptin in the appeared windw. 3. Select Next if yu select Yes, I want t custmize the checks. 4. The Checks step appears. All f the checks in the selected test suite are displayed. Yu can delete checks frm the test suite, view details f a check, als yu can add check r add check grups. Cmplete the fllwing steps t add checks: 104 Cmpliance Guardian Installatin and Administratin User Guide

105 a. Select Add Check. The Add Check windw appears. b. Yu can enter a keywrd in the search bx t search fr the desired checks; Yu can als use the filter feature t filter desired checks. Select Filter, and then select and specify the filter cnditins: Cnfidence Level, Severity Level and Speed Level. Then select Filter. Fr mre infrmatin n the Cnfidence Level, Severity Level and Speed Level, refer t Creating Checks. c. Select checks that yu want t include in the test suite. Then, select OK. Cmplete the fllwing steps t add checks grups: a. Select Add Grup f Checks. The Add Grup f Checks windw appears. b. Enter a check grup name and an ptinal descriptin. c. All f the checks are displayed in a table. Yu can enter a keywrd in the search bx t search fr the desired checks. Yu can als use the filter feature t filter desired checks. Select Filter, and then select and specify the filter cnditins: Cnfidence Level, Severity Level and Speed Level. Then select Filter. d. Select checks that are included in this check grup. The checks will run as a grup. The check grup will fail if ne f the checks in the check grup fails. e. Select OK. Select checks r check grups in the Checks step. If yu have selected the Privacy, infrmatin assurance, r peratinal security issues in the General Settings step, select hw yu want t scan fr the cnditins in these checks after selecting checks: D cmplex scan Cmpliance Guardian scans the files with the supprted file types. If the files that will be scanned are the unsupprted types in Cmpliance Guardian, IFilter will be used fr the scan. Simple scan IFilter is used fr the scan. Fr mre infrmatin n the supprted file types in Cmpliance Guardian, refer t Appendix B: Supprted File Types in Cmpliance Guardian. 5. Select Next. 6. The Summary Result step appears. There are tw tabs in the interface: Guided Mde and Advanced Mde. If yu select Yes, I want t prvide classificatin based n the results f the checks, nt nly will the results f the checks will be generated after the scan, a summary result will als be returned after a scan, which can be used t determine the cntent that will be affected by specified actins. Guided Mde prvides yu with the interface and ptins t cmbine the check results fr generating the summary result; Advanced Mde prvides the text field which allws yu t define the cdes fr generating the summary result. Cmpliance Guardian Installatin and Administratin User Guide 105

106 If yu use the Guided Mde, cnfigure the fllwing settings: Cnfigure the settings under If the fllwing cnditins are met in a branch. a. Select All/Any and True/False in If _ f these cnditins are _. All If All f the cnditins are True/False, generate the specified summary results. Any If Any f the cnditins are True/False, generate the specified summary results. b. Select Add Cnditin t add a cnditin. Then select the check, and then select the result. Select Set Bundary, and the Minimum Cunt link appears. Yu can select Minimum Cunt and Maximum Cunt by selecting the appeared link. Then, enter a vilatin number fund by the check. Yu can select Set Bundary again, and the Maximum Cunt link appears. Then yu can enter tw numbers as the values f Minimum Cunt and Maximum Cunt. If the vilatin cunt is in the specified range, the check meets the cnditin. c. Yu can select Add Grup t add a cnditin grup, and then cnfigure the cnditins in the cnditin grup. d. Enter a result summary value in the Classify the result as field. If the test suite s checks meet the cnditins cnfigured abve, the specified result summary will return. e. After yu cnfigured the cnditins abve, yu can select Else. Yu can directly enter a value in the Classify the result as field. If the results d nt meet the cnditins cnfigured in step a, b, c, and d, the result summary will be the value specified in the Else field. Yu can als cnfigure cnditins under Else, and then enter a value in the Classify the result as field. If the results d nt meet the cnditins cnfigured in step a, b, c, and d, and the test suite s checks meet the cnditins cnfigured under Else, the result summary will be the value specified in the Else field. Select Additinal Result t add anther branch. Select the delete buttn t delete a cnditin/cnditin grup/branch. If yu use the Advanced Mde. Yu must define the cdes using specified language. Refer t the fllwing language definitins fr writing the cdes: PASS/FAIL/WARN/NA/NT Represents the check result. Result.Add Represents the summary result f the test suite. = Judge r assign values. {} Used t qute checks. 106 Cmpliance Guardian Installatin and Administratin User Guide

107 () Used t grup bjects. The bjects gruped tgether can represent a whle cnditin; r it is used t represent the pririty when AND/OR is used in a lgic peratin. IF Used t judge cnditins. At least ne THEN must g with IF. THEN Used with IF. The result fllwing THEN will be returned if the cnditin is true. ELSE Used with IF. The result will be returned if the cnditin after IF is false. END Used with ELSE. The current cnditin judgement will end. The upper level cnditin judgement cntinues. Fr example: IF ( ({SSN} = "FAIL") AND ( ({Credit Card} = "FAIL") ) ) THEN Result.Add( Pssible Vilatin ) Else END Else Result.Add( Clean ) AND The lgic relatinship. OR The lgic relatinship. NOT The lgic negatin. Fr example: IF ( ({Credit Card} = fail ) AND ({SSN} = fail ) AND NOT ( ({ } = pass ) OR ({Address} = pass ) ) Cmpliance Guardian Installatin and Administratin User Guide 107

108 ) THEN Result.Add( Classified ) Else Result.Add( Public ) Vilatins.Cunt It must fllw ne r mre checks, which represents the ttal number f vilatins fund by the checks. Fr example: IF ( ({Fax Number} = "Fail" AND Vilatins.Cunt({Fax Numer}) > 10) ) THEN Result.Add("Fax") When yu have cnfigured the cnditins in Guided Mde r Advanced Mde, switch Guided Mde r Advanced Mde, the cnfiguratins can be displayed in anther tab. 7. Select Finish f the screen t save the test suite. A windw appears. Enter a test suite name and an ptinal descriptin, and then select OK. If yu want t preview the test suite befre selecting Finish, select Preview. A pp-up windw appears. Yu can preview the test suite cnfiguratin in the windw. At any step, select Back t return t the previus step, and select Cancel t cancel the plan creatin. Selecting the Imprt a Pre-cnfigured Test Suite Methd If yu select the Imprt a pre-cnfigured test suite methd, select Uplad. Then, select a test suite file frm yur lcal system. Yu can select Next t view the upladed test suite settings, and als yu can edit the settings. Fr mre infrmatin n cnfiguring settings, refer t Selecting the Apply a Template Supplied by Cmpliance Guardian Methd. Selecting the Create a Blank test suite Methd If yu select the Create a blank test suite methd, cmplete the fllwing steps: 1. Select Next. 2. The General Settings step appears. Select the type f infrmatin yu are checking: Privacy, infrmatin assurance, r peratinal security issues The file will be scanned, stripping ut its frmatting. The cntent that is nt related t the accessibility will be scanned. 108 Cmpliance Guardian Installatin and Administratin User Guide

109 3. Select Next. Accessibility r site quality issues The file will be scanned keeping its frmatting. The accessibility related data will be scanned. 4. The Checks step appears. Add checks r check grups fr the test suite. Yu can select t view details f the added checks, r delete checks r check grups. Select the checks r check grups in the Checks step. Fr mre infrmatin n adding checks r check grups, refer t Selecting the Apply a Template Supplied by Cmpliance Guardian Methd. 5. Select Next. Fr details abut the fllwing settings, refer t Selecting the Apply a Template Supplied by Cmpliance Guardian Methd. Uplading a Test Suite Select Uplad. The Uplad windw appears, and then yu can select the desired test suite. The upladed test suite will display in the test suite list in the Test Suite Manager interface. Dwnlading a Test Suite Select a test suite frm the list f cnfigured test suites, and then select Dwnlad t dwnlad it. Editing a Test Suite In the Test Suite Manager interface, select the test suite that yu want t edit, and then select Edit. Fr mre infrmatin n cnfiguring the settings, refer t Creating Test Suites. Renaming a Test Suite Select the test suite that yu want t rename, and then select Rename. A windw appears, enter the new name, and then select OK. View Details Abut a Test Suite Select a test suite, and then select View Details; r yu can select the test suite name. The View Details appears. At any step f the test suite settings, select Edit, and the settings will be editable. Then, yu can edit the settings. Deleting a Test Suite Select a test suite frm the list f cnfigured test suites, and then select Delete. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete, r select Cancel t return withut deleting it. Cmpliance Guardian Installatin and Administratin User Guide 109

110 Viewing Versin Histry f a Test Suite In the Test Suite Manager interface, the latest versin f a test suite is displayed in the Versin clumn. T view the detailed versin histry f a test suite, select the test suite, and then select Versin Histry. The Versin Histry interface appears. All f the test suite s previus versins are displayed. Yu can perfrm the fllwing actins t a test suite versin: View Details Select a versin, and then select View Details t view the detailed settings. Select Edit t edit the settings. Delete Select ne r multiple versins, and then select Delete. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete, r select Cancel t return withut deleting it. Dwnlad Select a versin, and then select Dwnlad t dwnlad it. Check Manager T access Check Manager fr Cmpliance Guardian in the Cntrl Panel interface, select Check Manager under the Cmmn Settings heading. In the Check Manager interface, yu will see a list f the cnfigured checks. Yu can create, uplad, dwnlad, view details abut, edit, r delete checks. Review the fllwing sectins fr infrmatin abut each f these available actins. Creating Checks T create a new test suite, select Create. The Create Check interface appears. There are fur categries f infrmatin that yu can check, select the infrmatin categry first, and then select a check template: Text r Keywrds The fllwing types f checks can be selected t check this kind f infrmatin: FindText The FindText type check is used t find specified text in a dcument. CmplexFindText The CmplexFindText type check ffers a mre cmplex way t detect if tw text strings are cexisting in ne dcument. The functinality f the CmplexFindText type check is similar t the FindText type check. RegularExpressin The RegularExpressin type check is used t find a string f text that fits the frmat f the defined regular expressin. CmplexRegEx The CmplexRegEx type check ffers a mre cmplex way t detect if tw strings f text are cexisting in ne dcument. The functinality f the CmplexRegEx type check is similar t the RegularExpressin type check. 110 Cmpliance Guardian Installatin and Administratin User Guide

111 Dictinary The Dictinary type check grups FindText check and RegularExpressin check in ne check. The dictinary settings enable end users t define multiple checking in each FindText r RegularExpressin sectin. Cmb-Prximity The Cmb-Prximity check cmbines different checks and then uses the psitin limitatin f the different checks t find the desired cntent. Cmb-LgicGrup The Cmb-LgicGrup check cmbines different checks and then uses the result f the different checks t find the desired result. Standard Frms The fllwing types f checks can be selected t check this kind f infrmatin: Cntext The Cntext check is used t discver SharePint site/list/item prperties, file prperties, and AD prperties that match the test cnditins. Element The Element type check is used t validate whether the HTML/XML elements have particular settings n attributes r cntents. EnhancedElement The EnhancedElement type check is used t validate tw kinds f elements in ne check during the scanning prgress. The functinality f the EnhancedElement type check is similar t the Element type check. MatchedElement The MatchedElement type check is used t validate the matching relatinship between tw elements. Fingerprinting The Fingerprinting type check allws yu t use the cntent stred in dcuments r files as the search cnditin t find anther dcument r file that has the exact r similar infrmatin. Website Settings The fllwing types f checks can be selected t check this kind f infrmatin: Ckie The Ckie type check is used t validate ckie dmain and expiratin dates. SSL The SSL type check is used t validate HTTPS prtcl encryptin levels. WebBeacns The WebBeacns type check is used t detect if Web Beacns are present n a webpage. FindFile The FindFile type check is used t find a specified file. LinkValidatin The LinkValidatin check is a check type that tests fr the validity f links r bkmarks within any cntent that can cntain links r bkmark references. FilePrperty The FilePrperty check is a check type that test fr the file prperties, it is specifically designed fr use with the MbileOK standard. Custm The fllwing type f check can be selected t check this kind f infrmatin: CustmScan The CustmScan type check is used t implement a custmized check methd n the check level and wrks as an extensin f the current check Cmpliance Guardian Installatin and Administratin User Guide 111

112 Creating FindText Type Check types. It is used in cmbinatin with ther checks t find infrmatin n a file and act n it. If yu select the FindText type, cmplete the fllwing steps: 1. Select Next. 2. The Search Cnditin step appears. Cmplete the fllwing settings: Select Next. Please enter the text that yu want t find Enter the text that yu want t find. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Then, select equal r cntain in The text fund must _ this text t specify if the text must equal t the text entered here, r the fund text can cntain the text entered here. Is this cnsidered a passed r failed result if Cmpliance Guardian finds this infrmatin Select an ptin t define if it fails r passes the test if the text has been fund. 3. The Define Result step appears. Cmplete the fllwing settings: Select Next. What shuld Cmpliance Guardian reprt when the file passes the check Enter the message that will be reprted when the file passes the check. What shuld Cmpliance Guardian reprt when the file fails the check Enter the message that will be reprted when the file fails the check. 4. The General Settings step appears. Cmplete the fllwing settings: Plicy URL Enter a hyperlink t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. Check Speed Shws the speed f the check. Lw The check perfrmance is slw relative t the ther checks. Medium The check perfrmance is mderate relative t the ther checks. High The check perfrmance is fast relative t the ther checks. Yu can select the speed accrding t yur requirements as well. Cnfidence Level Shws the hw sure we are t cnsider the fund instance is a prblem. The range is frm 1 t means that the result is always false psitive; 100 means that the result is gd and n false psitive. Yu can change the range accrding t yur requirements as well. 112 Cmpliance Guardian Installatin and Administratin User Guide

113 Severity Shws hw damage the infrmatin is in this check. The range is frm 1 t means n immediate reslutin is required; 10 means the infrmatin is really vilated. Yu can change the range accrding t yur requirements as well. 5. Select Preview t preview the attributes f the check file in an appeared windw. 6. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Creating CmplexFindText Type Check If yu select the CmplexFindText type, cmplete the fllwing steps: 1. Select Next. 2. The Search Cnditin step appears. Cmplete the fllwing settings: Please enter the primary text that yu want t find Enter the primary text that yu want t find. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Then select equal r cntains in The specific text must _ t specify if the text must equal t the text entered here, r the fund text can cntain the text entered here. Please enter the secndary text that yu want t find Enter the secndary text that yu want t find. Yu can decide if yu want the text being tested t match the case exactly by using the Case Sensitive buttn. Then select equal r cntains in The specific text must _ t specify if the text must be equal t the text entered here, r the fund text can cntain the text entered here. Set the maximum number f characters between the instance by the primary check and the instance fund by the secndary check Select if yu want t set the maximum number f characters between the instance fund by the primary check and the instance fund by the secndary check. If yu select this ptin, enter a number. If the primary text is fund, and the length f the secndary text and the primary text is less than r equal t the number specified here, the secndary text is cnsidered fund. If bth primary text and secndary text are fund, des the file pass the test Select an ptin t define if the file fails r passes the test if bth primary text and secndary text are fund. If the primary text is nt fund, what d yu want t d Select what d yu want t d if the primary text is nt fund: Cntinue t search fr the secndary text Cmpliance Guardian will cntinue t search fr the secndary text. If this ptin is selected, the fllwing settings appears: If the secndary text is als nt fund, des the dcument pass the test Select an ptin t define if it fails r passes the test if the secndary text is nt fund. Cmpliance Guardian Installatin and Administratin User Guide 113

114 D nt search fr the secndary text, the bject passed the test Cmpliance Guardian will nt search fr the secndary text, and the test passes. N additinal text search is required, the bject failed the test Cmpliance Guardian will nt search fr the secndary text, and the test fails. 3. Select Next. Fr detailed infrmatin n ther settings, refer t Creating FindText Type Check. Creating RegularExpressin Type Check If yu select the RegularExpressin type, cmplete the fllwing steps: 1. Select Next. 2. The Search Cnditin step appears. Cmplete the fllwing settings: Please enter the regular expressin. The value that matches the regular expressin will be fund Enter a regular expressin. The cntent that matches the expressin will be fund. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Exclude any results that als match the fllwing cnditins Select t cnfigure the cnditins. The fund cntent that matches the fllwing cnditins will be excluded: Please enter the text. If the fund result matches the value specified here, this result will be filtered ut Select the ptin, and then enter texts. If the fund cntent matches the texts entered here, the cntent will nt be included. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Please enter the regular expressins. If the fund result matches the regular expressins specified here, this result will be filtered ut Select the ptin, and then enter regular expressins. If the fund cntent matches the expressins entered here, the cntent will nt be included. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Is this cnsidered a pass r failed result if Cmpliance Guardian finds this infrmatin Select an ptin t define if it fails r passes the test if the cntent has been fund. 3. Select Next. Fr detailed infrmatin n ther settings, refer t Creating FindText Type Check. Creating CmplexRegEx Type Check If yu select the CmplexRegEx type, cmplete the fllwing steps: 1. Select Next. 2. The Search Cnditin step appears. Cmplete the fllwing settings: Please enter the primary regular expressin. The value that matches the regular expressin will be fund Enter the primary regular expressin. The text that matches the expressin will be fund. Yu can decide if the text being tested must match the 114 Cmpliance Guardian Installatin and Administratin User Guide

115 case exactly by using the Case Sensitive buttn. Select Exclude cntent that matches the cnditins belw t exclude the specified cntent: Exclude cntents that match the fllwing text Enter the text. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Yu can enter multiple texts, and use the cmma (,) as the separatr. The matched cntent will be excluded. Exclude cntent that matches the fllwing regular expressins Enter the regular expressin. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Yu can enter multiple texts, and use the cmma (,) as the separatr. The cntent that matches the specified expressins will be excluded. Please enter the secndary regular expressin. The value that matches the regular expressin will be fund Enter the secndary regular expressin. The text that matches the expressin will be fund. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Select Exclude cntent that matches the cnditins belw t exclude the specified cntent: Exclude cntents that match the fllwing text Enter the text. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Yu can enter multiple texts, and use the cmma (,) as the separatr. The matched cntent will be excluded. Exclude cntent that matches the fllwing regular expressins Enter the regular expressin. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Yu can enter multiple texts, and use the cmma (,) as the separatr. The cntent that matches the specified expressins will be excluded. Set the maximum number f characters between the instance by the primary check and the instance fund by the secndary check Select if yu want t set the maximum number f characters between the instance fund by the primary check and the instance fund by the secndary check. If yu select this ptin, enter a number. If the primary text is fund, and the length f the secndary text and the primary text is less than r equal t the number specified here, the secndary text is cnsidered fund. If bth primary text and secndary text are fund, des the file pass the test Select an ptin t define if it fails r passes the test if bth primary text and secndary text are fund. If the primary text is nt fund, what d yu want t d Select what d yu want t d if the primary text is nt fund: Cntinue t search fr the secndary text Cmpliance Guardian will cntinue t search fr the secndary text. If this ptin is selected, the fllwing settings appears: If the secndary text is als nt fund, des the dcument pass the test Select an ptin t define if it fails r passes the test if the secndary text is nt fund. Cmpliance Guardian Installatin and Administratin User Guide 115

116 D nt search fr the secndary text, the bject passed the test Cmpliance Guardian will nt search fr the secndary text, and the test passes. N additinal text search is required, the bject failed the test Cmpliance Guardian will nt search fr the secndary text, and the test fails. 3. Select Next. Fr detailed infrmatin n ther settings, refer t Creating FindText Type Check. Creating Dictinary Type Check If yu select the Dictinary type, cmplete the fllwing steps: 1. Select Next. 2. The Search Cnditin step appears. Cmplete the fllwing settings: Please enter the texts that yu want t find Select this ptin, and enter the text that yu want t find. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Then select equal r cntains in The text fund must _ this text t specify if the text must equal t the text entered here, r the fund text can cntain the text entered here. Yu can enter multiple text phrases. Use the cmma (,) as the separatr. Please enter the regular expressins. The values that match the regular expressins will be fund Select this ptin, and enter a regular expressin. The cntent that matches the expressin will be fund. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Yu can enter multiple expressins. Use the cmma (,) as the separatr. Select Exclude any result that matches the cnditins t exclude the specified cntent: Exclude cntent that matches the fllwing text Enter the text. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Yu can enter multiple texts, and use the cmma (,) as the separatr. The matched cntent will be excluded. Exclude the cntent that matches the regular expressins Enter the regular expressin. Yu can specify if the text being tested must match the case exactly by using the Case Sensitive buttn. Yu can enter multiple texts, and use the cmma (,) as the separatr. The cntent that matches the specified expressins will be excluded. If Cmpliance Guardian des nt find cntent matching the cnditins abve, shuld this test be cnsidered t have passed r failed Select an ptin t define if it fails r passes the test if Cmpliance Guardian des nt find cntent matching the cnditins abve. 3. Select Next. Fr detailed infrmatin n ther settings, refer t Creating FindText Type Check. Creating Cmb-Prximity Type Check If yu select the Cmb-Prximity type, cmplete the fllwing steps: 116 Cmpliance Guardian Installatin and Administratin User Guide

117 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then edit the check attributes. Refer t the fllwing tips t edit the attributes: Duble-click n the attribute that yu want t edit. The attribute is appeared as editable. Yu can als duble-click the entire rw, then the attributes in the rw are editable. Yu can edit sme attributes directly in the editable text bx. Fr ther attributes, edit them by selecting anther value in the drp-dwn list. T add a nde, duble-click the entire rw under which yu want t add the nde. Then, press Enter n the keybard. The new nde is added. Enter the attributes in the newly added nde accrding t yur requirement. T delete a nde, duble-click the entire rw, and then delete all f the cntent f this rw. Press Enter n the keybard r select n any ther field f the interface t cnfirm the mdificatin. Press Esc n the keybard t cancel the mdificatin. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring Cmb-Prximity Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Cnfiguring Cmb-Prximity Type Check Attributes Refer t the fllwing sectins fr details. General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. Cmpliance Guardian Installatin and Administratin User Guide 117

118 CmbCheck False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. ResultNA Specify a result t indicate there is n cntent meeting the specified expressins. Yu can enter NAResult, FalseResult, r TrueResult. TrueIf Specify when the result will be True. Yu can enter NtFund r Fund. Expressin Define the distance and psitin relatin between the tw instances fund by the tw checks. Enter the check name and the maximum number between the instances fund by the tw checks. Take the expressin belw as an example: <Expressin> <Distance>{SSN}(10){Credit Card}</Distance> </Expressin> Its test result will be cnsidered Fund in the fllwing cnditins: The characters between the instances fund by the check SSL and Credit Card are less than 10; The instance fund by the check SSL is in frnt f the instance fund by Credit Card (the tw instances are nt in ne line), r the instance fund by the check SSL is n the left f the instance fund by the check Credit Card (the tw instances are in ne line), the result will be cnsidered Fund. RefCheck Enter the check name and ID that is referred in the Expressin nde. Creating Cmb-LgicGrup Check If yu select the Cmb-LgicGrup type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring Cmb-LgicGrup Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. 118 Cmpliance Guardian Installatin and Administratin User Guide

119 Cnfiguring Cmb-LgicGrup Type Check Attributes Refer t the fllwing sectins fr details. General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText CmbCheck SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link is used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. Descriptin The descriptin f the check. True result Define the returning status fr this check when the check result is True. The check lgic determines whether a check result is False r True. Message Define the message fr this check when the check result is True. False result Define the returning status fr this check when the checking result is False. The check lgic determines whether a check result is False r True. Message Define the message fr this check when the check result is False. Relatin Type Enter And r Or as the Op value t define the relatin type amng the ExpressinGrup ndes fr defining the final check results. There is nly ne Relatin Type nde, and multiple ExpressinGrup ndes can be under the Relatin Type nde. If Or is defined, ne f the ExpressinGrup nde s result is True, the final result will be cnsidered True. If And is defined, all f the ExpressinGrup ndes result are True, the final result will be cnsidered True. ExpressinGrup Enter And r Or as the Op value t define the lgical relatin amng the Expressin ndes fr defining the result f the ExpressinGrup nde. The ExpressinGrup nde can cntain multiple Expressin ndes. If Or is defined, ne f the Expressin nde s result is True, the result f the ExpressinGrup nde will be cnsidered True. If And is defined, all f the Expressin ndes result are True, the result f the Expressin nde will be cnsidered True. Expressin Enter And r Or as the Op value t define the lgical relatin amng the Check Name ndes fr defining the result f the Expressin nde. The Expressin nde can cntain multiple Check Name ndes. Cmpliance Guardian Installatin and Administratin User Guide 119

120 If Or is defined, ne f the Check Name nde s result is True, the result f the Expressin nde will be cnsidered True. If And is defined, all f the Check Name ndes result are True, the result f the Expressin nde will be cnsidered True. Check Name Enter a check name. Then, enter Fail r Pass as the TrueIf value t define the result f the Check Name nde. Fr example, yu enter Fail as the TrueIf value. If the specified check in the Check Name nde s result is Pass, the result f the Check Name nde will be False. Creating Cntext Type Check If yu select the Cntext type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring Cntext Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Cnfiguring Cntext Type Check Attributes Refer t the fllwing sectins fr details. General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. 120 Cmpliance Guardian Installatin and Administratin User Guide

121 False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. NA Determine what result it shuld return when any f the defined prperties d nt exist. If any f the cnfigured cnditins cannt find the prperties, the results will be the specified value: TureResult, FalseResult r NAResult. Cnditin Enter the macr expressin fr the Surce attribute t define what metadata t be evaluated. Yu can define the search fr SharePint site cllectin, site, list r item prperties, file prperties, AD prperties, prperties in Yammer, r file prperties in Bx. The frmat is {$bject.name}. Refer t the fllwing table fr details abut the expressins: Type Expressin Descriptin SharePint Site Cllectin Prperty $SPSite.Prperties[URL] Search prperties f the scanned item s crrespnding SharePint site cllectin. $SPSite.Prperties[Title] $SPSite.Prperties[Mdified Time] $SPSite.Prperties[Created Time] $SPSite.Prperties[Primary Administratr] $SPSite.Prperties[Template Name] $SPSite.Prperties[Template ID] Site Prperty $SPWeb.Prperties[URL] Search prperties f the scanned item s Parent Site Prperty $SPWeb.Prperties[Title] $SPWeb.Prperties[Mdified Time] $SPWeb.Prperties[Created By] $SPWeb.Prperties[Created Time] $SPWeb.Prperties[Template Name] $SPWeb.Prperties[Template ID] $SPWeb.Prperties[Custm Prperty Key] $SPWeb.Redirect[Relative Redirected URL].Prperties[Prperty Name] $SPWebParent.Prperties[Custm Prperty Key] crrespnding SharePint site. *Nte: In $SPWeb.Redirect[Relative Redirected URL].Prps[Prperty Name], Relative Redirected URL means the site s crrespnding Web applicatin s relative URL. Cmpliance Guardian will search the prperties f the redirected URL. The Prperty Name can be: URL, Title, Mdified Time, Created Time, Primary Administratr, Template Name, Template Id r the custm prperties f the site. Cmpliance Guardian will scan the item s crrespnding site s prperties as well as the parent sites prperties. Fr example: There is a site cllectin Site Cllectin A. The tp-level site f Site Cllectin A cntains the site Cmpliance Guardian Installatin and Administratin User Guide 121

122 Type Expressin Descriptin prperties: P1; there are tw sites Site 1 and Site 2 under Site Cllectin A. Site 1 cntains the site prperties: P2. Site 2 cntains the site prperties: P3. The scanned item is in Site 1. If Cmpliance Guardian is required t search site prperty P3. Site 1 and Site 1 s parent Site Cllectin A cntains P2 and P1, but d nt cntain P3. In this case, P3 is nt fund. Item/File Clumn Dcument Prperty AD Prperty $SPItem.Fields[Size] $SPItem.Fields[Name] $SPItem.Fields[Mdified Time] $SPItem.Fields[Created Time] $SPItem.Fields[Created By] $SPItem.Fields[Mdified By] $SPItem.Fields[Versin] $SPItem.Permissin[PermissinName]. Principal $SPItem.User[UserName].Permissins $SPItem.Grup[GrupName].Permissin s $SPItem.Fields[WrkflwStatusClumn] $Dc.Prperties[CustmPrperty] Search prperties f an item. *Nte: $SPitem.permissin[PermissinName]. Principal means t search fr the users r grups wh has the specified Permissin t the scanned file. $SPItem.User[UserName].Permissins means t search fr the permissins that the specified user has t the scanned file. $SPItem.Grup[GrupName].Permissi ns means t search fr the permissins that the specified grup has t the scanned file. Search a SharePint file s wn prperties. Search the AD prperties. $AD.Users[$SPItem.Fields[Created By]].Prperties[Prperty Name] $AD.Users[$SPItem.Fields[Mdified By]].Prperties[Prperty Name] File Prperty $File.IsSharedTExternalUser Scan files that have been shared t external users. The CmpareType must be MustCntian when using this surce. True scans the files shared t external users. False des nt scan the files shared t external users. File System Dcument Prperty File System Prperty $Dc.Prperties[CustmPrperty] $File.Prperties[Owner] $File.Prperties[Size] $File.Prperties[Created Time] $File.Prperties[Mdified Time] $File.Prperties[Type] Search a file system file s wn prperties. Search prperties f the scanned file system files. 122 Cmpliance Guardian Installatin and Administratin User Guide

123 Type Expressin Descriptin $File.Prperties[Name] AD Prperty $AD.Users[$File.Prperties[Created Search the AD prperties. By]].Prperties[Prperty Name] $AD.Users[$File.Prperties[Mdified By]].Prperties[Prperty Name] Website Website Prperty Yammer Message Prperty $Site.Prperties[Cntent Type] $Site.Prperties[Size] $Site.Prperties[URL] $Site.Prperties[Mdified Time] $Site.Prperties[Hst] $Site.Prperties[Dmain] $Site.Prperties[Title] $Yammer.Users[$Yammer.Current[Creat rid]].prperties[name] $Yammer.Users[$Yammer.Current[Creat rid]].prperties[fullname] $Yammer.Users[$Yammer.Current[Creat rid]].prperties[netwrkid] $Yammer.Grups[$Yammer.Current[Sen dtgrup]].prperties[name] $Yammer.Grups[$Yammer.Current[Sen dtgrup]].prperties[netwrkid] $Yammer.Grups[$Yammer.Current[Sen dtgrup]].prperties[descriptin] $Yammer.Grups[$Yammer.Current[Sen dtgrup]].prperties[privacy] $Yammer.Current[CreateTime] $Yammer.Current[Privacy] $Yammer.Current[MessageType] $Yammer.Current[Tpics] Search the website prperties. Search prperties in Yammer. Bx File Prperty $File.SharedTExternalUser Scan files that have been shared t external users. The CmpareType must be MustEqual when using this surce. True scans the files shared t external users. False des nt scan the files shared t external users. Operatr and CmpareType After yu define the macr expressin, select AND r OR as the lgical relatinship t define the lgical relatinship between the <Cmpare> ndes. Then, specify a cmpare type in the <Cmpare> nde t Cmpliance Guardian Installatin and Administratin User Guide 123

124 define what cnditin the Surce value must be met, multiple <Cmpare> ndes can be inside a cnditin. The fllwing types f cmparisn are supprted in this check: MustCntain The surce metadata value must cntain the specific value. When the surce metadata is a user list, the value is cnsidered as a user and it must be in the list. MustEqual The surce metadata value must be the specific value. It des nt wrk when the surce metadata is a user list. MustMatch The surce metadata value must match the specific pattern, the value here is treated as a regular expressin, used t evaluate data. When the surce metadata is a user list, the regular expressin will be evaluated n each user name in the list. Befre The surce metadata value must be a valid date/time and must be befre the specific date. Within The surce metadata value must be a valid date/time and must be within a specific time range. GreaterThan, GreaterOrEqual, LessThan, LessOrEqual The surce metadata value must be a valid number and must be greater than, less than, r equal t a specific value. MustNtCntain The ppsite f MustCntain. MustNtEqual The ppsite f MustEqual. MustNtMatch The ppsite f MustMatch. After The ppsite f Befre. NtWithin The ppsite f Within. Value It is just text generally. When yu use Befre/After as the cmpare type, it shuld be a valid date/time frmat (actual frmat depending n system culture setting). When yu use Within/NtWithin, it shuld be in ne f the fllwing frmats: 100d (als can be 100day r 100days) 100w (als can be 100week r 100weeks) 100m (als can be 100mnth r 100mnths) 100y (als can be 100year r 100years) Expressin The value here defines the lgical relatinship between the <Cnditin> ndes, each number here stands fr the ID f the <Cnditin>. The result f this expressin determines the final utcme f this check. (The Expressin resulted in TRUE, check returns True result). 124 Cmpliance Guardian Installatin and Administratin User Guide

125 Creating Element Type Check If yu select the Element type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring Element Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Cnfiguring Element Type Check Attributes Refer t the fllwing sectins fr details. General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. Element Cnfigure the fllwing attributes fr Element: Name Specify the element name that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. Cmpliance Guardian Installatin and Administratin User Guide 125

126 ResultNA Specify a result when the specified element is nt fund. If TrueResult is selected, then if the specified element is nt fund, the True result will be returned. If FalseResult is selected, then if the specified element is nt fund, the False result will be returned. If NAResult is selected, then if the specified element is nt fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. In ther wrds, yu have the ptin t set the result t Nt Applicable if nne f the elements are fund. TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False. Name The name f the check. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. ListLc Cnfigure the fllwing attributes fr ListLc: Type There are tw values fr this attribute, Valid and Invalid. All elements that are cnsidered valid r invalid are stred t the database (the Lcatin). Status This is used t indicate the dispsitin f the element and the severity selected by the user. Nte that in the Reprt Text step, if the status set fr True Result r False Result is Failed, the value fr the Status attribute will be Fail, and the value cannt be changed. ElementRepeat Yu can cnfigure the ElementRepeat nde: Alert Specify whether t check fr repeating elements. Value Specify the maximum times the element can repeat befre the check is determined False. TextCmpare Yu can cnfigure the TextCmpare nde: 126 Cmpliance Guardian Installatin and Administratin User Guide

127 CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the element being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Attributes Yu can cnfigure the Attributes nde: Name Specify attribute name that will be tested. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If it is set t True, then the test will fail if the specified attribute des nt exist. The fllwing elements with specific attributes appear within the ptinal Attributes sectin: Length This element is ptinal. Select the checkbx befre this element, and the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Characters Specify the number f the characters used fr the cmpare. TextCmpare This element is ptinal. Select the checkbx befre this element, and the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute values being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. WrdsRepeat This element is ptinal. Select the checkbx befre this element, the fllwing attribute appears: Number Define the number f times that wrds can repeat in the attribute value befre the test fails. Cmpliance Guardian Installatin and Administratin User Guide 127

128 ElementCntent Yu can cnfigure the ElementCntent nde: CntentReq Specify whether the specified element must cntain cntent. If Yes is selected, then the element must cntain cntent, r the check fr this sectin will be False. The fllwing elements with specific attributes are within the ptinal ElementCntent sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal and NtEqual. Characters Specify the number f the characters used fr the cmpare. TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual and MustNtEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the cntent being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. ChildElement Yu can cnfigure the ChildElement nde: Name Specify the name f the child element that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. MustExist Specify whether r nt the child element must exist. If True is selected, then the test will fail if there is N child element. The fllwing elements with specific attributes are within the ptinal ChildElement sectin: ElementRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Alert Specify whether t check fr repeating elements. Value Specify the maximum times the element can repeat befre the check is determined False 128 Cmpliance Guardian Installatin and Administratin User Guide

129 Attributes This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the attribute name that will be tested. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If True is selected, then the test will fail if the specified attribute des nt exist. The fllwing elements with specific attributes are within the ptinal Attributes sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal and NtEqual. Characters Specify the number f the characters used fr the cmpare. TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, and MustNtEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. WrdsRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attribute appears: Number Define the number f times that wrds can repeat in the attribute value befre the test fails. ElementCntent This sectin is ptinal. Select the checkbx befre this element, the fllwing attribute appears: CntentReq Specify whether the specified element must cntain cntent. If Yes is selected, then the element must cntain cntent, r the check fr this sectin will be False. The fllwing elements with specific attributes are within the ptinal ElementCntent sectin: Cmpliance Guardian Installatin and Administratin User Guide 129

130 Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Characters Specify the number f the characters used fr the cmpare. TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Filter Yu can cnfigure the Filter nde: Attributes Fr the details abut the attributes, refer t Attributes. ElementCntent Fr the details abut the attributes, refer t ElementCntent. Creating EnhancedElement Type Check If yu select the EnhancedElement type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring EnhancedElement Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select back t return t the previus step; select Cancel t cancel any changes. Cnfiguring EnhancedElement Type Check Attributes Refer t the fllwing sectins fr details. 130 Cmpliance Guardian Installatin and Administratin User Guide

131 General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. EnhancedElement There are the five attributes under this element. Fr the details abut the five attributes, refer t the Element sectin. ListLc There are the tw attributes under this element. Fr the details abut the tw attributes, refer t the ListLc sectin. ElementRepeat This sectin is ptinal. Fr the details abut the attributes under this element, refer t the ElementRepeat sectin. TextCmpare This sectin is ptinal. Fr the details abut the attributes under this element, refer t the TextCmpare sectin. Attributes This sectin is ptinal. Fr the details abut the attributes under this element, refer t the Attributes sectin. ElementCntent This sectin is ptinal. Fr the details abut the attributes under this element, refer t the ElementCntent sectin. Cmpliance Guardian Installatin and Administratin User Guide 131

132 ChildElement This sectin is ptinal. Fr the details abut the attributes under this element, refer t the ChildElement sectin. SecndaryElement This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the secndary element that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. MustExist Specify whether the secndary element must exist. TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. MustNext Specify whether the secndary element must be next t the primary element (the element yu specified abve in this check). If yu select Yes in the drpdwn list under this attribute, nly the secndary element that is next t the primary element will be checked. If yu select N in the drp-dwn list under this attribute, then all the specified secndary elements will be checked. The fllwing elements with specific attributes are within the ptinal SecndaryElement sectin: ElementRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Alert Specify whether t check fr repeating elements. Value Specify the maximum times the element can repeat befre the check is determined False. Attributes This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the attribute name that will be tested. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If True is selected, then the test will fail if the specified attribute des nt exist. The fllwing elements with specific attributes are within the ptinal Attributes sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: 132 Cmpliance Guardian Installatin and Administratin User Guide

133 CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Characters Specify the number f the characters used fr the cmpare. TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the Separatr specified befre t separate the values. WrdsRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attribute appears. Number Define the number f times that wrds can repeat in the attribute value befre the test fails. ElementCntent This sectin is ptinal. Select the checkbx befre this element, the fllwing attribute appears: CntentReq Specify whether the specified element must cntain cntent. If Yes is selected, then the element must cntain cntent, r the check fr this sectin will be False. The fllwing elements with specific attributes are within the ptinal ElementCntent sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Characters Specify the number f the characters used fr the cmpare. TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual,MustNtEqual, MustMatch, and MustNtMatch Cmpliance Guardian Installatin and Administratin User Guide 133

134 Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. ChildElement This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the name f the child element that will be tested. CaseSensitive Specify whether the element name being tested fr must match the case exactly. MustExist Specify whether r nt the child element must exist. If True is selected, then the test will fail if there is N child element. The fllwing elements with specific attributes are within the ptinal ChildElement sectin: ElementRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Alert Specify whether t check fr repeating elements. Value Specify the maximum times the element can repeat befre the check is determined False. Attributes This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the attribute name that will be tested. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If True is selected, then the test will fail if the specified attribute des nt exist. The fllwing elements with specific attributes are within the ptinal Attributes sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Characters Specify the number f the characters used fr the cmpare. 134 Cmpliance Guardian Installatin and Administratin User Guide

135 Filter The cntent that meets the cnditin cnfigured in this element field can be tested. The fllwing elements with specific attributes are available in the ptinal Filter sectin: Attributes Fr the details abut the attributes, refer t Attributes. ElementCntent Fr the details abut the attributes, refer t ElementCntent. Creating MatchedElement Type Check If yu select the MatchedElement type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring MatchedElement Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Cnfiguring MatchedElement Type Check Attributes Refer t the fllwing sectins fr details. General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. Cmpliance Guardian Installatin and Administratin User Guide 135

136 MatchElement There are the five attributes under this element. Fr the details abut the five attributes, refer t the Element sectin. ListLc There are tw attributes under this element. Fr the details abut the tw attributes, refer t the ListLc sectin. Attributes This sectin is ptinal. Fr the details abut the attributes under this element, refer t the Attributes sectin. ElementCntent This sectin is ptinal. The details abut the attributes under this element, refer t the ElementCntent sectin. ChildElement This sectin is ptinal. The details abut the attributes under this element, refer t the ChildElement sectin. SecndaryMatch This sectin is ptinal. Select the checkbx befre the element, and cnfigure the fllwing attributes: SecndaryMatch Cnfigure the fllwing attributes fr this element: Name Specify the element that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. ResultNA Specify a result when the specified element is nt fund. If TrueResult is selected, then if the specified element is nt fund, the True result will be returned. If FalseResult is selected, then if the specified element is nt fund, the False result will be returned. If NAResult is selected, then if the specified element is nt fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. This is basically stating that yu have the ptin t set the result t Nt Applicable if nne f the elements are fund. TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False. Attribute Cnfigure the fllwing attributes fr this element: Name Specify the name f the attribute t be tested. 136 Cmpliance Guardian Installatin and Administratin User Guide

137 CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If True is selected, then the test will fail if the specified attribute des nt exist. TextCmpare Cnfigure the fllwing attributes fr this element: MatchElementValue If the Attributes element under the MatchElement sectin has been cnfigured, this radi buttn will be selectable. If this radi buttn is selected, cnfigure the fllwing attributes: Name All the attribute names cnfigured under the MatchElement sectin will be laded. Select a name frm the drp-dwn list fr the test. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. CmpareType There are tw values fr this attribute: MustCntain and MustNtCntain. If MustCntain is selected, the test cnditin is: the value f the attribute under the SecndaryMatch sectin must cntain the value f the attribute under the MatchElement sectin, r the check will be failed; If MustNtCntain is selected, the test cnditin is: the value f the attribute under the SecndaryMatch sectin must nt cntain the value f the attribute under the MatchElement sectin, r the check will be failed. TextCmpare If this radi buttn is selected, cnfigure the fllwing attributes: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, and MustNtEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Filter The cntent that meets the cnditin cnfigured in this element field can be tested. The fllwing elements with specific attributes are available in the ptinal Filter sectin: Attributes Fr the details abut the attributes, refer t Attributes. ElementCntent Fr the details abut the attributes, refer t ElementCntent. Cmpliance Guardian Installatin and Administratin User Guide 137

138 Creating Fingerprinting Type Check If yu select the Fingerprinting type, cmplete the fllwing steps: 1. Select Next. 2. The Search Cnditin step appears. Select the frms f matching: Exact matching Based n file size and the binary signature f the file. This frm is targeted t find duplicated dcuments that have the exact same cntent. Raw matching Based n cmpare result frm RDC Algrithm. RDC divides a file's data int chunks by cmputing the lcal maxima f a fingerprinting functin that is cmputed at every byte psitin in the file. A fingerprinting functin is a checksum functin that can be cmputed incrementally. Cmpliance Guardian des nt cnsider the file frmat r file size using this frm, s this frm can nt nly find different versins f a file but can als identify if different kinds f Micrsft Office files have the same r similar cntent. Text matching Match f discrete passages f extracted and nrmalized file cntents. Cmpliance Guardian extracts 100% f the file cntents, nrmalizes it by remving whitespaces, punctuatin, and frmatting, and then creates a checksum. The behavir f Text matching is different frm the ther tw frms, in this frm f matching, Cmpliance Guardian detects nly the file cntents that are indexed as the template in the Fingerprinting check. Fr example, cnsider a situatin where yu define a ne-page dcument in the Fingerprinting check as the template, and that ne page dcument is included as part f anther 100 page dcument. The 100-page dcument is cnsidered a 100% match because its cntent matches the ne page dcument. This frm can be used t find a PDF file that is cnverted frm the template file. Select the files that will be used as the templates fr searching. Select Add Anther File, and then select Brwse t select a file. Select Add Anther File t add anther file. Select the delete ( ) buttn t delete a selected template file. 3. Select Next. Fr detailed infrmatin n ther settings, refer t Creating FindText Type Check. Creating Ckie Type Check If yu select the Ckie type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. 138 Cmpliance Guardian Installatin and Administratin User Guide

139 Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring Ckie Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Cnfiguring Ckie Type Check Attributes Refer t the fllwing sectins fr details. General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. Ckie Cnfigure the fllwing attributes under this element: ThirdParty Instruct the scan engine t check if the ckie is frm a third party. PrivacyLinReq Instruct the scan engine (based n the ckie cnditin) t check fr a privacy link. ResultNA Specify a result when the specified element is nt fund. If TrueResult is selected, then if the specified element is nt fund, the True result will be returned; if FalseResult is selected, then if the specified element is nt fund, the False result will be returned. If NAResult is selected, then if the specified element is nt fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. This is basically stating that yu have the ptin t set the result t Nt Applicable if nne f the elements are fund. Expires Instruct the testing cre t check when the ckie expires in N secnds. Cmpliance Guardian Installatin and Administratin User Guide 139

140 cpiitdf Instruct the testing cre t use the specified check t identify PII in the webpage. CType Identify the ckie type t test fr (allwed values 1, 2, 3): 1 Single sessin. This tier encmpasses any use f single sessin Web measurement and custmizatin technlgies. 2 Multi-sessin withut PII. This tier encmpasses any use f multi-sessin Web measurement and custmizatin technlgies when n PII is cllected (including when the agency is unable t identify an individual as a result f its use f thse technlgies). 3 Multi-sessin with PII. This tier encmpasses any use f multi-sessin Web measurement and custmizatin technlgies when PII is cllected (including when the agency is able t identify an individual as a result f its use f thse technlgies). PrivacyLink Enter a value in this field, if the privacy link in the file cntains the value, this check will be True. Creating SSL Type Check If yu select the SSL type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring Ckie Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Creating WebBeacns Type Check If yu select the WebBeacns type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring Ckie Type Check Attributes. 140 Cmpliance Guardian Installatin and Administratin User Guide

141 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Cnfiguring WebBeacns Type Check Attributes Refer t the fllwing sectins fr details. General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. WebBeacns Cnfigure the fllwing attributes under this element: ElementName Specify the element name that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. ResultNA Specify a result when the specified element is nt fund. If TrueResult is selected, then if the specified element is nt fund, the True result will be returned; if FalseResult is selected, then if the specified element is nt fund, the False result will be returned; if NAResult is selected, then if the specified element is nt fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. This is basically stating that yu have the ptin t set the result t Nt Applicable if nne f the elements are fund. AttrName Specify the attribute name that will be tested. AttrCaseSensitive Specify if the attribute name being tested fr must match the case exactly. Cmpliance Guardian Installatin and Administratin User Guide 141

142 ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False. Elements Cnfigure the fllwing attribute under this element: Scpe There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. ListLc Cnfigure the fllwing attributes under this element: Type There are tw values fr this attribute, Valid and Invalid. All elements that are cnsidered valid r invalid are stred t the database (the Lcatin). Status This is used t indicate the dispsitin f the element and the severity selected by the user. Nte that in the Reprt Text step, if the status set fr True Result r False Result is Failed, the value fr the Status attribute will be Fail, and the value cannt be changed. DmainExclude Cnfigure the fllwing attributes under this element: Separatr Specify a separatr if multiple values are specified. Value Enter ne r mre dmains here, the links that are lcated in these dmains will nt be checked. Use the separatr specified befre t separate the values. Creating FindFile Type Check If yu select the FindFile type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring FindFile Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Cnfiguring FindFile Type Check Attributes Refer t the fllwing sectins fr details. 142 Cmpliance Guardian Installatin and Administratin User Guide

143 General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. FindFile TrueIf Specify the cnditin when the check result is True. If Yes is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be True; If N is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be False. Path Enter the file s relative path r full path. Creating LinkValidatin Type Check If yu select the LinkValidatin type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring LinkValidatin Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Cnfiguring LinkValidatin Type Check Attributes Refer t the fllwing sectins fr details. Cmpliance Guardian Installatin and Administratin User Guide 143

144 General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. LinkValidatin Cnfigure the fllwing attributes under this element: ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False. TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. ResultNA Specify a result when n link is fund. If TrueResult is selected, then if n link is fund, the True result will be returned. If FalseResult is selected, then if n link is fund, the False result will be returned. If NAResult is selected, then if n link is fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. In ther wrds, yu have the ptin t set the result t Nt Applicable if nne f the links are fund. ValidateBkmarks Select True r False fr this attribute. If True is selected, the check will check whether the bkmarks wrk. If False is selected, the check will nt check the bkmarks. GetAllwCallHead Select True r False fr this attribute. If True is selected, the link will be checked using the HEAD methd, if the crrespnding server des nt supprt the HEAD methd, the GET methd will be used. If False is selected, the link will be checked using the HEAD methd, if the crrespnding server des nt supprt the HEAD methd, the GET methd will nt be used. 144 Cmpliance Guardian Installatin and Administratin User Guide

145 ListLc Cnfigure the fllwing attributes under this element: Type There are tw values fr this attribute, Valid and Invalid. All elements that are cnsidered valid r invalid are stred t the database (the Lcatin). Status This is used t indicate the dispsitin f the element and the severity selected by the user. In the Reprt Text step, if the status set fr True Result r False Result is Failed, the value fr the Status attribute will be Fail, and the value cannt be changed. TextCmpare Cnfigure the fllwing attributes under this element: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Attributes Cnfigure the fllwing attributes under this element: Nde Enter the nde that yu want t test. Value Enter the crrespnding nde value. Creating FilePrperty Type Check If yu select the FilePrperty type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. Fr mre infrmatin abut the attributes, refer t Cnfiguring FilePrperty Type Check Attributes. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Cmpliance Guardian Installatin and Administratin User Guide 145

146 Cnfiguring FilePrperty Type Check Attributes Refer t the fllwing sectins fr details. General Settings CnfidenceLevel Enter a number fr cnfidence level. ReprtText SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. FilePrperty Cnfigure the fllwing attributes under this element: TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False ListLc Cnfigure the fllwing attributes under this element: Type There are tw values fr this attribute, Valid and Invalid. All elements that are cnsidered valid r invalid are stred t the database (the Lcatin). Status This is used t indicate the dispsitin f the element and the severity selected by the user. Nte that in the Reprt Text step, if the status set fr True Result r False Result is Failed, the value fr the Status attribute will be Fail, and the value cannt be changed. Size Cnfigure the fllwing attributes under this element: 146 MaxValue Specify a value as the maximum size, select a unit in the drp-dwn list. Cmpliance Guardian Installatin and Administratin User Guide

147 Type Cnfigure the fllwing attributes under this element: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, and MustEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the element being tested fr must match the case exactly. Value Define ne r mre Cntent-types fr the test, use the separatr specified befre t separate the values. Filter This element is ptinal. Select the checkbx befre Filter, and cnfigure the fllwing attributes under this element: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustNtCntain, and MustNtEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the element being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Creating CustmScan Type Check If yu select the CustmScan type, cmplete the fllwing steps: 1. Select Next. 2. In the Preview in XML step, yu can view the detailed settings f the check file, and then yu can edit the check attributes. Fr mre infrmatin n hw t edit the attributes, refer t Creating Cmb-Prximity Type Check. Cnfigure the attributes f the check. CnfidenceLevel Enter a number fr cnfidence level. SeverityLevel Enter a number fr severity level. PerfrmanceLevel Enter a number fr the perfrmance level (check speed). Name The name f the check. This cannt be changed in Cmpliance Guardian Online Check Manager. PlicyURL The link used t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. True result Define the returning status fr this check when the checking result is True. The checking lgic determines whether a check result is False r True. Cmpliance Guardian Installatin and Administratin User Guide 147

148 Message Define the message fr this check when the checking result is True. False result Define the returning status fr this check when the checking result is False. The checking lgic determines whether a check result is False r True. Message Define the message fr this check when the checking result is False. In the CustmTDF nde, nly the attribute Class needs t be cnfigured fr the check. Specify the Namespace.Class and AssemblyName in the Class attribute field. Use the cmma (,) t separate them. Fr mre infrmatin, refer t Appendix A: Using CustmScan in Cmpliance Guardian. 3. Select Finish t cmplete the creatin. A windw appears. Enter the check name and an ptinal descriptin. Then select OK. At any step, select Back t return t the previus step; select Cancel t cancel any changes. Hw t Calculate a File s Risk Scre A scre f a check = (hw damage f the infrmatin)*(hw many vilatins)*(hw accuracy we are sure n the fund instance) = (severity level)*(the vilatin cunt)*(cnfidence level) A scre f a test suite = The ttal risk scres f all f the checks in the test suite (check 1+ check 2 + check 3 ) A ttal scre f a file = The ttal risk scres f all test suites used t scan the file (test suite 1 + test suite 2 + test suite 3 ) Uplading a Check Select Uplad. A windw will pp up, and then yu can select the desired check. The upladed check will display in the check list in the Check interface. Yu can uplad multiple checks at ne time. Befre uplading the checks, yu must zip the checks t ne file first, and then select the ZIP file t uplad them t Cmpliance Guardian. Dwnlading a Check Select ne r mre checks, and then select Dwnlad t dwnlad the test suites. Editing a Check In the Check Manager interface, select the check that yu want t edit, and then select Edit. Fr mre infrmatin n cnfiguring the settings, refer t Creating Checks. 148 Cmpliance Guardian Installatin and Administratin User Guide

149 Renaming a Check Select the check that yu want t rename, and then select Rename. A windw appears, enter the new name, and then select OK. View Details Abut a Check Select a check, and then select View Details; r select n a check, the View Details interface appears. At any step f the test suite settings, select Edit, and the settings will be editable. Then, yu can edit the settings. Deleting a Check Select a check frm the list f cnfigured checks, and then select Delete. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete, r select Cancel t return withut deleting it. View Histry Versin Abut a Check In the Check Manager interface, the latest versin f a check is displayed in the Versin clumn. T view the detailed versin histry f a check, select the check, and then select Versin Histry. The Versin Histry interface appears. All f the test suite s previus versins are displayed. Yu can perfrm the fllwing actins t a check versin: View Details Select a versin, and then select View Details t view the detailed settings. Any step f the settings, select Edit, and the settings will be editable. Then, yu can edit the settings. Delete Select ne r multiple versins, and then select Delete. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete, r select Cancel t return withut deleting it. Dwnlad Select a versin, and then select Dwnlad t dwnlad it. Filter Plicy Filter Plicy allws yu t set up filter rules s yu can cntrl what bjects and data appear s that yu can target cntent mre precisely. By setting up and saving filter plicies, yu can apply the same filter plicies t different plans withut having t recreate them each time. T access Filter Plicy fr Cmpliance Guardian in the Cntrl Panel interface, select Filter Plicy under the Cmmn heading. Select Clse n the ribbn t clse the Filter Plicy interface. Cmpliance Guardian Installatin and Administratin User Guide 149

150 Managing Filter Plicies In Filter Plicy, yu can create a new filter plicy, view details abut a filter plicy, edit a previusly cnfigured filter plicy, r delete a previusly cnfigured filter plicy. Fr mre infrmatin abut creating a filter plicy, refer t Cnfiguring Filter Plicies. Fr mre infrmatin abut editing cnfiguratins fr filter plicy, refer t Editing Filter Plicies. T view a filter plicy fr Cmpliance Guardian, select it frm the list f previusly cnfigured filter plicies, and then select View Details n the ribbn. T delete a filter plicy fr Cmpliance Guardian, select it frm the list f previusly cnfigured filter plicies, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected filter plicy, r select Cancel t return withut deleting it. *Nte: There are fur default filter plicies (Cmmn File Types and Items is used fr Real-Time Scanner and Scheduled Scanner fr SharePint; File System Cmmn File Types is used fr Real-Time and Scheduled Scanner fr File System; Cmmn Website Cntent is used fr Scheduled Scanner fr Website; Lync Cmmn File Types is used fr Scheduled Scanner fr Lync) cnfigured in advance. The default filter plicies will be selected if n ther filter plicies are cnfigured. Cnfiguring Filter Plicies T create a new filter plicy, select Create n the ribbn. In the Create Filter Plicy interface, cnfigure the fllwing settings: 1. Name Enter a Name fr the filter plicy. 2. Descriptin Enter an ptinal Descriptin fr future reference. 3. Type Select a filter plicy type. There are three kinds f filter plicy types: SharePint, File System, Website, and Lync: SharePint This type f filter plicy is used in Real-Time Scanner and Scheduled Scanner fr SharePint. If this type is selected, then select specific bjects r data within each SharePint level (frm site cllectin dwn t attachment). Each level has a unique set f rules that can be applied t enhance cnfiguratins. File System This type f filter plicy is used in Real-Time Scanner and Scheduled Scanner fr File System. If this type is selected, then select the level. Each level has a unique set f rules that can be applied t enhance cnfiguratins. Website This type f filter plicy is used in Scheduled Scanner fr Website. Lync This type f filter plicy is used in Scheduled Scanner fr Lync. Bx This type f filter plicy is used in Scheduled Scanner fr Bx. After selecting the filter plicy type, cnfigure the fllwing settings: 150 Cmpliance Guardian Installatin and Administratin User Guide

151 a. Select a criterin, and then select Add a Filter Level Grup t add a new rule f the specified level. Select the delete buttn ( ) t delete the rule that is n lnger needed. Rule Select the new rule yu want t create frm the drp-dwn list. Cnditin Select the cnditin fr the rule. Value Enter a value yu want the rule t use in the text bx. *Nte: The File Cntent criterin fr the SharePint type filter plicy and File System type filter plicy is nly fr the HTML file, yu can specify which lines r clumns are excluded in this scan by using the filter plicy. b. T add mre filters t the filter plicy, repeat the previus step. *Nte: Depending n the filters yu enter, yu can change the lgical relatinships between the filter rules. There are currently tw lgical relatinships: And and Or. By default, the lgic is set t And. T change the lgical relatinship, select the lgical relatinship link. The And lgical relatinship means that the cntent which meets all f the rules will be filtered and included in the result. The Or lgic means that the cntent which meets any ne f the rules will be filtered and included in the result. Yu can view the lgical relatinship f the filter rules in the Basic Filter Cnditin area. Fr example, if the lgical relatinship is ((1 And 2) Or 3) in the Basic Filter Cnditin area, the cntents that meet bth the filter rule 1 and filter rule 2, r meet the filter rule 3, will be filtered ut. Select Save t save the cnfiguratins and return t the Filter Plicy interface, r select Cancel t return t the Filter Plicy interface withut saving any changes. Editing Filter Plicies T mdify a cnfigured filter plicy, select the filter plicy, and then select Edit n the ribbn. In the Edit Filter Plicy interface, edit the related settings accrding t yur wn requirement. Fr mre infrmatin abut hw t cnfigure settings fr filter plicies, refer t Cnfiguring Filter Plicies. After finishing editing settings f the selected filter plicy, select Save t save the cnfiguratins and return t the Filter Plicy interface. Alternatively, select Save As and enter a filter plicy name t save it as a new filter plicy. Select Cancel t return t the Filter Plicy interface withut saving any changes. Ntificatin Settings Ntificatin Settings in the Cntrl Panel f Cmpliance Guardian allws yu t view and manage the fllwing features: Templates, Recipient Prfile, and Subscriptin. Cmpliance Guardian Installatin and Administratin User Guide 151

152 Templates Template allws yu t cnfigure an template t be used when sending alert s. T access Templates fr Cmpliance Guardian in the Cntrl Panel interface, select Templates under the Cmmn heading. Select Clse n the ribbn t clse the Template Settings interface. All f the created templates are displayed in the Template Settings interface. T manage yur templates, yu can perfrm the fllwing actins: Create Select Create t create a new template. The Create interface appears. Cnfigure the fllwing settings: Template Name Enter a Name fr this template and an ptinal Descriptin fr future reference. Template Specify the Subject and Bdy f the template. There are fur clumns that can be added t the subject: Item URL, Scan Start Time, Incident ID, and Object Name. There are the fllwing clumns that can be added t the bdy: Jb Name, Plan Name, Jb Type, Item URL, Scan Start Time, Reasn, Created By, Mdified By, Incident ID, Object Name, Assignee, Created Time, Wrkflw Status, Netwrk Name, Psted T, and Highlight. The values f these clumns will be displayed in the and the clumns are added in the template. Alternatively, yu can custmize the subject and bdy f the template with the desired cntent. Select Save t save the changes, r select Cancel t exit the interface withut any change. View Details Select a template, and then select View Details t view the detailed infrmatin. Edit Select a template, and then select Edit t edit the template. Delete T delete an template, select the templates yu want t delete by checking the crrespnding checkbxes, and then select Delete. A pp-up windw will appear t cnfirm this actin. Select OK t delete the selected templates, r select Cancel withut deleting the templates. 152 Cmpliance Guardian Installatin and Administratin User Guide

153 Recipient Prfile The receive ntificatin prfile allws yu t specify address t receive reprts frm Cmpliance Guardian plans and services. T access Recipient Prfile fr Cmpliance Guardian in the Cntrl Panel interface, select Recipient Prfile under the Cmmn heading. Select Clse n the ribbn t clse the Template interface. Yu can perfrm the fllwing settings t the created template: Create Select Create n the ribbn t create a new recipient prfile. Fr mre infrmatin, refer t Cnfiguring Recipient Prfiles. View Details Select a prfile, and select View Details t view the detailed infrmatin. Edit Select a prfile, and then select Edit t edit the prfile. Delete T delete a prfile, select the prfiles yu want t delete by checking the crrespnding checkbxes, and then select Delete. A pp-up windw will appear t cnfirm this actin. Select OK t delete the selected prfiles, r select Cancel withut deleting the prfiles. Set as Default Prfile Select a prfile, and then select this ptin t set the prfile as the default ne. Cnfiguring Recipient Prfiles T create a receive ntificatin prfile, select Create n the ribbn, and cmplete the fllwing settings: Type Select a type fr the prfile yu are abut t create: Alert An alert is sent t let yu knw that the file cannt be scanned, r peratin has been made accrding t the actin rule. Ntificatin A ntificatin is sent t let yu knw the jb reprt infrmatin after the jb finished. If Alert is selected, cnfigure the fllwing settings: Name and Descriptin Enter a Name fr the Receive Ntificatin prfile and an ptinal Descriptin fr future reference. Ntificatin Address Cnfigure the recipients fr this alert. Address If the Address radi buttn is selected, select Add an Alert Address, enter a recipient s address in the Recipient clumn. Select Add an Alert Address again t add anther recipient. Select the delete ( ) buttn t delete a recipient. Cmpliance Guardian Installatin and Administratin User Guide 153

154 SharePint Grup If the SharePint Grup buttn is selected, select Add a SharePint Grup, enter a SharePint grup name in the Recipient clumn. Select Add a SharePint Grup again t add anther grup. Select the delete ( ) buttn t delete a grup. Scpe Mapping If the Scpe Mapping buttn is selected, select Add a Scpe Mapping Prfile, select a scpe mapping prfile. Select Add a SharePint Grup again t add anther grup. Select the delete ( ) buttn t delete a grup. If Ntificatin is selected, cnfigure the fllwing settings: Name and Descriptin Enter a Name fr this Receive Ntificatin prfile and an ptinal Descriptin fr future reference. Alert Address Cnfigure the recipients fr this ntificatin. Select Add a Ntificatin Address and then cnfigure the settings belw t add a recipient: Chse the detail level fr the ntificatin frm the drp-dwn menu in the Reprt clumn. Select either Summary Reprt Recipient r Detailed Reprt Recipient. Enter the ntificatin recipient s address in the Recipient clumn. Repeat the settings abve t add mre recipients. Reprt Setting Select the type f infrmatin t include fr the reprt levels, the recipients f the crrespnding reprt types must exist befre yu can cnfigure the reprt levels. If Ntificatin was selected, yu can cnfigure the fllwing settings: Summary reprt level(s) Set when t send the summary reprt. By default, Success, Failure, and Warning are all selected. After the jb cmpleted, failed, r cmpleted with exceptin, a summary reprt will be sent t the recipient. Detailed reprt level(s) Set when t send the detailed reprt. By default, Success, Failure, and Warning are all selected. After the jb cmpleted, failed, r cmpleted with exceptin, a detailed reprt will be sent t the recipient. Send all lgs t recipient accrding t status Select what kind f lgs will be sent t recipient. Yu can select Success, Failure, r Warning. By default, Failure is selected. Message frmat Select the frmat which the message will be delivered in: HTML r Plain text. Select Save n the ribbn t save the settings r select Cancel t return t the Receive Settings interface withut saving the prfile. 154 Cmpliance Guardian Installatin and Administratin User Guide

155 Subscriptin Subscriptin allws yu t send the scan reprts t specified users. T access Subscriptin fr Cmpliance Guardian in the Cntrl Panel interface, select Subscriptin under the Ntificatin Settings heading. In the Scan Results field, cnfigure t send the scan results t specified users: Send Scan Recrd Summary Select the ptin t send the scan recrd summary t specified users. A table appears. Select the scpe mapping prfile frm the Scpe Mapping Prfile drp-dwn list. Select the scan result status, the results with the selected scan status will be sent. Select the Cnfigure link t cnfigure a schedule. The Cnfigure windw appears. Select the start time and then select the frequency t send the scan results. Select OK t save the changes. Select Add a Scpe Mapping Prfile t add anther rw. Select the delete ( t delete a rw. ) buttn Send Incident Summary Select the ptin t send the incident summary t specified users: Incident Assignee Select this ptin, and the incident summary will be sent t the incident assignee. Select the incident status, then the summary f the incident with the selected status will be sent. Select the Cnfigure link t cnfigure a schedule. The Cnfigure windw appears. Select the start time and then select the frequency t send the scan results. Select OK t save the changes. Scpe Mapping Prfile Select the ptin t send scan recrd summary t specified users. A table appears. Select the scpe mapping prfile frm the Scpe Mapping Prfile drp-dwn list, and select the scan result status, the results with the selected scan status will be sent. Then, select Cnfigure t cnfigure a schedule. Select Add a Scpe Mapping Prfile t add anther rw. Select the delete ( ) buttn t delete a rw. In the Fllw-up field, cnfigure t ntify the specified users if they have nt acted n failed files fr a specific perid f time: Incident Assignee Select this ptin. Enter a value in the Due Date field and select a unit. Then, select Cnfigure t cnfigure a schedule. If the incident assignee has nt Cmpliance Guardian Installatin and Administratin User Guide 155

156 acted n the failed files lnger than the specified time perid (due date value), the e- mail will be sent t ntify the incident assignee. Scpe Mapping Prfile Select the ptin, and a windw appears. Select the scpe mapping prfile frm the Scpe Mapping Prfile drp-dwn list, enter a value in the Due Date field, and select a unit. Then, select Cnfigure t cnfigure a schedule. If the users in the scpe mapping prfile have nt acted n the failed files lnger than the specified time perid (due date value), the will be sent t ntify the users. Select Add a Scpe Mapping Prfile t add anther rw. Select the delete ( t delete a rw. ) buttn Deplyment Deplyment in the Cntrl Panel f Cmpliance Guardian allws yu t view and manage the fllwing features: Database Manager, Cnnectin Manager, Slutin Manager, Allwed Lcatin, and Exprt Lcatin. Database Manager Database Manager allws yu t create databases used fr string scan results and data frm each data surce. Yu can als cnfigure settings fr displaying reprts in Incident Manager Center in Database Manager. T access Database Manager fr Cmpliance Guardian in the Cntrl Panel interface, select Database Manager under the Deplyment heading. Managing Databases In Database Manager, yu can create a database, view details abut a database, edit a previusly cnfigured database, r delete databases. Fr mre infrmatin abut creating r editing a database, refer t Creating a Database. T view details abut a database, select it frm the list f databases, select View Details, and then select Database in the drp-dwn menu. Yu will see the settings fr this database. Select Edit t change the cnfiguratins fr this database. Fr mre infrmatin abut editing cnfiguratins fr a reprt database, refer t Creating a Database. T delete a database frm Cmpliance Guardian, select it frm the list f databases, and select Delete. A cnfirmatin windw will appear and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected databases, r select Cancel t return withut deleting it. 156 Cmpliance Guardian Installatin and Administratin User Guide

157 Creating a Database T create a database, refer t the fllwing steps: 1. Select Create. The Create interface appears. 2. Cnfigure the fllwing settings: Database Cnfiguratin Select Regular r Specify Cnnectin String. If yu select Specify Cnnectin String, the Cnnectin String text field appears. Enter the cnnectin string accrding t the example listed. Select Validatin Test t test if the string is crrect. If yu select Regular, cmplete the fllwing settings: Database Server Enter the database server. Database Name Enter the database name. Database Authenticatin Select the authenticatin mde fr the database. If Windws Authenticatin is selected, the applicatin pl accunt and the Cmpliance Guardian Agent Accunt must have the db_wner permissin fr the database. If the database des nt exist and need t be created, the applicatin pl accunt and the Cmpliance Guardian Agent Accunt must have the dbcreatr permissin fr the reprt database. Yu can als validate the database accunt by selecting Validatin Test. The Validatin Test nly runs if the applicatin pl accunt has enugh permissins t the database. If SQL Authenticatin is selected, the necessary infrmatin must be specified in the Accunt and Passwrd fields. Yu can als validate the database accunt by selecting Validatin Test. Cnfigure Failver Database Server Select the Cnfigure Failver Database Server and then specify a failver database server. In the event that the specified database cllapses, the data stred in the database can be transferred t this standby database. Database Retentin Plicy Select Enable Database Retentin Plicy t enable the retentin plicy. Then, enter an integer in Keep the latest _ Days/Mnths/Years. 3. Select Save t save the settings; select Cancel t exit the interface withut any changes. Data Surce Cnfiguratin Select the Data Surce Cnfiguratin tab in the Database Manager interface t make the data surce assciate with a database. The data surce s related scan data can stre in the assciated database. All f the cnfigured data surces and data surce cnnectins are displayed in this interface. Select a data surce, and then select Cnfigure. The Cnfigure interface appears. Select a database frm the Cmpliance Guardian Installatin and Administratin User Guide 157

158 Database drp-dwn list, and then select Save. The data surce will have the database assciated. Select Cancel t return t the previus interface withut any changes. Cnfiguring Settings fr Incident Manager Center Select Incident Management Cnfiguratin tab in the Database Manager interface t cnfigure settings fr displaying reprts in the Incident Manager Center. Select a database, the data used by the Incident Manager Center will be aggregated and stred in the selected database. Then enter a value in Every _ Minutes/Hurs field t define the interval f aggregating data. Select Aggregate Nw t aggregate data immediately. Yu can see the last time f aggregating data, and the status f aggregating data last time. The next time f aggregating data will als be displayed. Select Refresh t view the update t date aggregating time infrmatin. Select Yes r N under D yu want t include details fr recrds that have Passed status, select Yes t aggregate all data. Select N if yu nly want t view the reprts f the Failed data. Select whether r nt t cnnect t the DcAve envirnment t review the audit histry f the SharePint cntent. If yu select Yes, cnnect t the fllwing DcAve envirnment managing my SharePint envirnment, enter the DcAve hst, Cntrl Service Prt, the username, and the passwrd t cnnect t the DcAve envirnment fr achieving the infrmatin frm DcAve Auditr database. Select whether r nt t enable the exprt capability in the Incident Manager Center. Select Yes, and specify a reprt lcatin, then select an exprt lcatin where the exprted data are stred. Yu can als cnfigure the pruning rules: 158 N pruning D nt cnfigure the pruning rule. Keep the last _ reprts Select this ptin t keep nly the desired number f the mst recent reprts in this reprt lcatin. Set the number f reprts t keep by entering a number int the text bx. Fr example, if yu enter 5 in the text bx, nly the 5 mst recent reprts in this reprt lcatin will be kept. All ther reprts will be deleted. Keep the last _ Days/Mnths f reprts Select this ptin t keep nly the reprts within the desired time frame in this reprt lcatin. Set the time frame fr the reprts yu want t keep by entering a number int the text bx, then select Days r Mnths frm the drp-dwn menu. Fr example, if yu enter 7 in the text bx, and select Days, nly reprts generated within the last 7 days in this reprt lcatin will be kept. All f the previus reprts will be deleted. Select Save t save the settings; r select Reset t erase the settings, then cnfigure again. Cnnectin Manager Cnnectin Manager allws yu t cnfigure cnnectins t cnnect with the desired data surces fr scanning the related data. There are fur data surces that must be cnnected befre a scan: SharePint Online, File System, Database, Yammer, and Bx. Cmpliance Guardian Installatin and Administratin User Guide

159 All f the created cnnectins are displayed in the Cnnectin Manager interface. Yu can perfrm the fllwing actins t the created cnnectins: Rename Select a cnnectin, and then select Rename. A windw appears. Edit the name f the cnnectin, and enter an ptinal descriptin. Select Save t save the settings. View Details Select View Details t view detailed infrmatin f a cnnectin. Edit Select Edit t edit settings f a cnnectin. Delete Select Delete t delete the selected cnnectins. Creating a SharePint Online Cnnectin Refer t the fllwing infrmatin t create a SharePint Online cnnectin: 1. Select Create, and then select SharePint Online. 2. In the Create SharePint Online Cnnectin interface, cnfigure the fllwing settings: a. Select a methd t add SharePint site cllectins t the site cllectin list by selecting the crrespnding tabs Manually Input, Autmatic Scan, and Imprt Cnfiguratin File. If Manually Input is selected, cnfigure the fllwing settings: Select an accunt prfile Select an accunt prfile. Enter the site cllectins that are managed by the Office 365 accunt Enter a SharePint Online site cllectin. Select Add Site Cllectin again t add anther SharePint Online site cllectin URL. The accunt in the selected accunt prfile must have access t the entered site cllectins. Select the delete ( ) buttn t delete an entered site cllectin. Select Add Anther Accunt Prfile t add anther accunt prfile, and then yu can define ther site cllectins t which the added accunt has access. Select Add t List t add these entered SharePint Online site cllectins t the Added Site Cllectin List table. If Autmatic Scan is selected, select an accunt prfile. Then, select Scan t scan all f the SharePint Online site cllectins t which the selected accunt prfile has access. All f the site cllectins will be displayed, select the site cllectin checkbxes, and then select Add t List t add these selected SharePint Online site cllectins t the Added Site Cllectin List table. If Imprt Cnfiguratin File is selected, yu can imprt the site cllectins in bulk using the prvided template. Select an accunt prfile Select an accunt prfile. Cmpliance Guardian Installatin and Administratin User Guide 159

160 Please uplad a cnfiguratin file Uplad the mdified cnfiguratin file template. Select Dwnlad a template t dwnlad the cnfiguratin file template. Mdify the dwnladed template t add the site cllectins URLs yu are abut t add int the template. Save the mdificatins and clse the mdified template. Select Brwse next t the File path text bx t uplad the mdified template. Select Scan, and the site cllectin URLs in the upladed cnfiguratin file will be displayed in the interface. Select Add t List t add these entered SharePint Online site cllectins t the Added Site Cllectin List table. b. The added SharePint Online site cllectins are displayed in the Added Site Cllectin List table. If yu want t scan SharePint Online site cllectins using the Real-Time Scanner rule, yu must activate the app fr Real-Time Scanner. Fr mre infrmatin n installing the Cmpliance Guardian App fr Real-Time Scanner, refer t Installing Cmpliance Guardian App fr Real-Time Scanner. After yu install the app, yu must activate the app fr the site cllectin that yu want t scan using the Real-Time Scanner. Refer t the fllwing steps t activate the app: i. Select N Tken in the Activatin Status clumn f the Added Site Cllectin List table. The Activate Real-Time App interface appears. Cnfigure the fllwing settings: Access the SharePint Online Site Select Access the SharePint Online Site t get the tken used t btain the trust f the Office 365. The Office 365 Lgin interface appears. Enter the username and passwrd. The Office 365 appears. Select the Trust it buttn. The status displayed n the Activate Real-Time App interface is Activated. Please select an prfile Select a ntificatin prfile t send an alert that the tken will expire. Enter the value t define when t send the befre the tken expires. ii. Select Save t save the settings and return t the Create SharePint Online Cnnectin interface; r select Cancel t exit the interface withut any changes. Select Delete t delete the selected added site cllectins; Select Retrieve Status abve the table t retrieve the status f the selected site cllectins. c. Select a database frm the drp-dwn list under Please select a database t stre the results f scanning SharePint Online. After yu select a database, the database is 160 Cmpliance Guardian Installatin and Administratin User Guide

161 assciated with the cnnectin, the infrmatin will be displayed under the Data Surce Cnfiguratin tab in Database Manager. d. Select if yu want t use the default agent. Select N under D yu want t limit the servers used by Cmpliance Guardian t scan t use the default agent t scan, select Yes, I need a new agent grup and then select an agent grup frm the drp-dwn list. 3. Select Save t save the settings, and then enter a name and an ptinal descriptin fr the cnnectin in the appeared windw. Yu can select Cancel t return t the Cnnectin Manager interface withut any changes. Creating a File System Cnnectin Refer t the fllwing infrmatin t create a file system cnnectin: 1. Select Create, and then select File System. 2. In the Create File System Cnnectin interface, cnfigure the fllwing settings: Type Select Net Share. UNC Path Specify a path in the frmat \\admin-pc\c$\data r \\admin-pc\shared flder. The files in the specified lcatin are supprted t be scanned. Select an accunt prfile Select an accunt prfile t access the UNC path. *Nte: The specified user must have the fllwing permissins: If the path is specified in the frmat \\admin-pc\c$\data: The specified user must have the lcal administratr permissin t the cnnected server. If the path is specified in the frmat \\admin-pc\shared flder: The specified user must have the Lg n as a batch jb permissin t the cnnected server, r the user must be the member f the Backup Operatrs grup f the cnnected server. The specified user must have the Read and Change permissins t the shared flder. Select Validatin Test t test if the entered infrmatin is crrect. Select a database frm the drp-dwn list under Please select a database t stre the results f scanning file system. After yu select a database, the database is assciated with the cnnectin, the infrmatin will be displayed under the Data Surce Cnfiguratin tab in Database Manager. Cmpliance Guardian Installatin and Administratin User Guide 161

162 Select if yu want t use the default agent. Select N under D yu want t limit the servers used by Cmpliance Guardian t scan t use the default agent t scan, select Yes, I need a new agent grup and then select an agent grup frm the drp-dwn list. 3. Select Save t save the settings, and then enter a name and an ptinal name fr the cnnectin in the appeared windw. Yu can select Cancel t return t the Cnnectin Manager interface withut any changes. Creating a Database Cnnectin Refer t the fllwing infrmatin t create a database cnnectin: 1. Select Create, and then select Database. 2. In the Create Database Cnnectin interface, cnfigure the fllwing settings: Type Select the database type fr the cnnectin. The fllwings are the Oracle database versins that are supprted scanning in Cmpliance Guardian: Oracle Database 9i Oracle Database 10g Oracle Database 11g Oracle Database 12c *Nte: If yu want t cnnect t the Oracle database, yu must first install the ODP.NET_Managed file n the machine where Cmpliance Guardian Agent resides. The fllwings are the SQL Server versins that are supprted scanning in Cmpliance Guardian: Micrsft SQL Server 2005 Micrsft SQL Server 2008 Micrsft SQL Server 2008 R2 Micrsft SQL Server 2012 Micrsft SQL Server 2012 R2 Micrsft SQL Server 2014 Database Server Enter the IP r hst name f the database server, r IP\Instance name. Database Name Enter the cnnected database name. Authenticatin Specify the authenticatin mde, database credentials and an ptinal failver database server fr cnnecting the database. 162 Cmpliance Guardian Installatin and Administratin User Guide

163 Select the Windws Authenticatin r SQL Authenticatin mde fr the database and specify the database credential fr the selected authenticatin mde. After this, yu can validate the specified accunt by selecting Validatin Test. Windws Authenticatin Use this methd if yu want the user s identity t be cnfirmed by Windws. SQL Authenticatin SQL Server will cnfirm the user s identity accrding t the user s accunt and passwrd. Failver database server Optinally select this checkbx and specify a failver database server. In the event that the specified database cllapses, the data stred in the database can be transferred t this standby database. Select a database frm the drp-dwn list under Please select a database t stre the results f scanning database. After yu select a database, the database is assciated with the cnnectin, the infrmatin will be displayed under the Data Surce Cnfiguratin tab in Database Manager. Select if yu want t use the default agent. Select N under D yu want t limit the servers used by Cmpliance Guardian t scan t use the default agent t scan, select Yes, I need a new agent grup and then select an agent grup frm the drp-dwn list. 3. Select Save t save the settings, and then enter a name and an ptinal name fr the cnnectin in the appeared windw. Yu can select Cancel t return t the Cnnectin Manager interface withut any changes. Creating a Yammer Cnnectin Refer t the fllwing infrmatin t create a Yammer cnnectin: 1. Select Create, and then select Yammer. 2. In the Create Yammer Cnnectin interface, cnfigure the fllwing settings: Client ID Enter the Client ID. Client Secret Enter Client Secret. Register an applicatin in Yammer t get the Client ID and Client Secret. *Nte: When yu register the applicatin in Yammer fr the Client ID and Client Secret, yu must enter the Cmpliance Guardian Manager URL as the Redirect URI. The frmat is: number/cntrlpanel/cnnectinmanager/scialcnnectin/cnnecttyammer. Fr example: ttyammer. Cmpliance Guardian Installatin and Administratin User Guide 163

164 The hstname in the URL must be same as the value entered in the Cntrl Service Hst field f the Cmmunicatin Cnfiguratin step when yu install Cmpliance Guardian Agent. Refer t Installing Cmpliance Guardian Agent. The letters cntained in the hstname must be lwercase. Cnnect t Yammer Select the Cnnect t Yammer link. The Yammer Lg In interface appears. Enter the admin accunt username and passwrd t lg int Yammer t get permissins t scan all Yammer messages and execute specific actins. If a user cnnects t multiple netwrks n Yammer, fr example the user is an admin in ne netwrk, but is als an external user f anther netwrk. In this case, all f the assciated netwrks will be laded. Yu must chse which netwrk yu want t register in Cmpliance Guardian Manager. After the cnnectin is saved, the selected netwrk cannt be changed. If yu want t cnnect t anther ne, yu must create a new cnnectin. Select a database frm the drp-dwn list under Please select a database t stre the results f scanning Yammer. After yu select a database, the database is assciated with the cnnectin, the infrmatin will be displayed under the Data Surce Cnfiguratin tab in Database Manager. Select if yu want t use the default agent. Select N under D yu want t limit the servers used by Cmpliance Guardian t scan t use the default agent t scan, select Yes, I need a new agent grup and then select an agent grup frm the drp-dwn list. 3. Select Save t save the settings, and then enter a name and an ptinal name fr the cnnectin in the appeared windw. Yu can select Cancel t return t the Cnnectin Manager interface withut any changes. Creating a Bx Cnnectin Prir t creating a Bx Cnnectin, yu must make sure that yu have created the Bx applicatin and enabled the related APIs. Refer t Appendix J: Preparing t Create Bx Cnnectins fr details abut creating a Bx Cnnectin and enabling the required Bx APIs. Refer t the fllwing infrmatin t create a Bx cnnectin: 1. Select Create, and then select Bx. 2. In the Create Bx Cnnectin interface, cnfigure the fllwing settings: Client ID Enter the Client ID. Client Secret Enter Client Secret. Cnnect t Bx Select the Cnnect t Bx link. The Bx Lg In interface appears. Enter the enterprise admin accunt username and passwrd t lg int Bx t get permissins t scan all Bx files and execute specific actins. 164 Cmpliance Guardian Installatin and Administratin User Guide

165 Select a database frm the drp-dwn list under Please select a database t stre the results f scanning Bx. After yu select a database, the database is assciated with the cnnectin, the infrmatin will be displayed under the Data Surce Cnfiguratin tab in Database Manager. Select if yu want t use the default agent. Select N under D yu want t limit the servers used by Cmpliance Guardian t scan t use the default agent t scan, r select Yes, I need a new agent grup and then select an agent grup frm the drp-dwn list. Select if yu want t receive an ntificatin when the Bx refresh tken expires. Select N under D yu want t receive a ntificatin when yur Bx s refresh tken expires t have n ntificatin, r select Yes, I need a ntificatin and then select a ntificatin prfile frm the drp-dwn list. 3. Select Save t save the settings, and then enter a name and an ptinal name fr the cnnectin in the appeared windw. Yu can select Cancel t return t the Cnnectin Manager interface withut any changes. Slutin Manager Slutin Manager prvides an interface fr yu t manage all f the Cmpliance Guardian slutins. T access Slutin Manager fr Cmpliance Guardian, g t the Cntrl Panel interface, and then select Slutin Manager under the Deplyment heading. Select Clse n the ribbn t clse the Slutin Manager interface. Managing Slutins Refer t the fllwing sectin fr viewing the infrmatin and perfrm peratins n slutins. Farm Selectin Select a farm frm the Farm drp-dwn menu, the fllwing infrmatin f the farm will be displayed in a table: Number f Frnt-end Web Servers and SharePint Central Administratin Servers Number f the servers which have the Micrsft SharePint Fundatin Web Applicatin service enabled. Number f Available Agents Number f the Cmpliance Guardian Agents. Deplyment Methd Currently the slutin can nly be lcally deplyed. In ther wrds, slutin files are deplyed nly t the Cmpliance Guardian Agent Server frm which the deplyment peratin was initiated. Viewing the Slutin's Infrmatin Yu can view the fllwing infrmatin f the slutins in the crrespnding table: Slutin Name f the Cmpliance Guardian slutin. Cmpliance Guardian Installatin and Administratin User Guide 165

166 Mdule Name f the mdule this slutin is intended fr. Language Language f the slutin. Versin Versin f the slutin. Status Deplyment status f the slutin file. N/A The slutin is nt installed. Nt Deplyed The slutin is installed but nt deplyed. Deplyed The slutin is deplyed t all f the Agent servers. Partially Deplyed The slutin is deplyed t sme f the Agent servers. Last Refreshed Time Last mdified time f the crrespnding slutin. Message Detailed infrmatin abut the slutin deplyment. Operatins n the Slutins Select a slutin frm the table by checking the crrespnding checkbx. Yu can perfrm the fllwing actins: Install Select Install n the ribbn t add a slutin package t the farm's slutin stre, which is in the farm's cnfiguratin database. Use this buttn when yu nly want t add the slutin t the specified farm and d nt want t deply it. Deply Select Deply n the ribbn t unpack the slutin package, and cpy its elements t their apprpriate places. This buttn can be used even when the slutin has nt been installed t the specified farm. In that case, the slutin will be installed t the specified farm first and then be deplyed. Retract Reverse the deplyment f the farm slutin's cmpnents. The slutin remains in the slutin stre and can be redeplyed later. Remve Deletes the slutin package frm the slutin stre. This buttn can be used even when the slutin has nt been retracted frm the specified farm. In that case, the slutin will be retracted frm the specified farm first and then remved. After a slutin is installed, t view infrmatin abut it, select the slutin by checking the crrespnding checkbx, and then select Slutin Prperties n the ribbn. Yu will be redirected t the Slutin Prperties page. By default, the Summary tab is pen, which shws an verall view f the specified slutin. Select the Details tab t view the slutin s deplyment status n each f the Web applicatins and ther detailed infrmatin. In the Details tab, yu can als select Web applicatins by checking the crrespnding checkbxes, and then select t Deply r Retract the slutin frm the selected Web applicatins. When yu are finished, select Cancel n the ribbn t return t the Slutin Manager interface. 166 Cmpliance Guardian Installatin and Administratin User Guide

167 Managing Slutins T keep yur Cmpliance Guardian slutins up t date, Slutin Manager prvides yu tls t check fr slutin versin, upgrade existing slutins, and repair deplyed slutins. T perfrm any f these actins, select the slutin by checking the crrespnding checkbx, then select: Retrieve Versin n the ribbn t retrieve versin infrmatin abut the selected slutins. The infrmatin displayed in the Versin, Status, and Message clumns will be refreshed. Upgrade n the ribbn t upgrade the selected slutin t the latest versin. A slutin can be upgraded if the slutin versin is lwer than the current agent versin. Repair n the ribbn t repair the selected slutin. Yu can repair a slutin if it des nt have the same versin as the current agent versin. Slutin Descriptin Refer t the fllwing descriptins t get an verall view f all f the Cmpliance Guardian slutins. SP2007QuarantineManager4.wsp/SP2010QuarantineManager4.wsp/SP2013QuarantineManager4.ws p This slutin is used fr the Real-Time Scanner and Scheduled Scanner. If yu deply this slutin, yu are able t use the Cmpliance Guardian Quarantine Manager in SharePint. SP2007InstallEventReceiver4.wsp/SP2010InstallEventReceiver4.wsp This slutin is nly used fr the Real-Time Scanner mdule. If yu deply this slutin, the Cmpliance Guardian Newly Created Sites Real-Time Scan feature will be enabled n the Web applicatin autmatically. The newly created site s crrespnding Cmpliance Guardian Real-Time Scan feature will als be enabled, and then the newly created site will apply its parent's Real-Time rule (if the parent has applied a rule). SP2010CustmUpladPage4.wsp/SP2013CustmUpladPage4.wsp This slutin is nly used fr the Real-Time Scanner mdule. It allws users t jump t the Cmpliance Guardian uplad page when uplading files t SharePint. YammerCnnectr4.wsp This slutin is used fr the Real-Time Scanner mdule. After enabling this feature, and cnfiguring related settings in Real-Time Scanner, Cmpliance Guardian will scan the cntent psted thrugh the SharePint Web part t Yammer. Allwed Lcatin Allwed Lcatin allws yu t cnfigure a destinatin lcatin where the scanned file is mved. T access the Allwed Lcatin settings fr Cmpliance Guardian in the Cntrl Panel interface, select Allwed Lcatin under the Deplyment heading. Cmpliance Guardian Installatin and Administratin User Guide 167

168 Cnfiguring Allwed Lcatin In Allwed Lcatin, yu can create a new allwed lcatin, edit an allwed lcatin, r view the infrmatin f the previusly cnfigured allwed lcatins. T create a new allwed lcatin, select a scpe (yu can cnfigure an allwed lcatin either in the site level r the list level). Select Cnfigure and the Cnfigure windw appears. Expand the farm tree r My Registered Sites and then select a library r flder where the file is mved. Then, select OK t save the settings. Yu can cnfigure t mve a file between sites in the same farm, mve a file frm a SharePint 2010 farm t anther SharePint 2010 farm, mve a file frm SharePint 2013 farm t anther SharePint 2013 farm, r mve a file between SharePint 2013 On-Premises and SharePint Online. Inheritance Status Fr site level, there are tw types f inheritance status: N/A and Nt Inherit. Fr list level, there are three types f inheritance status: N/A, Nt Inherit, and Inherit. 1. When there is n allwed lcatin cnfigured fr a site, the site inheritance status is N/A. The inheritance statuses f the lists that inherit the site are N/A; the inheritance statuses f the lists that d n inherit the site are Nt Inherit. 2. When there is an allwed lcatin that has been cnfigured fr the site, the site inheritance status is Nt Inherit. The inheritance statuses f the lists that inherit the site are Inherit; the inheritance statuses f the lists that d nt inherit the site are Nt Inherit. Inherit r Nt Inherit After cnfiguring an allwed lcatin in a site, the lists under this site autmatically inherit the destinatin flder that is cnfigured fr the site. If yu cnfigure an allwed lcatin in the lists that are under this site, these lists are regarded as stpping inheriting frm the site. If files are mved after scanning accrding t the actin plicy, the files in these lists will be mved t the list destinatin flders; the files in this site except this list will be mved t the site destinatin flder. If sme lists have cnfigured allwed lcatins, and the site des nt cnfigure ne. The files in these lists that are mved accrding t the actin plicy will be mved t the list destinatin flders; the files in the site but nt in these lists will nt be mved even if they shuld be. The files in sites r lists that d nt cnfigure allwed lcatins will nt be mved. Helpful Ntes Review the fllwing helpful ntes n cnfiguring the Allwed lcatin: 168 By default, the Allwed Lcatin cnfigured fr the site level is inherited by the list levels. Cmpliance Guardian Installatin and Administratin User Guide

169 Yu can cnfigure a new destinatin flder in the list level t break the inheritance frm the site level. Nt Inherit lgically separates the destinatin flder in the list level frm the site level. When cnfiguring destinatin flders fr the first time, yu can cnfigure destinatin flders directly at either the site level r the list level. After ne destinatin flder has been cnfigured fr a list level, yu can still cnfigure destinatin flders directly t the site levels. The inherited destinatin flder cannt be remved; it can nly be edited. The target library where the allwed lcatin is must cntain a cntent type that matches with the surce file s cntent type, and the matched cntent type must cntain all the surce s files clumns. Exprt Lcatin Exprt Lcatin allws yu t exprt SharePint data t a specified lcatin. T access the Exprt Lcatin settings fr Cmpliance Guardian in the Cntrl Panel interface, select Exprt Lcatin under the Deplyment heading. Select Clse n the ribbn t clse the Exprt Lcatin interface. Managing Exprt Lcatins In Exprt Lcatin, yu can create a new exprt lcatin, view details abut an exprt lcatin, edit a previusly cnfigured exprt lcatin, r delete an exprt lcatin. Fr mre infrmatin abut creating r editing an exprt lcatin, refer t Cnfiguring Exprt Lcatins. T view details abut an exprt lcatin, select it frm the list f previusly cnfigured exprt lcatins, then select View Details n the ribbn. Yu will see the settings fr this exprt lcatin. Select Edit n the ribbn t change the cnfiguratins fr this exprt lcatin. Fr mre infrmatin abut editing cnfiguratins fr an exprt lcatin, refer t Cnfiguring Exprt Lcatins. T delete an exprt lcatin frm Cmpliance Guardian, select it frm the list f previusly cnfigured exprt lcatins, and then select Delete n the ribbn. A cnfirmatin windw will appear and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected exprt lcatins, r select Cancel t return withut deleting it. Cnfiguring Exprt Lcatins T create a new exprt lcatin, select Create n the ribbn. T mdify a previusly cnfigured exprt lcatin, select the exprt lcatin, and then select Edit n the ribbn. In the Create Exprt Lcatin r Edit Exprt Lcatin interface, cnfigure the fllwing settings: 1. Name and Descriptin Enter a Name fr this exprt lcatin, and then enter an ptinal Descriptin fr future reference. Cmpliance Guardian Installatin and Administratin User Guide 169

170 2. Path The exprt lcatin can be a file share, strage area netwrk (SAN), r netwrk-attached strage (NAS). Enter the UNC Path in the fllwing frmat: \\admin-pc\c$\data r \\admin-pc\shared flder. *Nte: The path yu specified must already exist. Enter the Username and Passwrd in the crrespnding text bxes, and then select Validatin Test. Cmpliance Guardian will test the path and user infrmatin t make sure they are valid. 3. Select OK t save the cnfiguratins and return t the Exprt Lcatin interface, r select Back t return t the Exprt Lcatin interface withut saving any changes. Archive and Search Archive and Search in the Cntrl Panel f Cmpliance Guardian allws yu t view and manage the fllwing features: Archiving and Searching. Archiving Archiving allws yu t cnfigure an archiving plan that is used t archive the Lync cntent frm a Lync server. Yu can then scan that cntent in the Scheduled Scanner. T access Archiving fr Cmpliance Guardian in the Cntrl Panel interface, select Archiving under the Archive and Search heading. The created archiving plans are displayed in the Archiving interface. Yu can perfrm the fllwing actins t the plan: Create Create a new archiving plan. Fr detailed infrmatin n creating a plan, refer t Creating and Editing an Archiving Plan. View Details View detailed settings f the selected archiving plan. Edit Edit the settings f the selected archiving plan. Fr detailed infrmatin n editing a plan, refer t Creating and Editing an Archiving Plan. Delete Delete the selected archiving plans. Enable Enable the selected archiving plans. Disable Disable the selected archiving plans. Run Nw Run the selected archiving plans immediately. Yu can select Jb Mnitr n the ribbn t view the jb details. 170 Cmpliance Guardian Installatin and Administratin User Guide

171 Creating and Editing an Archiving Plan Refer t the fllwing steps t create r edit an archiving plan: 1. Select Create. T mdify an existing plan, select the plan, and then select Edit. 2. In the Select Scpe step, select the Lync server. Then expand the Lync server t the pl nde. Select a pl yu want t archive. Select Next. 3. In the Archiving Settings step, cnfigure the fllwing settings: Where d yu want t stre the archived data Select an exprt lcatin frm the drp-dwn list t stre the archived data. D yu want t build an index t search the archived data Select if yu want t enable full text index fr users searching the Lync cntent. If yu select Yes, users in fllwing grups can execute a search, then select grups frm the available drpdwn list. Once a grup is designated as the Search Grup, all f the users in the grup will be able t use the Search functin t search the desired archived cntent. *Nte: Users wh are nt part f the Search grup cannt search the archived cntent. Select Next. 4. In the Cnfigure General Settings step, select whether r nt t cnfigure a schedule fr the jb. If yu want t cnfigure a schedule, select Yes, I want t step up a schedule. Then select Add Schedule. The Add Schedule windw appears. Cnfigure the settings: Hw much cntent shuld be included in the scan Select t run a full scan r incremental scan: Full Scan Run a full scan f all f the dcuments and items in the specified scpe. Unlike incremental scan, all full scans are independent f ne anther and d nt have any dependencies n the ther s scan results. Hwever, because each f the full scans is cmprehensive, full scan jbs take the lngest t cmplete f the tw available ptins. Incremental Scan f nly bjects that have been updated since the last scan Run a fractinal scan. It scans nly the updated dcuments and items since the last successful full scan r incremental scan. This kind f scan requires less strage than a full scan and it reduces the executin time f the scan jb. Hwever, it is imprtant t nte that fr each incremental scan, the latest full scan jb in the full scan cycle must be available. If the incremental scan is based n a frmer incremental scan jb, the frmer incremental scan must als be available. If selecting Incremental Scan, select whether t scan cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Minutes, Hurs, Days, Mnths, r Weeks. Cmpliance Guardian Installatin and Administratin User Guide 171

172 Hw ften wuld yu like t check n this scpe Set up the frequency fr the scheduled Cmpliance Scanner jb. One Time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. The jb will be run accrding t the date time cnfigured here. Recurring Cnfigure the fllwing recurring settings. Interval Select ne time unit frm Minutes, Hurs, Days, Weeks, and Mnths, and then enter an integer int the Interval text bx. The scheduled Cmpliance Scanner jb will be run accrding t the interval cnfigured here. Start Time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. *Nte: The start time cannt be earlier than the current time. Then, cnfigure the End Time: N end date Select this ptin t repeat running the plan until being stpped manually. End after specified ccurrences Select this ptin t stp the plan autmatically after the specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f scheduled Cmpliance Scanner plans. Select Save t save the settings in the Add Schedule windw, r select Cancel t cancel changes. Yu can select t cnfigure the advanced settings by selecting Advanced Settings: D yu want t encrypt the archived data Select if yu want t encrypt the archived data. If yu want t encrypt the data, select Yes, and select a security prfile. Then, select a security prfile frm the drp-dwn list. Select New Security Prfile t create a new security prfile. D yu want t cmpress the archived data Select if yu want t cmpress the archived data. If yu want t cmpress the data, select Yes, I want t enable data cmpressin, then chse a cmpressin level using the slider. A lw cmpressin level results in a faster cmpressin rate but a larger data set, while a high cmpressin level results in a slwer cmpressin rate but a smaller, better quality data set. Hw lng d yu want t keep the archived data Define hw lng yu want t keep the data. Yu can keep the data permanently, r select I nly want t keep the latest archived data. Enter a number and select a unit t define the range in which the archived data will be kept. D yu want Cmpliance Guardian t send a ntificatin when it finishes a scan jb Select whether r nt t send a ntificatin when a scan jb finishes. If yu select Yes, I 172 Cmpliance Guardian Installatin and Administratin User Guide

173 need a ntificatin, then select a ntificatin prfile. Select New Ntificatin Prfile t create a new prfile. D yu want t limit the number f servers used t scan Select if yu want t use the default agent. Select N t use the default agent t scan, select Yes, I need a new agent grup and then select an agent grup frm the drp-dwn list. 5. Select Finish, and enter a plan name and ptinal descriptin in the appeared windw. Then, select Save in the windw; select Save and Run Nw t run the plan immediately. If yu edit a plan, select Save As t save the plan as anther ne. Select Back t return t the previus step, and select Cancel t cancel the plan creatin. Searching Searching allws yu t search Lync cntent archived in the archiving plans. T access Searching fr Cmpliance Guardian in the Cntrl Panel interface, select Searching under the Archive and Search heading. Refer t the fllwing steps t search the Lync cntent: 1. Select the archiving plans yu want t search in the left pane. 2. Enter the keywrd in the search bx f the right pane, and then select Search. 3. Yu can als use the Advanced search by selecting Advanced. The Cnfigure Advanced Search Settings windw appears. Select Add Criteria t add a new rule f the selected categry level. Cnfigure the rule, cnditin and then enter a value. The filter rule cntains the fllwing rule levels: Authr Filter accrding t the initiatr f the Lync cnversatin. If yu select Authr as the rule, after yu select the value link, a windw appears. Yu can add criterin t specify a rule, cnditin, and value t filter the desired users. Then, select Save t save yur cnfiguratin. Participant Filter accrding t the participants f the Lync cnversatin. If yu select Participants as the rule, after yu select the value link, a windw appears. Yu can add criterin t specify a rule, cnditin and value t filter the desired users. Then, select Save t save yur cnfiguratin. Subject Filter accrding t the subject f the Lync cnversatin. Start Time Filter accrding t the start time f the Lync cnversatin. End Time Filter accrding t the end time f the Lync cnversatin. Cnversatin Type Filter accrding t the Lync cnversatin type. Mde Filter accrding t the Lync cnversatin mde. Cmpliance Guardian Installatin and Administratin User Guide 173

174 Attachment Name Filter accrding t the name f the attachment sent in a Lync cnversatin. Attachment Size Filter accrding t the size f the attachment sent in a Lync cnversatin. Attachment Authr Filter accrding t the attachment authr. If yu select Attachment Authr as the rule, after yu select the value link, a windw appears. Yu can add criterin t specify a rule, cnditin and value t filter the desired users. Then, select Save t save yur cnfiguratin. Select Add Criteria again t add mre rules. Yu can select Add a Cnditin t add mre cnditins under a criterin. *Nte: Yu can change the lgical relatinships between the rules. There are currently tw lgical relatinships: And and Or. The lgic is set t And. T change the lgical relatinship, selecting the And/Or link. The And lgical relatinship means that the cntent which meets all f the rules will be filtered and included in the result. The Or lgic means that the cntent which meets any ne f the rules will be filtered and included in the result. Select Search in the Cnfigure Advanced Search Settings windw t search the desired Lync cntent. The results f the search will be displayed in the right pane f the Search interface. Select a cnversatin, and select View Details. The View Details windw appears. The cnversatin related infrmatin as well as the display name and the SIP address f the cnversatin will be displayed. Yu can exprt the cnversatin t an EDRM file, a Cncrdance file r an HTML file. Exprting Lync Data The Lync cntent that has been searched can be exprted t an EDRM file, a Cncrdance file, r an HTML file int anther lcatin. Fr mre infrmatin n cnfiguring the exprt lcatin, refer t Cnfiguring Exprt Settings. Refer t the fllwing steps t exprt the Lync data: 1. Select the searched Lync cnversatins that yu want t exprt, the Exprt buttn is enabled. 2. Select Exprt, and the Exprt windw appears. Select Exprt t EDRM, Exprt t Cncrdance, r Exprt t HTML, and enter a request name. Select OK. Fr mre infrmatin n the exprt requests, refer t Exprt Requests. Cnfiguring Exprt Settings Select Cnfigure Exprt Settings t cnfigure the lcatin. Select a lcatin and then select OK in the appeared windw. 174 Cmpliance Guardian Installatin and Administratin User Guide

175 Exprt Requests Select Exprt Requests n the ribbn. All f the exprt requests are displayed in the Exprt Requests windw. The fllwing infrmatin is displayed: Request ID The ID f the request. Request Name The name f yur reprt dwnlading request. Categry The type f exprted file. Prgress The prgress f the exprting prcess. Status The status f yur exprt request. Start Time The start time f the reprt exprting prcess. Finish Time The finish time f the reprt exprting prcess. The fllwing actins can be perfrmed in the Exprt Requests page: Dwnlad Select ne request, and then select Dwnlad t dwnlad the file. Delete Select ne r several requests, and then select Delete t delete the requests frm the requests list. Stp Select ne request, and then select Stp t stp the reprt generating prcess. Restart Select ne request, and then select Restart t restart the reprt generating prcess. Website Scanner Prfile Archive and Search in the Cntrl Panel f Cmpliance Guardian allws yu t view and manage the fllwing features: Authenticatin Prfile and User Agent Prfile. Cnfiguring Authenticatin Prfile An authenticatin prfile is used t cnnect t the website. T cnfigure authenticatin prfiles in the Cntrl Panel interface, select Authenticatin Prfile under the Website Scanner Prfile heading. Select Clse n the ribbn t clse the Authenticatin Prfile interface. Managing Authenticatin Prfile In the Authenticatin Prfile interface, yu will see a list f previusly cnfigured Authenticatin prfiles. Cmpliance Guardian Installatin and Administratin User Guide 175

176 In the Authenticatin Prfile interface, yu can create a new authenticatin prfile, view details abut an authenticatin prfile, edit a previusly cnfigured authenticatin prfile, r delete a previusly cnfigured authenticatin prfile. Fr mre infrmatin abut creating r editing an authenticatin prfile, refer t Creating and Editing Authenticatin Prfile. Select Edit n the ribbn t change the cnfiguratins fr the selected authenticatin prfile. Fr mre infrmatin abut editing cnfiguratins fr the authenticatin prfile, refer t Creating and Editing Authenticatin Prfile. T view an Authenticatin prfile, select it frm the list f previusly cnfigured prfiles, and then select View Details n the ribbn. T delete an authenticatin prfile, select it frm the list f previusly cnfigured prfiles, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected authenticatin prfile, r select Cancel t return withut deleting it. Creating and Editing Authenticatin Prfile T create a new authenticatin prfile, select Create in the Manage grup f the Authenticatin Prfile page. T mdify an authenticatin prfile, select the authenticatin prfile, and then select Edit n the ribbn. In the Create Authenticatin Prfile r Edit Authenticatin Prfile interface, cnfigure the fllwing settings: Name and Descriptin Enter a name and an ptinal descriptin fr the prfile. Authenticatin Methd Select an authenticatin methd: Username and Passwrd Only r Certificate. Username and Passwrd If this methd is selected, then select the accunt prfile t access the website. Cmpliance Guardian supprts Basic, Digest, NTLM, Negtiatin Authenticatins. *Nte: If yu cnfigure the authenticatin prfile fr scanning Gmail cntent, yu must select Username and Passwrd Only. Fr details abut creating a plan t scan Gmail cntent, refer t Scanning Gmail. Certificate If this methd is selected, uplad a certificate, and then enter the username and passwrd t access the website. Frm-based Authenticatin This methd is used fr scanning the website that can be lgged in after submitting the frm. Yu are required t enter the fllwing infrmatin after selecting Frm-Based Authenticatin: Lgin URL Enter the frm URL. Username Class r ID Enter the lgin username class r ID. Username Enter the lgin username. Passwrd Class r ID Enter the lgin passwrd class r ID. 176 Cmpliance Guardian Installatin and Administratin User Guide

177 Passwrd Enter the lgin passwrd. Lgin Buttn Class r ID Enter the lgin buttn class r ID. Select OK t save the cnfiguratins and return t the Authenticatin Prfile interface. At any time, select Cancel t return t the Authenticatin Prfile interface withut saving any changes. Cnfiguring User Agent Prfile A user agent prfile is used fr the backend web server when scanning the website. T cnfigure user agent prfiles in the Cntrl Panel interface, select User Agent Prfile under the Website Scanner Settings heading. Select Clse n the ribbn t clse the User Agent Prfile interface. Managing User Agent Prfile In the User Agent Prfile interface, yu will see a list f previusly cnfigured User Agent prfiles. In the User Agent Prfile interface, yu can create a new user agent prfile, view details abut a user agent prfile, edit a previusly cnfigured user agent prfile, r delete a previusly cnfigured user agent prfile. Fr mre infrmatin abut creating r editing a user agent prfile, refer t Creating and Editing User Agent Prfile. Select Edit n the ribbn t change the cnfiguratins fr the selected user agent prfile. Fr mre infrmatin abut editing cnfiguratins fr the user agent prfile, refer t Creating and Editing User Agent Prfile. T view a user agent prfile, select it frm the list f previusly cnfigured prfiles, and then select View Details n the ribbn. T delete a user agent prfile, select it frm the list f previusly cnfigured prfiles, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected user agent prfile, r select Cancel t return withut deleting it. Creating and Editing User Agent Prfile T create a new user agent prfile, select Create in the Manage grup f the User Agent Prfile page. T mdify a previusly cnfigured user agent prfile, select the user agent prfile, and then select Edit n the ribbn. In the Create User Agent Prfile r Edit User Agent Prfile interface, cnfigure the fllwing settings: Name and Descriptin Enter a name and an ptinal descriptin fr the prfile. User Agent String Specify the user agent string. Select OK t save the cnfiguratins and return t the User Agent Prfile interface. At any time, select Cancel t return t the User Agent Prfile interface withut saving any changes. Cmpliance Guardian Installatin and Administratin User Guide 177

178 Scanner Manager Cmpliance Scanner Manager enables yu t retrieve cmpliance infrmatin abut all data in the specified scpe thrugh perfrming Scanner jbs r in real time. It displays the scan results thrugh different kinds f Cmpliance Reprts s users can easily view the cmpliance status f the files in the specified scpes. Yu can cnfigure t perfrm the specified actins t the cntents scanned ut. *Nte: Cmpliance Guardian supprts scanning Micrsft Office files that are in a 2003 r earlier frmat using ifilter in this versin. If yu are using an earlier versin f Cmpliance Guardian r if yu updated t Cmpliance Guardian 3 SP 3 frm an earlier versin, yu must dwnlad a cmpatibility pack and dwnlad an update pack t scan the Micrsft Office files (can keep the file s accessibility attributes). If yu prefer t scan these files thrugh installing the cmpatibility pack but nt thrugh ifilter, yu can install Micrsft Office Cmpatibility Pack fr Wrd, Excel, and PwerPint File Frmats, and install Micrsft Office Cmpatibility Pack Service Pack 3 (SP3). Then, add the fllwing nde under the OfficeFileMapping nde in the cnfiguratin file CntentCmplianceCnfig.xml (yu can find the file under the path \Cmpliance Guardian 4\Agent\Bin): <NeedCnvert> <Extensin>.xls</Extensin> </NeedCnvert> Figure 11: NeedCnvert nde. The value in the Extensin attribute is the extensin f the file that yu want t scan thrugh the cmpatibility pack. 178 Cmpliance Guardian Installatin and Administratin User Guide

179 Launching Scanner Manager T launch Scanner Manager and access its functinality, cmplete the fllwing steps: 1. In the Hme interface f Cmpliance Guardian, yu can see the Scanner Manager field. Select the Manage Scheduled Scanner Plan r Manage Real-Time Scanner Rules link directly t launch the Scheduled Scanner r Real-Time Scanner interface directly. Yu can view the last updated three plans in this field. Figure 12: Launching Scanner Manager. 2. If yu are already in the sftware, select Scanner Manager n the tp f the screen. Overview There are tw tabs in the Scanner Manager interface: Scheduled Scanner Select this tab t create and manage scheduled scanner plans. Yu may perfrm any f the fllwing actins n a selected Scheduled Scanner plan: Rename Rename the plan name. A windw appears after yu select Rename. Enter a new name and ptinal descriptin in the windw. Cmpliance Guardian Installatin and Administratin User Guide 179

180 View Details Select View Details t see the details f the selected plan. Edit Select Edit t make changes t the selected plan s settings. Delete Delete the selected plan. A warning message will appear t cnfirm the deletin. Select OK t delete the selected plan, r select Cancel withut deleting the selected plan. Run Nw Select Run Nw t execute the plan immediately. After yu select Run Nw, a pp-up windw appears, yu can select t run a full jb r an incremental jb. If Incremental Scan is selected, select whether r nt t use a reference time. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Mnths, Days, Hurs, r Minutes frm the drp-dwn list. Yu can see the details abut the plan s executin in Jb Mnitr. Test Run Perfrm a test run fr the selected plan. Yu can select t run a full test run r an incremental test run. Real-Time Scanner Select this tab t create Real-Time scanner rules and manage the ndes that already have rules applied, but the nde that has an inherited rule is nt displayed in this field. Yu may perfrm any f the fllwing actins n a selected nde: View Details Select View Details t see details f the rule applied n the selected nde. Edit Select Edit t make changes t the rule applied n the selected nde. Delete Delete rules f the selected nde. Selecting Mde t Create a Plan r Rule Under the Scheduled Scanner r Real-Time Scanner tab, select Create. A drp-dwn list appears. Select the crrespnding mde frm the drp-dwn list: SharePint, File System, Lync, Website, Database, r Yammer, r Bx. Then, yu can g the crrespnding plan r rule creatin interface, and cnfigure a plan r rule t scan bjects in SharePint, file system, website, Lync, database, Yammer, r Bx. Scheduled Scanner Scheduled Scanner allws yu t scan cntent in SharePint, File System, Website, Database, Lync, Yammer, r Bx thrugh a scanner jb. 180 Cmpliance Guardian Installatin and Administratin User Guide

181 Cnfiguring a Scheduled Scanner fr SharePint Plan Under the Schedule Scanner tab f the Scanner Manager interface, select Create n the ribbn, a drpdwn list appears. Select SharePint frm the drp-dwn list, and yu will be redirected t the Create SharePint Plan interface. Cnfigure the fllwing settings: 1. In the Define Scpe step, select an ptin under Where shuld the scan be targeted: I m nt sure, I need t brwse the envirnment t lcate my data Select this ptin, then yu can select the SharePint farm t expand the tree. Select a nde where yu want t perfrm the scan jb n the tree. Cmpliance Guardian supprts scanning user prperties and scial ntes in user prfiles. Cmpliance Guardian accesses the user prfiles thrugh the persnal site. Select the related persnal site nde in the farm tree t scan user prperties in the crrespnding user prfile. Hwever, if the persnal site is nt created, yu cannt scan the crrespnding user prfile since there is n persnal site nde in the tree. Cmpliance Guardian Cmpliance Scanner prvides a methd t scan the user prfile when the persnal site is nt created. The User Prfile Services nde is laded n the farm tree by changing the UserPrfile Used="false" (change the value false t true) nde in the CmplianceSetting.cnfig file. Refer t Cnfiguring t Scan User Prfiles fr details, and then select the crrespnding User Prfile Service nde, and cnfigure the related plan settings t scan the user prperties and ntes. Select Next. I knw the file paths and want t specify the lcatins Select this ptin, and the text field appears. Select a farm after Farm n the tp f the field, then enter the scpe URL where yu want t perfrm the scan jb. Press Enter and then enter anther URL in a new line. Select Verify t test if the URL is crrect. 2. In the Cnfigure Scpe Settings step, select desired ptins in the fllwing questins t finish the settings: D yu want t scan versins Select N, nly scan the current and mst visible versin t nly scan the current versins; r yu can select Yes, scan all versins t scan all f the versins. If this ptin is selected, the scan result f each file/item versin will be reprted in the reprt separately. D yu want t specify a filter plicy t determine what cntent will be scanned Select N, scan everything in the scpe, then all f the cntent will be scanned; r yu can select anther ptin t use a filter plicy t define the desired cntent. The filter plicy drp-dwn list appears. By default, the default filter plicy is used, and all f the types f dcuments/items supprted by Cmpliance Guardian are included in this default filter plicy. If yu want t set up a new filter plicy, select the New Filter Plicy link in the drp-dwn list. Refer t Cnfiguring Filter Plicies fr mre infrmatin. Select Next. Cmpliance Guardian Installatin and Administratin User Guide 181

182 3. In the Cnfigure Scan Rule step, select if yu want t use test suites t scan files. If yu want t use the test suites, select Yes, I want t use test suites t examine the file cntents as well as attributes and select the test suites in the table. Yu can perfrm the fllwing actins in the test suite table: Select Next. Create Select Create t create a new test suite. The Create Test Suite interface appears. Fr mre infrmatin n creating test suites, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. View Descriptin Select n a test suite name, the descriptin is displayed in the Descriptin field f the right pane, displaying the checks the test suite includes. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the Page f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 4. In the Cnfigure Actin Rule step, select if yu want t take actins n the bjects when Cmpliance Guardian detects vilatins. If yu want t take actins t the bjects, select Yes, and I want Cmpliance Guardian t take actins autmatically when it detects vilatins and cnfigure the actins. Fr details n cnfiguring the actin rule, refer t Cnfiguring Actin Rule. *Nte: Yu must cnfigure at least the scan rule r actin rule fr the plan. Select Next. 5. In the Cnfigure General Settings step, select whether r nt t cnfigure a schedule fr the jb. If yu want t cnfigure a schedule, select Yes, I want t step up a schedule. Then select Add Schedule. The Add Schedule windw appears. Cnfigure the settings: 182 Hw much cntent shuld be included in the scan Select t run a full scan r incremental scan: Full Scan Run a full scan f all f the dcuments and items in the specified scpe. Unlike incremental scan, all full scans are independent f ne anther and d nt have any dependencies n the ther s scan results. Hwever, because each f the full scans is cmprehensive, full scan jbs take the lngest t cmplete f the tw available ptins. Incremental Scan f nly bjects that have been updated since the last scan Run a fractinal scan. It scans nly the updated dcuments and items since the last successful full scan r incremental scan. This kind f scan requires less strage than a full scan and it reduces the executin time f the scan jb. Hwever, it is imprtant t nte that fr each incremental scan, the latest full Cmpliance Guardian Installatin and Administratin User Guide

183 scan jb in the full scan cycle must be available. If the incremental scan is based n a frmer incremental scan jb, the frmer incremental scan must als be available. If Incremental Scan is selected, select whether r nt t use a reference time. If yu chse t use a reference time, specify the time t scan the cntents created r mdified. Enter an integer int the textbx and select Mnths, Days, Hurs, r Minutes frm the drp-dwn list. Hw ften wuld yu like t check n this scpe Set up the frequency fr the scheduled Cmpliance Scanner jb. One Time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. The jb will be run accrding t the date time cnfigured here. Recurring Cnfigure the fllwing recurring settings. Interval Select ne time unit frm Minutes, Hurs, Days, Weeks, and Mnths, and then enter a number int the Interval text bx. The scheduled Cmpliance Scanner jb will be run accrding t the interval cnfigured here. Start Time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. *Nte: The start time cannt be earlier than the current time. Then, cnfigure the End Time: N end date Select this ptin t repeat running the plan until being stpped manually. End after specified ccurrences Select this ptin t stp the plan autmatically after the specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f scheduled Cmpliance Scanner plans. Select Save t save the settings in the Add Schedule windw, r select Cancel t cancel changes. Yu can select t cnfigure the advanced settings by selecting Advanced Settings: D yu want t scan SharePint system cntent and/r user cntent Select t scan user cntent and/r system cntent. Scan user cntent Select this checkbx t nly the dcuments and items that are created by the end users will be scanned in the specified scpe. Scan system cntent Select this checkbx t scan the system built-in cntents in the specified scpe. Cmpliance Guardian Installatin and Administratin User Guide 183

184 D yu want Cmpliance Guardian t send a ntificatin when it finishes a scan jb Select whether r nt t send a ntificatin when a scan jb finishes. If yu select Yes, I need a ntificatin, then select a ntificatin prfile. Select New Ntificatin Prfile t create a new prfile. D yu want Cmpliance Guardian t send an when an errr ccurs during the file scan Specify whether t send ut an alert when an errr ccurs during the prcess f scanning a file. If yu chse Yes, and I want t specify the users wh will receive the , cnfigure the recipients by selecting the crrespnding checkbxes. Creatr template Select this checkbx t send an alert t the creatr f the specified file. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. Mdifier template Select this checkbx t send an alert t the last mdifier f the specified file. If this ptin is selected, yu must select an e- mail template frm the crrespnding drp-dwn list. User in the selected ntificatin file Select this checkbx t send an alert e- mail t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the appeared drp-dwn list. Yu can als select the New Ntificatin Prfile link t create a new ntificatin prfile. Then, select an template. D yu want t specify a separate agent grup fr Cmpliance Guardian t user fr the scan Select whether r nt t use a different agent grup fr the Cmpliance Scan frm the ne defined the Cnnectin prfile. If yu select Yes, and then select an agent grup yu want t use frm the drp-dwn menu. Select New Agent Grup t create a new agent grup. D yu want t filter user prfiles This ptin appears nly when yu select the User Prfile Service nde in the tree. Select Yes if yu want t filter the user prfiles. Select dwnlad a template t dwnlad the template file which is used fr filtering user prfiles. Edit the file accrding t yur wn requirement and then select Uplad t uplad the cnfigured file. Refer t Editing Template File fr Filtering User Prfiles fr details abut editing the template file. 6. Select Finish t finish the plan creatin. A windw appears. Enter the plan name and an ptinal descriptin, then select Save; yu can als select Save and Run Nw t run the plan immediately. At any step, select Back t return t the previus step, and select Cancel t cancel the plan creatin. After yu finish the plan creatin, the plan will be listed under the Scheduled Scanner tab in the Scanner Manager interface. Cnfiguring Actin Rule In the Rule field f the Cnfigure Actin Rule step, enter an ptinal rule descriptin. Then, Select an ptin under If the fllwing cnditins are met t specify if yu want t filter ut the desired cntent. 184 Cmpliance Guardian Installatin and Administratin User Guide

185 If yu select All f the files, then select Add an Actin and select an actin frm the drp-dwn list. The actin will be displayed under Actins. Then, select the Cnfigure buttn appeared after the added actin t cnfigure the settings fr the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. If yu select Specify cnditins, the scanned files will be filtered accrding t yur defined cnditins. The files that meet the cnditins will be affected by the actins. Then cnfigure the fllwing cnditins: 1. Select All/Any and True/False in If _ f these cnditins are _. All The files that meet all f the cnditins will be cnsidered True/False. Any The files that meet any f the cnditins will be cnsidered True/False. True The scanned files that meet the cnditins will be affected by the cnfigured actins. False The scanned files that d nt meet the cnditins will be affected by the cnfigured actins. 2. Select Add Cnditin, then cnfigure the settings: Select a File, Item r Summary Result frm the first link and then select the value frm the secnd link. File Based n the SharePint Dcument prperty value yu specified here t define the scpe in which the files that are nt cmpliant will be affected by the specified actins. Item Based n the SharePint item prperty value yu specified here t define the scpe in which the items will be affected by the specified actins. Summary Result If yu have selected a test suite that can generate a summary result, this ptin appears. This is based n the summary result that that the file returns. Select cnditins. Enter a value yu want the rule t use in the text bx. Repeat the step 2 t add mre cnditins. Select the delete ( ) buttn after a cnditin t delete a cnditin. 3. Yu can select Add Grup t add a cnditin grup. Then the files that first meet the cnditins yu cnfigured in step 2, and then meet the cnditins in the cnditin grup will be affected by actins. Repeat the step 3 t add mre cnditin grups. Select the delete ( ) buttn after a cnditin grup t delete a cnditin grup. Cmpliance Guardian Installatin and Administratin User Guide 185

186 4. After cnfiguring the cnditins, select Add an Actin and then select an actin frm the drpdwn list. The actin will be displayed under Actins. Then, select the Cnfigure ptin t cnfigure the settings fr the actin. Repeat step 4 t add multiple actins. The actins will then be added. Yu can change the rder f the actins cnfiguratin by selecting the text bx befre the actin t determine the pririty f the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. 5. After yu cnfigured the cnditins and actins abve, yu can select Else t define actins t the scanned files that d nt meet the cnditins cnfigured in step 2 and step 3. Refer t step 2 and step 3 fr details n hw t cnfiguring the cnditins and actins. 6. Select Add a Rule t add anther rule. Yu can select Exprt t XML File t exprt the actin rule related settings t an XML file fr yur further use; yu can select Imprt XML File t imprt the XML file. Scanner Actins Refer t the fllwing sectin fr details abut each scanner actin. Encrypt The files will be encrypted. After yu select Cnfigure after the Encrypt actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Select a security prfile _ t encrypt file Select a security prfile fr encrypting the files. Select New Security Prfile t create a new security prfile. Fr mre infrmatin, refer t Security Prfile. Encrypt with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. 186 Cmpliance Guardian Installatin and Administratin User Guide

187 When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has been affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has been affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter the user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Quarantine The files will be quarantined. After yu select Cnfigure after the Quarantine actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Select t quarantine the files in SharePint r t an exprt lcatin: The failed files will be quarantined in SharePint The files will be quarantined, but they are still in SharePint. The failed files will be quarantined t the exprt lcatin The files will be quarantined t the specified exprt lcatin. Select the Nne link t select an exprt lcatin frm the drp-dwn list. Yu can select New Exprt Lcatin t create a new ne. Quarantine with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Cmpliance Guardian Installatin and Administratin User Guide 187

188 template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has been affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has been affected by the actin. Users in the scpe mapping The incident will be assigned t the mdifier f the file that has been affected by the actin. Specify users/grups The incident will be assigned t the specified users. Enter the user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Redact Redact the files. After yu select Cnfigure after the Redact actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Select hw d yu want t deal with the fund cntent: Delete the failed cntent immediately Select this ptin, the failed cntent will be deleted directly. Replace the matching cntent Select this ptin, the failed cntent will be replaced with the value specified in the fllwing settings. Cnfigure the fllwing settings t designate the target cntent: 188 Cmpliance Guardian Installatin and Administratin User Guide

189 Please define keywrds. The cntent that Cntains/Equals the keywrds will be redacted Select Cntains r Equals in the sentence. Then, enter a keywrd and select if the cntent shuld be case sensitive. The cntent that cntains r equals t the entered keywrd will be fund. Yu can enter multiple keywrds, and use the cmma (,) as the separatr. Please define a regular expressin. The cntent that matches the regular expressins will be redacted Enter a regular expressin and select if the cntent shuld be case sensitive. The cntent that matches the regular expressin will be fund. Yu can enter multiple expressins, and use the cmma (,) as the separatr. Yu can select Filter ut the fllwing cntent t nt be redacted t cnfigure settings t filter ut the desired cntent frm the cntent that matches the abve regular expressin. The filtered ut cntent will nt be redacted. The cntent that Cntains/Equals the keywrd Select Cntains r Equals in the sentence. Then, enter a keywrd, and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin cntains r equals t the entered keywrd, it will be filtered ut and will nt be redacted. Yu can enter multiple keywrds, and use the cmma (,) as the separatr. The cntent that matches the regular expressin Enter a regular expressin and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin als matches the regular expressin here, it will be filtered ut and will nt be redacted. Yu can enter multiple expressins, and use the cmma (,) as the separatr. Cnfigure the value that is used t replace the fund cntent and cnfigure the related settings, these settings nly appear if yu select the Replace the matching cntent ptin. Select Sectin r Wrd in Please fill in a Sectin/Wrd used t replace the cntent fund abve t define t replace a wrd t a sectin: If Wrd is selected, enter a value used t replace the fund cntent. If Sectin is selected, enter a value used t replace the fund sectin. Then, enter numbers in The previus _ characters and fllwing _ characters arund the cntent abve will be redacted. The characters in the range f the specified number will als be redacted. Repeat the character s the redactin is the same length as the riginal value Select whether r nt t repeat the specified value t make sure the replaced result keeping the same length as the riginal cntent. Redact with alert Select this ptin t cnfigure alert settings: Cmpliance Guardian Installatin and Administratin User Guide 189

190 When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Quarantine Befre Redact The files will be encrypted. After yu select Cnfigure after the Quarantine Befre Redact actin, cnfigure the fllwing settings in the appeared Cnfigure interface: 190 Cmpliance Guardian Installatin and Administratin User Guide

191 Befre being redacted, the files will be quarantined t the exprt lcatin Select an exprt lcatin, then the files will be backed up and quarantined int the selected exprt lcatin befre the redactin. Select hw d yu want t deal with the fund cntent: Delete the failed cntent immediately Select this ptin, the fund cntent will be deleted directly. Replacing the matching cntent Select this ptin, the fund cntent will be replaced with the value specified in the fllwing settings. Cnfigure the fllwing settings t designate the target cntent: Please define keywrds. The cntent that Cntains/Equals the keywrds will be redacted Select Cntains r Equals in the sentence. Then, enter a keywrd and select if the cntent shuld be case sensitive. The cntent that cntains r equals t the entered keywrd will be fund. Yu can enter multiple keywrds, and use the cmma (,) as the separatr. Please define a regular expressin. The cntent that matches the regular expressins will be redacted Enter a regular expressin and select if the cntent shuld be case sensitive. The cntent that matches the regular expressin will be fund. Yu can enter multiple expressins, and use the cmma (,) as the separatr. Yu can select Filter ut the fllwing cntent t nt be redacted t cnfigure settings t filter ut the desired cntent frm the cntent that matches the abve regular expressin. The filtered ut cntent will nt be redacted. The cntent that Cntains/Equals the keywrds Select Cntains r Equals in the sentence. Then, enter a keywrd, and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin cntains r equals t the entered keywrd, it will be filtered ut and will nt be redacted. Yu can enter multiple keywrds, and use the cmma (,) as the separatr. The cntent that matches the regular expressins Enter a regular expressin and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin als matches the regular expressin here, it will be filtered ut and will nt be redacted. Yu can enter multiple expressins, and use the cmma (,) as the separatr. Cnfigure the value that is used t replace the fund cntent and cnfigure the related settings, these settings nly appear if yu select the Replacing the matching cntent ptin. Select Sectin r Wrd in Please fill in a Sectin/Wrd used t replace the cntent fund abve t define t replace a wrd t a sectin: If Wrd is selected, enter a value used t replace the fund cntent. Cmpliance Guardian Installatin and Administratin User Guide 191

192 If Sectin is selected, enter a value used t replace the fund sectin. Then, enter numbers in The previus _ characters and fllwing _ characters arund the fund cntent abve will als be redacted. The characters in the range f the specified number will als be redacted. Repeat the character s the redactin is the same length as the riginal value Select whether r nt t repeat the specified value t make sure the replaced result keeping the same length as the riginal cntent. Quarantine Befre Redact with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has been affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has been affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. 192 Cmpliance Guardian Installatin and Administratin User Guide

193 In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Mve The scanned files will be mved t the specified allwed lcatin that yu have already cnfigured. After yu select Cnfigure after the Mve actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Mve the failed files t the fllwing lcatin select the lcatin where the failed files will mve: Allwed lcatin Select Brwse t the Cntrl Panel > Allwed Lcatin page. Fr mre detailed infrmatin n hw t cnfigure the allwed lcatin, refer t Cnfiguring Allwed Lcatin. Enter the relative r full path f the library r flder Select the ptin buttn, and then enter the relative path r full path f a library r flder t mve the files within the same site. Yu can als enter a full path f a library r flder t mve the files t anther site in the same farm. If the files fails t mve Select hw t deal with the files if they fails t mve: Failed files will be quarantined in SharePint The failed files will be quarantined in SharePint. Failed files will be quarantined t the fllwing lcatin Select a lcatin. The failed files will be quarantined t the selected lcatin. Mve with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. Cmpliance Guardian Installatin and Administratin User Guide 193

194 When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has been affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has been affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. *Nte: Only the files in the dcument library can be mved. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Encrypt and Quarantine The files will be encrypted and then quarantined. After yu select Cnfigure after the Encrypt and Quarantine actin, cnfigure the fllwing settings in the Cnfigure interface: Select a security prfile _ t encrypt files Select a security prfile t encrypt the files. Select hw t deal with the failed files r items: Failed files will be quarantined in SharePint The failed files will be quarantined in SharePint. Failed files will be quarantined t the fllwing lcatin Select a lcatin. The failed files will be quarantined t the selected lcatin. Encrypt and Quarantine with alert Select this ptin t cnfigure alert settings: When the actin successfully t execute, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. 194 Cmpliance Guardian Installatin and Administratin User Guide

195 template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Change Permissin The permissins f the files will be changed based n yur settings. After yu select Cnfigure after the Change Permissin actin, cnfigure the fllwing settings in the Cnfigure interface: Change permissin f the files/items, t be shared nly with the grup Enter a SharePint grup, the files r files are nly shared t this grup s users. If the grup des nt exist in SharePint, Cmpliance Guardian will create this grup autmatically and grant the fllwing permissins t the grup users fr these files/items If the entered grup des nt exist, the grup will be created autmatically. Enter the grup permissins t grant t the created grup. Use the cmma (,) t separate each permissin. Cmpliance Guardian Installatin and Administratin User Guide 195

196 Change Permissin with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Delete The files will be deleted. After yu select Cnfigure after the Delete actin, cnfigure the fllwing settings in the Cnfigure interface: 196 Cmpliance Guardian Installatin and Administratin User Guide

197 Delete with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Lck The failed Newsfeed will be lcked. Users cannt reply t the lcked newsfeed. After yu select Cnfigure after the Lck actin, cnfigure the fllwing settings in the Cnfigure interface: Cmpliance Guardian Installatin and Administratin User Guide 197

198 Lck with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Ntificatin Only The files that meet the cnfigured cnditins can be recrded in an and sent t users, r in an incident and assigned t users. After yu select Cnfigure after the Ntificatin Only actin, cnfigure the fllwing settings in the Cnfigure interface: 198 Cmpliance Guardian Installatin and Administratin User Guide

199 Send an when the scanned cntent meets the specified cnditins Select this checkbx t send an ntificatin t the recipients when the scanned cntent meets the specified cnditins: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drp-dwn lists. Start an incident in Incident Manager when the scanned cntent meets the specified cnditins, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when the scanned cntent meets the specified cnditins. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Add Tag Cnfigure settings t add tags. After yu select Cnfigure after the Add Tag actin, cnfigure the fllwing settings in the Cnfigure interface: Add a _ tag in the _ Select the secnd link in the sentence t define the lcatin where the tag will be added. Cmpliance Guardian Installatin and Administratin User Guide 199

200 File Add the tag t the file nly. File and SharePint Add the tag t the file, and SharePint. SharePint Add the tag t SharePint nly. Select the first link the sentence t define the tag type: Static Select this type t specify a certain value that will be used as the tag value. Dynamic Select this type, and then specify a macr expressin t search the crrespnding value that will be used as the tag value. Then enter a tag name, and enter a tag value: If Static is selected as the type, specify the tag value. If Dynamic is selected as the type, enter a macr expressin t search the crrespnding prperties. The results will be added t the file and/r SharePint. The methd f using the macr expressin here are same as that f the macr expressin specified in the Surce nde f the Cntext check. Fr mre details, refer t Cnditin in the Cntext check sectin. Select Advanced if yu want t cnfigure the advanced settings: If yu select the Static tag type: If tag value already exists in target envirnment, what wuld yu like t d Select hw t deal with the cnditin that the tag value already exist in the destinatin: Overwrite the existing value The existing value will be replaced with the ne specified here. Skip and keep the existing value The existing value will be kept. If yu select the Dynamic tag type: If the dynamic value is nt fund, and the tag field already exists in target envirnment, what wuld yu like t d If the dynamic value is nt fund, but the value has already exists in the destinatin, select an ptin: Remve the existing tag field The existing tag value and tag field will be remved. Keep the existing tag field The existing tag value and tag field will be kept. If the tag value already exists in the target envirnment, what wuld yu like t d Select hw t deal with the cnditin that the tag value already exist in the destinatin: Overwrite the existing value The existing value will be replaced with the ne specified here. Skip and keep the existing value The existing value will be kept. 200 Cmpliance Guardian Installatin and Administratin User Guide

201 Add Tag with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that yu will be taking actin n. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has been affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has been affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter the user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Editing Template File fr Filtering User Prfiles The fllwing is the template file used fr filtering the user prfiles. Cmpliance Guardian Installatin and Administratin User Guide 201

202 Figure 13: Filtering user prfiles template file. T edit the template file, cmplete the fllwing steps: 1. Open the template file using Ntepad. 2. Edit bth f the fllwing ndes as necessary: 3. Save the file. Edit the value f the <includelist> nde. Specify the username in the frmat dmain\username. The related user prfile will be scanned. Yu can enter multiple usernames, use the semicln (;) as the separatr. Edit the value f the <excludelist> nde. Specify the username in the frmat dmain\username. The related user prfile will be scanned. Yu can enter multiple usernames, use the semicln (;) as the separatr. Using Cmpliance Guardian Quarantine Manager in SharePint Cmpliance Guardian Quarantine Manager allws yu t manage the quarantined files. Ensure that SP2007QuarantineManager4.wsp r SP2010QuarantineManager4.wsp r SP2013QuarantineManager4.wsp is deplyed befre using this feature. Fr mre infrmatin n deplying the slutin, refer t Slutin Manager. This feature is supprted in SharePint 2007, SharePint 2010 and SharePint T use this feature in SharePint 2007, cmplete the fllwing steps: 1. Navigate t the crrespnding SharePint site > Site Settings > Site features, activate the Cmpliance Guardian Quarantine Manager feature. 2. Return t the Site Settings, and then select Cmpliance Guardian 4 Quarantine Manager 2007 in the Cmpliance Guardian 4 Tls and Services grup. Yu will be brught t the Cmpliance Guardian Manager > Incident Manager interface. Then, yu can perfrm related actins in Incident Manager. Fr mre infrmatin, refer t the Cmpliance Guardian User Guide. T use this feature in SharePint 2010 r SharePint 2013, cmplete the fllwing steps: 1. Navigate t the crrespnding SharePint site cllectin > Site Settings > Manage site features, and activate the Cmpliance Guardian Quarantine Manager feature. 202 Cmpliance Guardian Installatin and Administratin User Guide

203 2. Return t the Site Settings, and then select Cmpliance Guardian 4 Quarantine Manager 2010/ Cmpliance Guardian 4 Quarantine Manager 2013 in the Cmpliance Guardian 4 Tls and Services grup. Yu will be brught t the Cmpliance Guardian Manager > Incident Manager interface. Then, yu can perfrm related actins in Incident Manager. Fr mre infrmatin, refer t the Cmpliance Guardian User Guide. Cnfiguring a Scheduled Scanner fr File System Plan On the Scanner Manager interface, select Create n the ribbn, a drp-dwn list appears. Select File System frm the drp-dwn list, and yu will be redirected t the Create File System Plan interface. Cnfigure the fllwing settings: 1. In the Select Scpe step, select an ptin under Where shuld the scan be targeted: Select Next. I want t find data thrugh cnnectins Select this ptin, then yu can select the file system cnnectins. Yu can als brwse a cnnectin t the desired flders. Select cnnectins r flders in the cnnectin as the scpe where the data will be scanned. Select Create File System Cnnectin t create a new cnnectin. Fr mre infrmatin n creating a file system cnnectin, refer t Creating a File System Cnnectin. I knw the file paths and want t specify the lcatins Select this ptin, and the text field appears. Enter the flder URL where yu want t perfrm the scan jb. Press Enter and then enter anther URL in a new line. Select Verify t test if the URL is crrect. 2. Cmplete the Cnfigure Scpe Settings: D yu want t scan hidden files in the file system Select whether r nt t scan hidden files in the file system. D yu want t specify a filter plicy t determine what cntent will be scanned Select N, scan everything in the scpe, then all f the cntent will be scanned; r yu can select anther ptin t use a filter plicy t define the desired cntent. The filter plicy drp-dwn list appears. By default, the default filter plicy is used, and all f the types f files supprted by Cmpliance Guardian are included in this default filter plicy. If yu want t set up a new filter plicy, select the New Filter Plicy link in the drpdwn list. Refer t Cnfiguring Filter Plicies fr mre infrmatin. Select Next. 3. In the Cnfigure Scan Rule step, select if yu want t use test suites t scan files. If yu want t use the test suites, select Yes, I want t use test suites t examine the file cntents as well as attributes and select the test suites in the table. Yu can perfrm the fllwing actins in the test suite table: Create Select Create t create a new test suite. The Create Test Suite interface appears. Fr mre infrmatin n creating a test suite, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. Cmpliance Guardian Installatin and Administratin User Guide 203

204 Select Next. View Descriptin Select a test suite name, the descriptin is displayed in the Descriptin field f the right pane, displaying the checks the test suite includes. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the Page f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 4. In the Cnfigure Actin Rule step, select if yu want t take actin n the bject when Cmpliance Guardian detects vilatins. If yu want t take actins t the bject, select Yes, and I want Cmpliance Guardian t take actins autmatically when it detects vilatins and cnfigure the actins. Fr details n cnfiguring actins, refer t Cnfiguring Actin Rule. *Nte: Yu must cnfigure at least the scan rule r actin rule fr the plan. Select Next. 5. In the Cnfigure General Settings step, select whether r nt t cnfigure a schedule fr the jb. If yu want t cnfigure a schedule, select Yes, I want t step up a schedule. Then select Add Schedule. The Add Schedule windw appears. Cnfigure the settings: Hw much cntent shuld be included in the scan Select t run a full scan r incremental scan: Full Scan Run a full scan f all f the dcuments and items in the specified scpe. Unlike incremental scan, all full scans are independent f ne anther and d nt have any dependencies n the ther s scan results. Hwever, because each f the full scans is cmprehensive, full scan jbs take the lngest t cmplete f the tw available ptins. Incremental Scan f nly bjects that have been updated since the last scan Run a fractinal scan. It scans nly the updated dcuments and items since the last successful full scan r incremental scan. This kind f scan requires less strage than a full scan and it reduces the executin time f the scan jb. Hwever, it is imprtant t nte that fr each incremental scan, the latest full scan jb in the full scan cycle must be available. If the incremental scan is based n a frmer incremental scan jb, the frmer incremental scan must als be available. If Incremental Scan is selected, select whether r nt t use a reference time. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Mnths, Days, Hurs, r Minutes frm the drp-dwn list. 204 Cmpliance Guardian Installatin and Administratin User Guide

205 Hw ften wuld yu like t check n this scpe Set up the frequency fr the scheduled Cmpliance Scanner jb. One Time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. The jb will be run accrding t the date time cnfigured here. Recurring Cnfigure the fllwing recurring settings. Interval Select ne time unit frm Minutes, Hurs, Days, Weeks, and Mnths, and then enter an integer int the Interval text bx. The scheduled Cmpliance Scanner jb will be run accrding t the interval cnfigured here. Start Time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. *Nte: The start time cannt be earlier than the current time. Then, cnfigure the End Time: N end date Select this ptin t repeat running the plan until being stpped manually. End after specified ccurrences Select this ptin t stp the plan autmatically after the specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f scheduled Cmpliance Scanner plans. Select Save t save the settings in the Add Schedule windw, r select Cancel t cancel changes. Yu can select t cnfigure the advanced settings by selecting Advanced Settings: D yu want Cmpliance Guardian t send an t specific users when an errr ccurs during the scan Specify whether t send ut an alert when an errr ccurs during the prcess f scanning a file. If yu chse t send ut alert s when an errr ccurs, select an alert prfile and an template. D yu want Cmpliance Guardian t send a ntificatin when it finishes a scan jb Select whether r nt t send a ntificatin when a scan jb finishes. If yu select Yes, I need a ntificatin, then select a ntificatin prfile. Select New Ntificatin Prfile t create a new prfile. 6. Select Finish t finish the plan creatin. A windw appears. Enter the plan name and an ptinal descriptin, then select Save; yu can als select Save and Run Nw t run the plan immediately. At any step, select Back t return t the previus step, and select Cancel t cancel the plan creatin. Cmpliance Guardian Installatin and Administratin User Guide 205

206 After yu finish the plan creatin, the plan will be listed under the Scheduled Scanner tab in the Scanner Manager interface. Cnfiguring Actin Rule In the Rule field f the Cnfigure Actin Rule step, enter an ptinal rule descriptin. Then, Select an ptin under If the fllwing cnditins are met t specify if yu want t filter ut the desired cntent. If yu select All f the files, then select Add an Actin and then select an actin frm the drp-dwn list. The actin will be displayed under Actins. Then, select the Cnfigure buttn appeared after the added actin t cnfigure the settings fr the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. If yu select Specify cnditins, the scanned files will be filtered accrding t yur defined cnditins. The files that meet the cnditins will be affected by the actins. Then cnfigure the fllwing cnditins: 1. Select All/Any and True/False in If _ f these cnditins are _. All The files that meet all f the cnditins will be cnsidered True/False. Any The files that meet any f the cnditins will be cnsidered True/False. True The scanned files that meet the cnditins will be affected by the cnfigured actins. False The scanned files that d nt meet the cnditins will be affected by the cnfigured actins. 2. Select Add Cnditin, then cnfigure the settings: Select a File r Summary Result frm the first link and then select the value frm the secnd link. File Based n the file prperty value yu specified here t define the scpe in which the files that are nt cmpliant will be affected by the specified actins. Summary Result If yu have selected a test suite that can generate a summary result, this ptin appears. This is based n the summary result that that the file returns. Select cnditins. Enter a value yu want the rule t use in the text bx. Repeat the step 2 t add mre cnditins. Select the delete ( ) buttn after a cnditin t delete a cnditin. 3. Yu can select Add Grup t add a cnditin grup. Then the files that first meet the cnditins yu cnfigured in step 2, and then meet the cnditins in the cnditin grup will be affected by actins. 206 Cmpliance Guardian Installatin and Administratin User Guide

207 Repeat the step 3 t add mre cnditin grups. Select the delete ( ) buttn after a cnditin grup t delete a cnditin grup. 4. After cnfiguring the cnditins, select Add an Actin and then select an actin frm the drpdwn list. The actin will be displayed under Actins. Then, select the Cnfigure buttn appeared after the added actin t cnfigure the settings fr the actin. Repeat step 4 t add multiple actins. The actins then will be added. Yu can change the rder f the actin cnfiguratin by selecting the textbx befre the added actin t determine the pririty f the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. 5. After yu cnfigured the cnditins and actins abve, yu can select Else t define actins t the scanned files that d nt meet the cnditins cnfigured in step 2 and step 3. Refer t step 2 and step 3 fr details n hw t cnfiguring the cnditins and actins. 6. Select Add a Rule t add anther rule. Yu can select Exprt t XML File t exprt the settings t an XML file; yu can als select Imprt XML File t imprt the XML file. Scanner Actins Refer t the fllwing sectin fr details abut each scanner actin. Encrypt The files will be encrypted. After yu select Cnfigure after the Encrypt actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Select a security prfile _ t encrypt file Select a security prfile fr encrypting the nn-cmpliant files r items. Select New Security Prfile t create a new security prfile. Fr mre infrmatin, refer t Security Prfile. Encrypt with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cmpliance Guardian Installatin and Administratin User Guide 207

208 Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Quarantine The files will be quarantined. After yu select Cnfigure after the Quarantine actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Select an exprt lcatin after The failed files will be quarantined t the exprt lcatin. The files will be quarantined int the selected lcatin. Select the Nne link t select an exprt lcatin frm the drp-dwn list. Yu can select New Exprt Lcatin t create a new ne. Quarantine with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. 208 Cmpliance Guardian Installatin and Administratin User Guide

209 In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Redact Redact the files. After yu select Cnfigure after the Redact actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Select hw d yu want t deal with the fund cntent: Delete the failed cntent immediately Select this ptin, the fund cntent will be deleted directly. Replace the matching cntent Select this ptin, the fund cntent will be replaced with the value specified in the fllwing settings. Cnfigure the fllwing settings t designate the target cntent: Please define keywrds. The cntent that Cntains/Equals the keywrds will be redacted Select Cntains r Equals in the sentence. Then, enter a keywrd and select if the cntent shuld be case sensitive. The cntent that cntains r equals t the entered keywrd will be fund. Yu can enter multiple keywrds, and use the cmma (,) as the separatr. Please define a regular expressin. The cntent that matches the regular expressins will be redacted Enter a regular expressin and select if the cntent shuld be case sensitive. The cntent that matches the regular expressin will be fund. Yu can enter multiple expressins, and use the cmma (,) as the separatr. Yu can select Filter ut the fllwing cntent t nt be redacted t cnfigure settings t filter ut the desired cntent frm the cntent that matches the abve regular expressin. The filtered ut cntent will nt be redacted. The cntent that Cntains/Equals the keywrds Select Cntains r Equals in the sentence. Then, enter a keywrd, and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin cntains r equals t the entered keywrd, it will be filtered ut and will nt be redacted. Yu can enter multiple keywrds, and use the cmma (,) as the separatr. The cntent that matches the regular expressins Enter a regular expressin and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin als matches the regular expressin here, it will be filtered ut and will nt be redacted. Yu can enter multiple expressins, and use the cmma (,) as the separatr. Cmpliance Guardian Installatin and Administratin User Guide 209

210 Cnfigure the value that is used t replace the fund cntent and cnfigure the related settings, these settings nly appear if yu select the Replace the matching cntent. Select Sectin r Wrd in Please fill in a Sectin/Wrd used t replace the cntent fund abve t define t replace a wrd t a sectin: If Wrd is selected, enter a value used t replace the fund cntent. If Sectin is selected, enter a value used t replace the fund sectin. Then, enter numbers in The previus _ characters and fllwing _ characters arund the fund cntent abve will be redacted. The characters in the range f the specified number will als be redacted. Repeat the character s the redactin is the same length as the riginal value Select whether r nt t repeat the specified value t make sure the replaced result keeping the same length as the riginal cntent. Redactin with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. 210 Cmpliance Guardian Installatin and Administratin User Guide

211 Quarantine Befre Redact The files will be encrypted. After yu select Cnfigure after the Quarantine Befre Redact actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Select an exprt lcatin after Befre being redacted, the files will be quarantined t the exprt lcatin. The files will be quarantined int the selected lcatin. Select the Nne link t select an exprt lcatin frm the drp-dwn list. Yu can select New Exprt Lcatin t create a new ne. Select hw d yu want t deal with the fund cntent: Delete the failed cntent immediately Select this ptin, the fund cntent will be deleted directly. Replace the matching cntent Select this ptin, the fund cntent will be replaced with the value specified in the fllwing settings. Cnfigure the fllwing settings t designate the target cntent: Please define keywrds. The cntent that Cntains/Equals the keywrds will be redacted Select Cntains r Equals in the sentence. Then, enter a keywrd and select if the cntent shuld be case sensitive. The cntent that cntains r equals t the entered keywrd will be fund. Yu can enter multiple keywrds, and use the cmma (,) as the separatr. Please define a regular expressin. The cntent that matches the regular expressins will be redacted Enter a regular expressin and select if the cntent shuld be case sensitive. The cntent that matches the regular expressin will be fund. Yu can enter multiple expressins, and use the cmma (,) as the separatr. Yu can select Filter ut the fllwing cntent t nt be redacted t cnfigure settings t filter ut the desired cntent frm the cntent that matches the abve regular expressin. The filtered ut cntent will nt be redacted. The cntent that Cntains/Equals the keywrds Select Cntains r Equals in the sentence. Then, enter a keywrd, and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin cntains r equals t the entered keywrd, it will be filtered ut and will nt be redacted. Yu can enter multiple keywrds, and use the cmma (,) as the separatr. The cntent that matches the regular expressins Enter a regular expressin and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin als matches the regular expressin here, it will be filtered ut and will nt be redacted. Yu can enter multiple expressins, and use the cmma (,) as the separatr. Cmpliance Guardian Installatin and Administratin User Guide 211

212 Cnfigure the value that is used t replace the fund cntent and cnfigure the related settings, these settings nly appear if yu select the Replacing the matching cntent ptin. Select Sectin r Wrd in Please fill in a Sectin/Wrd used t replace the cntent fund abve t define t replace a wrd t a sectin: If Wrd is selected, enter a value used t replace the fund cntent. If Sectin is selected, enter a value used t replace the fund sectin. Then, enter numbers in The previus _ characters and fllwing _ characters arund the fund cntent abve will be redacted. The characters in the range f the specified number will als be redacted. Repeat the character s the redactin is the same length as the riginal value Select whether r nt t repeat the specified value t make sure the replaced result keeping the same length as the riginal cntent. Quarantine Befre Redact with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. 212 Cmpliance Guardian Installatin and Administratin User Guide

213 Mve The scanned files will be mved t the specified lcatin. After yu select Cnfigure after the Mve actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Specify a lcatin where yu want t mve the failed files Enter the lcatin path in the frmat: \\admin-pc\c$\data r \\admin-pc\shared flder. If the path is specified in the frmat \\admin-pc\c$\data: The agent accunt must have the lcal administratr permissin t the server where the specified lcatin resides. If the path is specified in the frmat \\admin-pc\shared flder: The specified user must have the Lg n as a batch jb permissin t the server where the specified lcatin resides, r the user must be the member f the Backup Operatrs grup f the server where the specified lcatin resides. The specified user must have the Full Cntrl permissin t the shared flder. Mve with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list Select Save t save the settings in the windw, r select Cancel t cancel the changes. Cmpliance Guardian Installatin and Administratin User Guide 213

214 Encrypt and Quarantine The files will be encrypted and then quarantined. After yu select Cnfigure after the Encrypt and Quarantine actin, cnfigure the fllwing settings in the Cnfigure interface: Select a security prfile _ t encrypt files Select a security prfile t encrypt the files r items. Select hw t deal with the failed files r items: Failed files will be quarantined t the fllwing lcatin Select a lcatin. The failed files will be quarantined t the selected lcatin. Encrypt and Quarantine with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list Select Save t save the settings in the windw, r select Cancel t cancel the changes. Ntificatin Only The files that meet the cnfigured cnditins can be recrded in an and sent t users, r in an incident and assigned t users. After yu select Cnfigure after the Ntificatin Only actin, cnfigure the fllwing settings in the Cnfigure interface: Send an ntificatin when the scanned cntent meets the specified cnditins 214 Cmpliance Guardian Installatin and Administratin User Guide

215 Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the drp-dwn list, and select an template. Start an incident in Incident Manager when the scanned cntent meets the specified cnditins, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when the scanned cntent meets the specified cnditins. Then select the assignees. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Add Tag Cnfigure settings t add tags. After yu select Cnfigure after the Add Tag actin, cnfigure the fllwing settings in the Cnfigure interface: Add a _tag in the file Select the first link the sentence t define the tag type: Static Select this type t specify a certain value that will be used as the tag value. Dynamic Select this type, and then specify a macr expressin t search the crrespnding value that will be used as the tag value. Then enter a tag name, and enter a tag value: If Static is selected as the type, specify the tag value. If Dynamic is selected as the type, enter a macr expressin t search the crrespnding prperties. The results will be added t the file and/r SharePint. The methd f using the macr expressin here are same as that f the macr expressin specified in the Surce nde f the Cntext check. Fr mre details, refer t Cnditin in the Cntext check sectin. Select Advanced if yu want t cnfigure the advanced settings: If Static is selected as the tag type: If tag value already exists in the target envirnment, what wuld yu like t d Select hw t deal with the cnditin that the tag value already exist in the destinatin: Cmpliance Guardian Installatin and Administratin User Guide 215

216 Overwrite the existing value The existing value will be replaced with the ne specified here. Skip and keep the existing value The existing value will be kept. If Dynamic is selected as the tag type: If the dynamic value is nt fund, and the tag field already exists in target envirnment, what wuld yu like t d If the dynamic value is nt fund, but the value has already exists in the destinatin, select an ptin: Remve the existing tag field The existing tag value and tag field will be remved. Keep the existing tag field The existing tag value and tag field will be kept. If the tag value already exists in the target envirnment, what wuld yu like t d Select hw t deal with the cnditin that the tag value already exist in the destinatin: Overwrite the existing value The existing value will be replaced with the ne specified here. Skip and keep the existing value The existing value will be kept. Generate metadata index excel file after tagging file system cntent If yu select this ptin, after the actin finishes, an excel file with the added tag infrmatin is generated in the flder f the cnnected file system. Add Tag with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur 216 Cmpliance Guardian Installatin and Administratin User Guide

217 keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Cnfiguring a Scheduled Scanner fr Website Plan On the Scanner Manager interface, select Create n the ribbn, a drp-dwn list appears. Select Website frm the drp-dwn list, and yu will be brught t the Create Website Plan interface. Cnfigure the fllwing settings: 1. In the Select Scpe step, select an ptin under What d yu want t scan: Select Next. I want Cmpliance Guardian t scan the bjects frm this URL Enter a URL, Cmpliance Guardian will scan the bjects frm this URL. I want t imprt a transactin file, which includes all f the recrded URLs that need t be scanned Select t use the Cmpliance Guardian Transactin Capture tl t save a transactin file, and select the Brwse buttn in this interface t imprt a transactin file, then the recrded URLs in the transactin file will be the URLs that Cmpliance Guardian starts t scan. Fr mre infrmatin n the Cmpliance Guardian Transactin Capture tl, refer t Using Cmpliance Guardian Transactin Capture. 2. In the Cnfigure Scpe Settings step, select desired ptins in the fllwing questins and cnfigure settings: D yu want t specify a filter plicy t determine what cntent will be scanned Select whether r nt t use a defined filter plicy t limit the scpe f the scan jb. If yu want t use a filter plicy, select Yes, use the fllwing filter plicy t scan cntent. Then select a filter plicy. Yu can select New Filter Plicy t create a new ne. *Nte: The filter plicy still takes effect n scanning the recrded results in the transactin file. I want t specify the depth f sites t crawl Select t specify the depth level needed t crawl. Fr example: If yu enter 1, Cmpliance Guardian will nly crawl the start URL specified and scan the bjects in the URL. If yu enter 3, Cmpliance Guardian will crawl the start URL specified, the linked pages n the start URL page, and the linked pages frm the pages ne level deeper. D yu want t limit the number f pages that will be crawled Select if yu want t scan all pages. If yu select Yes, crawl _ pages in this jb, then specify the maximum pages allwed t crawl in a single jb. -1 means unlimited. If yu enter 100, Cmpliance Guardian will stp the jb after it scans 100 pages in the website. Cmpliance Guardian Installatin and Administratin User Guide 217

218 Select Next. *Nte: By default, the crawl mde is Depth First. If yu want t change the crawl mde, yu can g t the machines with Cmpliance Guardian Manager installed and pen the \Cmpliance Guardian 4\Manager\Cntrl\Cnfig directry t find the CmplianceSetting.cnfig file. In the cnfiguratin file, find the DepthFirst="true" nde. True means Depth First (scans child ndes frm the current nde first). False means Breadth First (scans sibling ndes frm the current nde, and the scan will nly cntinue t a lwer level after the scan finishes n all the pages f ne level). D yu want Cmpliance Guardian t allw crawling redirectins Select whether r nt t allw crawling redirectins. If yu want t allw crawling redirectins, select Yes, the maximum redirectins allwed fr ne page is _, and then enter the maximum redirectins allwed fr ne page. The default maximum allwed redirectins are In the Cnfigure Scan Rule step, select test suites used t scan files in the table. Yu can perfrm the fllwing actins in the test suite table: Select Next. Create Select Create t create a new test suite. Fr mre infrmatin n creating a test suite, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. View Descriptin Select n a test suite name, the descriptin is displayed in the Descriptin field f the right pane. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the G t f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 4. In the Cnfigure General Settings step, select whether r nt t cnfigure a schedule fr the jb. Cnfigure the settings: D yu want t change the default user agent prfile t scan these websites Select the user agent fr the backend web server when scanning the website. Select N t use the default user agent prfile; select Yes, I want t change the default user agent prfile and then select t use anther user agent prfile frm the drp-dwn list. D yu need an authenticatin prfile t cnnect t this website? (cmmnly used fr sites nt expsed t public netwrks) Select if yu want t use an authenticatin prfile used t cnnect t the website. If yu want t use the prfile, select Yes, I need an authenticatin prfile and then select a prfile frm the drp-dwn list. 218 Cmpliance Guardian Installatin and Administratin User Guide

219 D yu want t set up a schedule fr this plan Select whether r nt t cnfigure a schedule fr the jb. Fr mre infrmatin n cnfiguring a schedule, refer t step 5 in Cnfiguring a Scheduled Scanner fr SharePint Plan. Yu can select t cnfigure the advanced settings by selecting Advanced Settings: The maximum cncurrent threads per server during the scan Specify the maximum cncurrent threads that can be used during the crawling jb fr the scan. The default value is 3. Maximum allwable runtime fr entire scan jb Specify the maximum time f ne entire scan jb. The default value is 24 Hurs. Maximum respnse time befre skipping a link during a crawl Specify the maximum time f waiting fr a respnse frm a link befre skipping it during a crawl. The default value is 100 Secnds. D yu want Cmpliance Guardian t crawl links frbidden in Rbt.txt Select whether r nt t crawl any link that is frbidden t access in Rbt.txt. D yu want t crawl data laded dynamically using JavaScript Select whether r nt t crawl the data that was laded dynamically using JavaScript. If yu select Yes, then enter a value and select a unit fr Hw lng shuld the scan wait fr lading pages. D yu want t limit the number f servers used t scan Select if yu want t use the default agent. Select N t use the default agent t scan, select Yes, I need a new agent grup and then select an agent grup frm the drp-dwn list. D yu want Cmpliance Guardian t send a ntificatin when it finishes a scan jb Select whether r nt t send a ntificatin when a scan jb finishes. If yu select Yes, I need a ntificatin, then select a ntificatin prfile. Select New Ntificatin Prfile t create a new prfile. 5. Select Finish t finish the plan creatin. A windw appears. Enter the plan name and an ptinal descriptin, then select Save; yu can als select Save and Run Nw t run the plan immediately. At any step, select Back t return t the previus step, and select Cancel t cancel the plan creatin. After yu finish the plan creatin, the plan will be listed under the Scheduled Scanner tab in the Scanner Manager interface. Scanning Gmail Cmpliance Guardian supprts scanning the cntent in Gmail thrugh Cmpliance Guardian Scanner fr Website. Yu must cnfigure the fllwing settings fr creating a plan t scan the cntent in Gmail: Cmpliance Guardian Installatin and Administratin User Guide 219

220 I want Cmpliance Guardian t scan the bjects frm this URL Enter the fllwing URLs t scan the cntent in Gmail. Enter this URL t scan all f the e- mail cntent in Gmail. Enter this URL t scan all f the sent cntent in Gmail. Enter this URL t scan all f the cntent in Inbx f Gmail. Enter this URL t scan all f the drafts in Gmail. Enter this URL t scan all f the junk s in Gmail. Enter this URL t scan all f the deleted s in Gmail. D yu want t crawl all pages Specify the maximum numbers allwed t crawl in a single jb. -1 means unlimited. If yu enter 100, Cmpliance Guardian will stp the jb after it scans 100 s and the related index pages. In the Cnfigure Scan Rule step Select test suites. *Nte: The fllwing type f checks are nt supprted fr scanning Gmail: LinkValidatin FilePrperty FindFile Ckie SSL D yu want t change the default user agent prfile t scan these websites Select the saved user agent prfile t specify the user agent fr the backend web server when scanning Gmail cntent. Cmpliance Guardian recmmends yu t use the default user agent prfile. D yu want t crawl data laded dynamically using JavaScript Yu must select the Yes radi buttn t scan Gmail cntent. Fr ther settings in creating a plan, refer t Cnfiguring a Scheduled Scanner fr Website Plan. Cnfiguring a Scheduled Scanner fr Database Plan On the Scanner Manager interface, select Create n the ribbn, a drp-dwn list appears. Select Database frm the drp-dwn list, and yu will be redirected t the Create Database Plan interface. Cnfigure the fllwing settings: 220 Cmpliance Guardian Installatin and Administratin User Guide

221 1. In the Select Scpe step, select the database cnnectin, the tables in the cnnected database will be laded. Select the tables r select the database cnnectins, the cntent in the tables will be scanned. Select Create Database Cnnectin t create a new database cnnectin. Fr mre infrmatin n creating a cnnectin, refer t Creating a Database Cnnectin. Select Next. 2. In the Cnfigure Scpe Settings step, select if yu want t limit the number f table rws that will be scanned. If yu select Yes, crawl _ rws in each table, enter a number, and the specified number f rws in each table will be scanned. Select Next. 3. In the Cnfigure Scan Rule step, select test suites used t scan data. Yu can perfrm the fllwing actins in the test suite table: Select Next. Create Select Create t create a new test suite. Fr mre infrmatin n creating a test suite, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. View Descriptin Select n a test suite name, the descriptin is displayed in the Descriptin field f the right pane. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the G t f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 4. In the Cnfigure General Settings step, select desired ptins in the fllwing questins t finish the settings: D yu want t set up a schedule fr this plan Select if yu want t cnfigure a schedule fr the scan. Fr mre infrmatin n cnfiguring a schedule, refer t step 5 in Cnfiguring a Scheduled Scanner fr SharePint Plan. D yu want Cmpliance Guardian t send an t specific users when an errr ccurs during the scan Specify whether t send ut an alert when an errr ccurs during the scan. If yu chse t send ut alert s when an errr ccurs, select an alert prfile and an template. D yu want Cmpliance Guardian t send a ntificatin when it finishes a scan jb Select whether r nt t send a ntificatin when a scan jb finishes. If yu select Yes, I need a ntificatin, then select a ntificatin prfile. Select New Ntificatin Prfile t create a new prfile. 5. Select Finish t finish the plan creatin. A windw appears. Enter the plan name and an ptinal descriptin, then select Save; yu can als select Save and Run Nw t run the plan immediately. Cmpliance Guardian Installatin and Administratin User Guide 221

222 At any step, select Back t return t the previus step, and select Cancel t cancel the plan creatin. After yu finish the plan creatin, the plan will be listed under the Scheduled Scanner tab in the Scanner Manager interface. Cnfiguring a Scheduled Scanner fr Lync Plan On the Scanner Manager interface, select Create n the ribbn, a drp-dwn list appears. Select Lync frm the drp-dwn list, and yu will be brught t the Create Lync Plan interface. Cnfigure the fllwing settings: 1. In the Select Scpe step, select an archiving plan t scan the archived Lync data. Select Create Archiving Plan t create a new archiving plan. Fr mre infrmatin n creating an archiving plan, refer t Creating and Editing an Archiving Plan. Select Next. 2. In the Cnfigure Scpe Settings step, select if yu want t scan all data in the scpe. Select N, scan everything in the scpe, then all f the cntent will be scanned; r yu can select anther ptin t use a filter plicy t define the desired cntent. The filter plicy drp-dwn list appears. Select a filter plicy frm the drp-dwn list. If yu want t set up a new filter plicy, select the New Filter Plicy link in the drp-dwn list. Refer t Cnfiguring Filter Plicies fr mre infrmatin. Select Next. 3. In the Cnfigure Scan Rule step, select test suites used t scan data in the table. Yu can perfrm the fllwing actins in the test suite table: Select Next. Create Select Create t create a new test suite. Fr mre infrmatin n creating a test suite, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. View Descriptin Select n a test suite name, the descriptin is displayed in the Descriptin field f the right pane. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the G t f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 4. In the Cnfigure General Settings step, select desired ptins in the fllwing questins t finish the settings: 222 Cmpliance Guardian Installatin and Administratin User Guide

223 D yu want t set up a schedule fr this plan Select if yu want t cnfigure a schedule fr the scan. Fr mre infrmatin n cnfiguring a schedule, refer t step 5 in Cnfiguring a Scheduled Scanner fr SharePint Plan. D yu want Cmpliance Guardian t send an t specific users when an errr ccurs during the scan Specify whether t send ut an alert when an errr ccurs during the scan. If yu chse t send ut alert s when an errr ccurs, select an alert prfile and an template D yu want Cmpliance Guardian t send a ntificatin when it finishes a scan jb Select whether r nt t send a ntificatin when a scan jb finishes. If yu select Yes, I need a ntificatin, then select a ntificatin prfile. Select New Ntificatin Prfile t create a new prfile. D yu want t limit the number f servers used t scan Select if yu want t use the default agent. Select N t use the default agent t scan, select Yes, I need a new agent grup and then select an agent grup frm the drp-dwn list. 5. Select Finish t finish the plan creatin. A windw appears. Enter the plan name and an ptinal descriptin, then select Save; yu can als select Save and Run Nw t run the plan immediately. At any step, select Back t return t the previus step, and select Cancel t cancel the plan creatin. After yu finish the plan creatin, the plan will be listed under the Scheduled Scanner tab in the Scanner Manager interface. Cnfiguring a Scheduled Scanner fr Yammer Plan On the Scanner Manager interface, select Create n the ribbn, a drp-dwn list appears. Select Yammer frm the drp-dwn list, and yu will be brught t the Create Yammer Plan interface. Cnfigure the fllwing settings: 1. In the Select Scpe step, select a Yammer cnnectin t scan cntent in Yammer. Select Create Yammer Cnnectin t create a new Yammer cnnectin. Fr mre infrmatin n creating a cnnectin, refer t Creating a Yammer Cnnectin. Select Next. 2. In the Cnfigure Scpe Settings step, select desired ptins in the fllwing questins t finish the settings: D yu want t scan file/nte versins Select t scan the current versin r all f the versins f the file r nte. D yu want t scan cntent psted by specific users Select if yu want t scan cntent psted by specific users. Scan all psts Select this ptin t scan all psts. Cmpliance Guardian Installatin and Administratin User Guide 223

224 Imprt file with specific users Select this ptin t imprt a file alng with the added users. Yu can select Dwnlad Template, and save the template file. Edit the template file t add the users and then select Imprt t imprt the file. Specify users whse psts will be scanned Enter the users in the text field, and then select Check Users t check if the entered users are crrect. Use the semicln (;) as the separatr if yu entered multiple users. Yu can als select Advanced Search t find the desired users. The Advanced Search windw appears. Enter a keywrd in the search bx, the names and e- mail address f the related users wh are assciated with the netwrk are displayed in the table. Yu can als select the Advanced buttn t filter the results by user r grup. Select All r Any in If _ f these cnditins are matched. If yu select All The psts f the grups r users wh are matched all f the cnfigured cnditins can be scanned. If yu select Any The psts f the grups r users wh are matched any f the cnfigured cnditins can be scanned. Select Add Cnditin. Select Grup Name r Username, and select Cntains r Equals. Then, add a value in the Enter a value field. T add mre cnditins, select Add Cnditin again. Select the delete ( ) buttn t delete a cnditin. Select Add Grup t add mre cnditin grups. After cnfiguring the filter rules, select Search t search fr the related users. The searched ut users r the users in the searched ut grup are displayed in the table. Select the user checkbxes and then select the Add buttn. The selected user will be added int the text field under Specify users whse psts will be scanned. Specify criteria t filter desired users whse psts will be scanned Cnfigure the criteria t filter the desired users. Select All r Any in If _ f these cnditins are matched. If yu select All The psts f the grups r users wh are matched all f the cnfigured cnditins can be scanned. If yu select Any The psts f the grups r users wh are matched any f the cnfigured cnditins can be scanned. 224 Cmpliance Guardian Installatin and Administratin User Guide

225 Select Add Cnditin. Select Grup Name r Username, and select Cntains r Equals. Then, add a value in the Enter a value field. T add mre cnditins, select Add Cnditin again. Select the delete ( ) buttn t delete a cnditin. Select Next. 3. In the Cnfigure Scan Rule step, select if yu want t use test suites t scan files. If yu want t use the test suites, select Yes, I want t use test suites t examine the file cntents as well as attributes and select the test suites in the table. Yu can perfrm the fllwing actins in the test suite table: Select Next. Create Select Create t create a new test suite. Fr mre infrmatin n creating a test suite, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. View Descriptin Select n a test suite name, the descriptin is displayed in the Descriptin field f the right pane. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the G t f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 4. In the Cnfigure Actin Rule step, select if yu want t take actin n the bject when Cmpliance Guardian detects vilatins. If yu want t take actins t the bject, select Yes, and I want Cmpliance Guardian t take actins autmatically when it detects vilatins and cnfigure the actins. Fr details n cnfiguring actins, refer t Cnfiguring Actin Rule. *Nte: Yu must cnfigure at least the scan rule r actin rule fr the plan. Select Next. 5. In the Cnfigure General Settings step, select if yu want t cnfigure a schedule fr the scan. Fr mre infrmatin n cnfiguring a schedule, refer t step 5 in Cnfiguring a Scheduled Scanner fr SharePint Plan. Yu can select t cnfigure the advanced settings by selecting Advanced Settings: D yu want Cmpliance Guardian t send an t specific users when an errr ccurs during the scan Specify whether t send ut an alert when an errr Cmpliance Guardian Installatin and Administratin User Guide 225

226 ccurs during the scan. If yu chse t send ut alert s when an errr ccurs, select an alert prfile and an template. D yu want Cmpliance Guardian t send a ntificatin when it finishes a scan jb Select whether r nt t send a ntificatin when a scan jb finishes. If yu select Yes, I need a ntificatin, then select a ntificatin prfile. Select New Ntificatin Prfile t create a new prfile. D yu want t specify a separate agent grup fr Cmpliance Guardian t use fr the scan Select whether r nt t use a different agent grup fr Cmpliance Scan frm the ne defined the Cnnectin prfile. If yu select Yes, and then select an agent grup yu want t use frm the drp-dwn menu. Select New Agent Grup t create a new agent grup. 6. Select Finish t finish the plan creatin. A windw appears. Enter the plan name and an ptinal descriptin, then select Save; yu can als select Save and Run Nw t run the plan immediately. At any step, select Back t return t the previus step, and select Cancel t cancel the plan creatin. After yu finish the plan creatin, the plan will be listed under the Scheduled Scanner tab in the Scanner Manager interface. Cnfiguring Actin Rule In the Rule field f the Cnfigure Actin Rule step, enter an ptinal rule descriptin. Then, Select an ptin under If the fllwing cnditins are met t specify if yu want t filter ut the desired cntent. If yu select All f the files, then select Add an Actin and then select an actin frm the drp-dwn list. The actin will be displayed under Actins. Select the Cnfigure buttn appeared after the added actin t cnfigure the settings fr the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. If yu select Specify cnditins, the scanned files will be filtered accrding t yur defined cnditins. The files that meet the cnditins will be affected by the actins. Then cnfigure the fllwing cnditins: 1. Select All/Any and True/False in If _ f these cnditins are _. All The files that meet all f the cnditins will be cnsidered True/False. Any The files that meet any f the cnditins will be cnsidered True/False. True The scanned files that meet the cnditins will be affected by the cnfigured actins. False The scanned files that d nt meet the cnditins will be affected by the cnfigured actins. 2. Select Add Cnditin, then cnfigure the settings: 226 Cmpliance Guardian Installatin and Administratin User Guide

227 Select Message r Summary Result frm the first link and then select the value frm the secnd link. Message Based n the message infrmatin yu specified here t define the scpe in which the files that are nt cmpliant will be affected by the specified actins. Summary Result If yu have selected a test suite that can generate a summary result, this ptin appears. This is based n the summary result that that the file returns. Select cnditins. Enter a value yu want the rule t use in the text bx. Repeat the step 2 t add mre cnditins. Select the delete ( ) buttn after a cnditin t delete a cnditin. 3. Yu can select Add Grup t add a cnditin grup. Then the files that first meet the cnditins yu cnfigured in step 2, and then meet the cnditins in the cnditin grup will be affected by actins. Repeat the step 3 t add mre cnditin grups. Select the delete ( ) buttn after a cnditin grup t delete a cnditin grup. 4. After cnfiguring the cnditins, select Add an Actin and then select an actin frm the drpdwn list. The actin will be displayed under Actins. Select the Cnfigure buttn appeared after the added actin t cnfigure the settings fr the actin. Repeat step 4 t add multiple actins. The actins then will be added. Yu can change the rder f the actin cnfiguratin by selecting the textbx befre the added actin t determine the pririty f the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. 5. After yu cnfigured the cnditins and actins abve, yu can select Else t define actins t the scanned files that d nt meet the cnditins cnfigured in step 2 and step 3. Refer t step 2 and step 3 fr details n hw t cnfiguring the cnditins and actins. 6. Select Add a Rule t add anther rule. Yu can select Exprt t XML File t exprt the settings t an XML file; yu can als select Imprt XML File t imprt the XML file. Scanner Actins Refer t the fllwing sectin fr details abut each scanner actin. Delete The psts that meet the cnditin will be deleted. After yu select Cnfigure after the Delete actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Cmpliance Guardian Installatin and Administratin User Guide 227

228 The cntent will be stred in the selected lcatin befre being deleted select a lcatin t stre the cntent that will be deleted. Delete with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Users in the scpe mapping _ The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. Select In the mean time, alert them with the template ptin, the alert will be sent t these users t send alert t these users. Then, select a template by selecting the Nne link. Select New Template t create a new template. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Ntificatin Only The psts that meet the cnfigured cnditins can be recrded in an and sent t users, r in an incident and assigned t users. After yu select Cnfigure after the Ntificatin Only actin, cnfigure the fllwing settings in the Cnfigure interface: Send an ntificatin when the scanned cntent meets the specified cnditins User in the selected ntificatin prfile Select this checkbx t send an alert t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile and template. Start an incident in Incident Manager when the scanned cntent meets the specified cnditins, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when the scanned cntent meets the specified cnditins. Then select the assignees. 228 Cmpliance Guardian Installatin and Administratin User Guide

229 Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. Select In the mean time, alert them with the template ptin, the alert will be sent t these users t send alert t these users. Then, select a template by selecting the Nne link. Select New Template t create a new template. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Add Tag Cnfigure settings t add tags. After yu select Cnfigure after the Add Tag actin, cnfigure the fllwing settings in the Cnfigure interface: Add a _tag in the file Select the first link the sentence t define the tag type: Static Select this type t specify a certain value that will be used as the tag value. Dynamic Select this type, and then specify a macr expressin t search the crrespnding value that will be used as the tag value. Then enter a tag name, and enter a tag value: If Static is selected as the type, specify the tag value. If Dynamic is selected as the type, enter a macr expressin t search the crrespnding prperties. The results will be added t the file and/r SharePint. The methd f using the macr expressin here are same as that f the macr expressin specified in the Surce nde f the Cntext check. Fr mre details, refer t Cnditin in the Cntext check sectin. Select Advanced if yu want t cnfigure the advanced settings: If Static is selected as the tag type: If the tag value already exists in the target envirnment, what wuld yu like t d Select hw t deal with the cnditin that the tag value already exist in the destinatin: Overwrite the existing value The existing value will be replaced with the ne specified here. Skip and keep the existing value The existing value will be kept. If Dynamic is selected as the tag type: Cmpliance Guardian Installatin and Administratin User Guide 229

230 If the dynamic value is nt fund, and the tag field already exists in target envirnment, what wuld yu like t d If the dynamic value is nt fund, but the value has already exists in the destinatin, select an ptin: Remve the existing tag field The existing tag value and tag field will be remved. Keep the existing tag field The existing tag value and tag field will be kept. If the tag value already exists in the target envirnment, what wuld yu like t d Select hw t deal with the cnditin that the tag value already exist in the destinatin: Overwrite the existing value The existing value will be replaced with the ne specified here. Skip and keep the existing value The existing value will be kept. Add Tag with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. Select In the mean time, alert them with the template ptin, the alert will be sent t these users t send alert t these users. Then, select a template by selecting the Nne link. Select New Template t create a new template. Select Save t save the settings in the windw, r select Cancel t cancel the changes. 230 Cmpliance Guardian Installatin and Administratin User Guide

231 Cnfiguring a Scheduled Scanner fr Bx Plan On the Scanner Manager interface, select Create n the ribbn, a drp-dwn list appears. Select Bx frm the drp-dwn list, and yu will be brught t the Create Bx Plan interface. Cnfigure the fllwing settings: 1. In the Select Scpe step, select a Bx cnnectin t scan cntent in Bx. Select Create Bx Cnnectin t create a new Bx cnnectin. Fr mre infrmatin n creating a cnnectin, refer t Creating a Bx Cnnectin. Select Next. 2. Cmplete the Cnfigure Scpe Settings: D yu want t scan all file versins in the Bx? Select N, nly scan the current file versin, then nly the current versin f files in Bx will be scanned. Or select Yes, scan all file versins, then all f the file versins in Bx will be scanned. D yu want t scan cntent managed by specific users? Select if yu want t scan cntent managed by specific users. Scan cntent fr all users Select this ptin t scan all cntent. Imprt file with specific users whse cntent will be scanned Select this ptin t imprt a file alng with the added users. Yu can select Dwnlad Template, and save the template file. Edit the template file t add the users and then select Imprt t imprt the file. Specify users whse cntent will be scanned Enter the usernames r grup names r addresses in the text field. Use the semicln (;) as the separatr if yu entered multiple users. D yu want t specify a filter plicy t determine what cntent will be scanned? Select N, scan everything in the scpe, then all f the cntent will be scanned; r yu can select anther ptin t use a filter plicy t define the desired cntent. The filter plicy drp-dwn list appears. By default, the default filter plicy is used, and all f the types f files supprted by Cmpliance Guardian are included in this default filter plicy. If yu want t set up a new filter plicy, select the New Filter Plicy link in the drpdwn list. Refer t Cnfiguring Filter Plicies fr mre infrmatin. Select Next. 3. In the Cnfigure Scan Rule step, select if yu want t use test suites t scan files. If yu want t use the test suites, select Yes, I want t use test suites t examine the file cntents as well as attributes and select the test suites in the table. Yu can perfrm the fllwing actins in the test suite table: Create Select Create t create a new test suite. The Create Test Suite interface appears. Fr mre infrmatin n creating a test suite, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. Cmpliance Guardian Installatin and Administratin User Guide 231

232 Select Next. View Descriptin Select a test suite name, the descriptin is displayed in the Descriptin field f the right pane, displaying the checks the test suite includes. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the Page f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 4. In the Cnfigure Actin Rule step, select if yu want t take actin n the bject when Cmpliance Guardian detects vilatins. If yu want t take actins t the bject, select Yes, and I want Cmpliance Guardian t take actins autmatically when it detects vilatins and cnfigure the actins. Fr details n cnfiguring actins, refer t Cnfiguring Actin Rule. *Nte: Yu must cnfigure at least the scan rule r actin rule fr the plan. Select Next. 5. In the Cnfigure General Settings step, select whether r nt t cnfigure a schedule fr the jb. If yu want t cnfigure a schedule, select Yes, I want t step up a schedule. Then select Add Schedule. The Add Schedule windw appears. Cnfigure the settings: Hw much cntent shuld be included in the scan Select t run a full scan r incremental scan: Full Scan Run a full scan f all f the dcuments and items in the specified scpe. Unlike incremental scan, all full scans are independent f ne anther and d nt have any dependencies n the ther s scan results. Hwever, because each f the full scans is cmprehensive, full scan jbs take the lngest t cmplete f the tw available ptins. Incremental Scan f nly bjects that have been updated since the last scan Run a fractinal scan. It scans nly the updated dcuments and items since the last successful full scan r incremental scan. This kind f scan requires less strage than a full scan and it reduces the executin time f the scan jb. Hwever, it is imprtant t nte that fr each incremental scan, the latest full scan jb in the full scan cycle must be available. If the incremental scan is based n a frmer incremental scan jb, the frmer incremental scan must als be available. If Incremental Scan is selected, select whether r nt t use a reference time. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Mnths, Days, Hurs, r Minutes frm the drp-dwn list. 232 Cmpliance Guardian Installatin and Administratin User Guide

233 Hw ften wuld yu like t check n this scpe Set up the frequency fr the scheduled Cmpliance Scanner jb. One Time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. The jb will be run accrding t the date time cnfigured here. Recurring Cnfigure the fllwing recurring settings. Interval Select ne time unit frm Minutes, Hurs, Days, Weeks, and Mnths, and then enter an integer int the Interval text bx. The scheduled Cmpliance Scanner jb will be run accrding t the interval cnfigured here. Start Time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. *Nte: The start time cannt be earlier than the current time. Then, cnfigure the End Time: N end date Select this ptin t repeat running the plan until being stpped manually. End after specified ccurrences Select this ptin t stp the plan autmatically after the specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f scheduled Cmpliance Scanner plans. Select Save t save the settings in the Add Schedule windw, r select Cancel t cancel changes. Yu can select t cnfigure the advanced settings by selecting Advanced Settings: D yu want Cmpliance Guardian t send an t specific users when an errr ccurs during the scan Specify whether t send ut an alert when an errr ccurs during the prcess f scanning a file. If yu chse t send ut alert s when an errr ccurs, select an alert prfile and an template. D yu want Cmpliance Guardian t send a ntificatin when it finishes a scan jb Select whether r nt t send a ntificatin when a scan jb finishes. If yu select Yes, I need a ntificatin, then select a ntificatin prfile. Select New Ntificatin Prfile t create a new prfile. D yu want t specify a separate agent grup fr Cmpliance Guardian t use fr the scan Select whether r nt t use a different agent grup fr Cmpliance Scan frm the ne defined the Cnnectin prfile. If yu select Yes, and then select an agent grup yu want t use frm the drp-dwn menu. Select New Agent Grup t create a new agent grup. Cmpliance Guardian Installatin and Administratin User Guide 233

234 6. Select Finish t finish the plan creatin. A windw appears. Enter the plan name and an ptinal descriptin, then select Save; yu can als select Save and Run Nw t run the plan immediately. At any step, select Back t return t the previus step, and select Cancel t cancel the plan creatin. After yu finish the plan creatin, the plan will be listed under the Scheduled Scanner tab in the Scanner Manager interface. Cnfiguring Actin Rule In the Rule field f the Cnfigure Actin Rule step, enter an ptinal rule descriptin. Then, select an ptin under If the fllwing cnditins are met t specify if yu want t filter ut the desired cntent. If yu select All f the files, then select Add an Actin and then select an actin frm the drp-dwn list. The actin will be displayed under Actins. Select the Cnfigure buttn appeared after the added actin t cnfigure the settings fr the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. If yu select Specify cnditins, the scanned files will be filtered accrding t yur defined cnditins. The files that meet the cnditins will be affected by the actins. Then cnfigure the fllwing cnditins: 1. Select All/Any and True/False in If _ f these cnditins are _. All The files that meet all f the cnditins will be cnsidered True/False. Any The files that meet any f the cnditins will be cnsidered True/False. True The scanned files that meet the cnditins will be affected by the cnfigured actins. False The scanned files that d nt meet the cnditins will be affected by the cnfigured actins. 2. Select Add Cnditin, then cnfigure the settings: Select File r Summary Result frm the first link and then select the value frm the secnd link. File Based n the file prperty value yu specified here t define the scpe in which the files that are nt cmpliant will be affected by the specified actins. Summary Result If yu have selected a test suite that can generate a summary result, this ptin appears. This is based n the summary result that that the file returns. Select cnditins. 234 Cmpliance Guardian Installatin and Administratin User Guide

235 Enter a value yu want the rule t use in the text bx. Repeat the step 2 t add mre cnditins. Select the delete ( ) buttn after a cnditin t delete a cnditin. 3. Yu can select Add Grup t add a cnditin grup. Then the files that first meet the cnditins yu cnfigured in step 2, and then meet the cnditins in the cnditin grup will be affected by actins. Repeat the step 3 t add mre cnditin grups. Select the delete ( ) buttn after a cnditin grup t delete a cnditin grup. 4. After cnfiguring the cnditins, select Add an Actin and then select an actin frm the drpdwn list. The actin will be displayed under Actins. Select the Cnfigure buttn appeared after the added actin t cnfigure the settings fr the actin. Repeat step 4 t add multiple actins. The actins then will be added. Yu can change the rder f the actin cnfiguratin by selecting the textbx befre the added actin t determine the pririty f the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. 5. After yu cnfigured the cnditins and actins abve, yu can select Else t define actins t the scanned files that d nt meet the cnditins cnfigured in step 2 and step 3. Refer t step 2 and step 3 fr details n hw t cnfiguring the cnditins and actins. 6. Select Add a Rule t add anther rule. Yu can select Exprt t XML File t exprt the settings t an XML file; yu can als select Imprt XML File t imprt the XML file. Scanner Actins Refer t the fllwing sectin fr details abut each scanner actin. Delete The files that meet the cnditin will be deleted. After yu select Cnfigure after the Delete actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Delete with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that Cmpliance Guardian Installatin and Administratin User Guide 235

236 will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Quarantine The files will be quarantined. After yu select Cnfigure after the Quarantine actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Select an exprt lcatin after The failed files will be quarantined t the exprt lcatin. The files will be quarantined int the selected lcatin. Select the Nne link t select an exprt lcatin frm the drp-dwn list. Yu can select New Exprt Lcatin t create a new ne. Quarantine with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the specified file that will be taken 236 Cmpliance Guardian Installatin and Administratin User Guide

237 actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Mve The scanned files will be mved t the specified lcatin. After yu select Cnfigure after the Mve actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Specify a lcatin where yu want t mve the failed files Enter the flder path in the frmat: \FlderName r \FlderName\FlderName r \. \ represents the rt flder. If a file with the same name already exists in the destinatin Select the cnflict reslutin: Cmpliance Guardian Installatin and Administratin User Guide 237

238 Overwrite the destinatin file The existing destinatin file will be replaced by the mved file. Skip and keep the destinatin file The mved file will be skipped and the existing destinatin file will be kept. Mve with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: template fr the dcument creatr Select this checkbx t send an alert t the creatr f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. template fr the last user t mdify the dcument Select this checkbx t send an alert t the mdifier f the specified file that will be taken actins. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. 238 Cmpliance Guardian Installatin and Administratin User Guide

239 Ntificatin Only The files that meet the cnfigured cnditins can be recrded in an and sent t users, r in an incident and assigned t users. After yu select Cnfigure after the Ntificatin Only actin, cnfigure the fllwing settings in the Cnfigure interface: Send an ntificatin when the scanned cntent meets the specified cnditins User in the selected ntificatin prfile Select this checkbx t send an alert t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile and template. Start an incident in Incident Manager when the scanned cntent meets the specified cnditins, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when the scanned cntent meets the specified cnditins. Then select the assignees. Cntent Creatr The incident will be assigned t the creatr f the file that has affected by the actin. Cntent Mdifier The incident will be assigned t the mdifier f the file that has affected by the actin. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. In the mean time, alert them with the template When the incident is sent t the assignee, an alert will als be sent t the assignee. If this ptin is selected, select the Nne link and then select an template frm the drp-dwn list. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Real-Time Scanner Real-Time Scanner allws t scan cntent in SharePint r Yammer in real time. Creating Real-Time Classificatin Scanner Rules fr SharePint On the Scanner Manager interface, select the Real-Time Scanner tab. Cmpliance Guardian Installatin and Administratin User Guide 239

240 Select Create n the ribbn, a drp-dwn list appears. Select SharePint frm the drp-dwn list, and yu will be brught t the Create SharePint Rule interface. Cnfigure the fllwing settings: 1. In the Define Scpe step, select an ptin under Where shuld the scan be targeted: I m nt sure, I need t brwse the envirnment t lcate my data Select this ptin, and then yu can select the SharePint farm t expand the tree. Select a nde where yu want t perfrm the scan jb n the tree. Yu can select Hide all ndes that have been applied Real-Time Scanner rules t hide the ndes frm the tree. If yu select a nde that has a rule applied, the related rule settings are displayed in the right pane under the Existing Real-Time Scanner Rule Settings field. Select an ptin t determine if yu want t change the rule: Change the rule settings Select this ptin t change the existing rule settings. Then, yu can select Next t edit the settings in the next steps. Stp using the existing Real-Time Scanner rule Select this ptin, and then select Apply. The rule will be remved frm this nde. I knw the file paths and want t specify the lcatins Select this ptin, and the text field appears. Select a farm n the tp f the field, then enter the scpe URL where yu want t perfrm the scan jb. Press Enter and then enter anther URL in a new line. Select Verify t test if the URL is crrect. Select View the infrmatin f valid lcatins t view the rule infrmatin f the entered nde URLs. A windw appears. Yu can view the rule status f each URL. Select a URL that has rule applied, the related rule settings are displayed. Select hw yu want t create the rule: Select Next. Create a new rule fr all f the listed data surce ndes Select this ptin, then the rule will be created fr all f the listed ndes. If a nde has a rule applied befre, the previus rule will be remved and replaced with the new rule. Create a rule fr data surce ndes that have nt applied any Real-Time Scanner rule Select this ptin, then the rule will nly be created fr the listed ndes that have nt applied rules. 2. In the Cnfigure Scpe Settings step, select if yu want t scan all data in the scpe. Select N, scan everything in the scpe, then all f the cntent will be scanned; r yu can select anther ptin t use a filter plicy t define the desired cntent. The filter plicy drp-dwn list appears. Select a filter plicy frm the drp-dwn list. If yu want t set up a new filter plicy, select the New Filter Plicy link in the drp-dwn list. Refer t Cnfiguring Filter Plicies fr mre infrmatin. Select Next. 240 Cmpliance Guardian Installatin and Administratin User Guide

241 3. In the Cnfigure Scan Rule step, select if yu want t use test suites t scan files. If yu want t use the test suites, select Yes, I want t use test suites t examine the file cntents as well as attributes and select the test suites in the table. Yu can perfrm the fllwing actins in the test suite table: Select Next. Create Select Create t create a new test suite. Fr mre infrmatin n creating a test suite, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. View Descriptin Select n a test suite name, the descriptin is displayed in the Descriptin field f the right pane. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the G t f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 4. In the Cnfigure Actin Rule step, select if yu want t take actin n the bject when Cmpliance Guardian detects vilatins. If yu want t take actins t the bject, select Yes, and I want Cmpliance Guardian t take actins autmatically when it detects vilatins and cnfigure the actins. Fr details n cnfiguring actins, refer t Cnfiguring Actin Rule. *Nte: Yu must cnfigure at least the scan rule r actin rule fr the Real-Time rule. Select Next. 5. In the Cnfigure General Settings step, cnfigure the fllwing settings: D yu want Cmpliance Guardian t send an when an errr ccurs during the file scan Specify whether t send ut an alert when an errr ccurs during the prcess f scanning a file. If yu chse Yes, and I want t specify the users wh will receive the , cnfigure the recipients by selecting the crrespnding checkbxes. Creatr template Select this checkbx t send an alert t the creatr f the specified file. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. Mdifier template Select this checkbx t send an alert t the last mdifier f the specified file. If this ptin is selected, yu must select an e- mail template frm the crrespnding drp-dwn list. User in the selected ntificatin file Select this checkbx t send an alert e- mail t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the Cmpliance Guardian Installatin and Administratin User Guide 241

242 appeared drp-dwn list. Yu can als select the New Ntificatin Prfile link t create a new ntificatin prfile. Fr mre infrmatin, refer t Recipient Prfile. Then, select an template. Yu can select the New template link t create a new template. Fr mre infrmatin, refer t Template. Custm uplad page setting Select t enable the feature. This feature allws users t jump t the Cmpliance Guardian uplad page when uplading files t SharePint. Fr mre infrmatin, refer t Enabling Custm Uplad Page. The functin supprts SharePint 2013 and SharePint 2010 On-Premises. SharePint Online is nt supprted. *Nte: Make sure SP2013CustmUpladPage4.wsp r SP2010CustmUpladPage4.wsp is deplyed befre using this functin. Fr mre infrmatin n deplying the slutin, refer t Slutin Manager. 6. Select Finish t apply the rule. At any step, select Back t return t the previus step, and select Cancel t cancel the rule creatin. After yu finish the rule creatin, the nde that applies the rule will be listed under the Real- Time Scanner tab in the Scanner Manager interface. Cnfiguring Actin Rule Fr mre infrmatin, refer t Cnfiguring Actin Rule. *Nte: When Real-Time Actins Plicies are nt triggered as expected, here are the check lists t help yu find and fix the prblem. 1. Make sure all Cmpliance Guardian Agents have been installed n all Web Frnt End servers f the SharePint farm, and with Real-Time Scanner fr SharePint Agent Type is selected. Next, pen the Windws Task Manager and make sure the real-time prcess exists. The prcess name f SharePint 2013 is RTSv4.exe, and the prcess name f SharePint 2010 is RTSv2.exe. 2. Make sure the identity accunt f SharePint Central Administratin has enugh permissin. Fr Cmpliance Guardian 3.2 and CG 3.1, this accunt requires Read and Write permissin f temp and bin flders under the Cmpliance Guardian Agent installatin path. Fr Cmpliance Guardian 3.3, this accunt requires read permissin f path HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian in the System Registry. 3. Duble check that the real-time rules are crrectly cnfigured in the Cmpliance Guardian Real- Time Plan. 4. If the user passwrd f the Cmpliance Guardian Agent accunt has been changed, make sure the passwrd has been updated in the Cmpliance Guardian Agent Mnitr, and the real-time prcess has been re-started after passwrd changed. 242 Cmpliance Guardian Installatin and Administratin User Guide

243 *Nte: Nrmally when upladed files are remved/mved by triggering the Cmpliance Guardian Real- Time rules, there wuld be a ppup windw in SharePint t ntify users. If the message will des nt appear, please check fllwing lists: 1. Uplad a new file instead f an existing ne t test whether it can trigger the actin) crrectly. 2. If the actins can be triggered nrmally, please find the lg file beginning with RTSv2.exe r RTSv4.exe under the Cmpliance Guardian Agent installatin path AvePint\Cmpliance Guardian\Agent\Lgs, pen with ntepad and check if the fllwing cntent can be fund in the lg files: a. Begin t handle adding r updating event The EventHandler service status : True;The sync mdel status :True This cntent means the synchrnus mde is enabled. b. Failed t take uplad actin This means the files failed t uplad. c. The license has expired This means there is n available Cmpliance Guardian license. d. Failed t scan the current event Failed t scan the event handler event. This means the reasn is unknwn, yu need t further check the exceptin details in the lg file. e. Failed t return message t SharePint This means the WCF called event handler back failed. 3. When checking lgs, yu need t lk in all Web Frnt End Servers with Cmpliance Guardian Agents installed because the real-time actin can be triggered at any Web Frnt End. When yu try t fix issues, yu can access the specific Web Frnt End URL fr testing, s that yu nly need t check the lgs n this Web Frnt End server. Enabling Custm Uplad Page T use this feature yu must first deplyed the SP2013CustmUpladPage4.wsp r SP2013CustmUpladPage4.wsp slutin and enabled the custm uplad page in an applied Real-Time Classificatin Scanner rule. When yu uplad a file in SharePint, Cmpliance Guardian s wn uplad page appears. Cmpliance Guardian will execute the Real-Time Scanner rule immediately. If the file has taken actin accrding t the rule, the page with the related actin infrmatin will appear. Yu can custmize this page. Fr mre infrmatin n custmizing the SharePint page, refer t Custmizing SharePint Page and Message. If the file is upladed successfully, Cmpliance Guardian s Edit Prperties page appears, allwing yu t edit the upladed file prperties. Cmpliance Guardian Installatin and Administratin User Guide 243

244 *Nte: Fr the Redact actin, the user can cnfigure the key="filterredactresult" nde in RTS4v2.exe.cnfig (apply t SharePint 2007 r SharePint 2010) r RTS4v4.exe.cnfig (apply t SharePint 2013) in \AvePint\Cmpliance Guardian 4\Agent\bin. If the value f the nde is True, the page with the file s redactin infrmatin will nt appear after a file is upladed and redacted; if the value f the nde is False, the page with the file s redactin infrmatin will appear. *Nte: Fr SharePint 2013, the slutin des nt supprt uplading files by dragging files t SharePint. Fr SharePint 2010 and SharePint 2013, the slutin des nt supprt uplading files in bulk. The slutin des nt wrk n newly created sites r libraries. Yu must deply the SP2007InstallEventReceiver4.wsp r SP2010InstallEventReceiver4.wsp slutin if yu want the newly created sites inheriting their parent sites t apply the custm uplad page functin. Cmpliance Guardian allws users t use SharePint native pages when uplading files t a library. Cmplete the fllwing settings t edit the library settings 1. Navigate t the crrespnding library, and then select Library Settings. 2. Yu can find the Cmpliance Guardian page settings fr SharePint 2010 r Cmpliance Guardian page settings fr SharePint 2013 settings. 3. Select the setting, and then select whether t use Cmpliance Guardian uplad page r the edit prperties page. 4. Select OK t save the settings. The SharePint native pages will appear if the files are upladed t the crrespnding library. *Nte: SP2013CustmUpladPage4.wsp is used t deply n a SharePint 2013 farm, and SP2010CustmUpladPage4.wsp is used t deply n a SharePint 2010 farm. In SharePint 2013, if yu want t edit the library settings in a site cllectin that is created using the 2010 experience versin, yu must als deply SP2010CustmUpladPage4.wsp n the SharePint 2013 farm. Custmizing SharePint Page and Message Cmpliance Guardian allws users t custmize pages and errr messages which appear when a Real- Time Classificatin actin is triggered. This des nt affect SharePint s wn behavirs. Althugh the user custmizes their wn errr message r page, when sme errrs ccur due t the SharePint s wn behavirs, the SharePint built-in errr page will appears. Basic Custmizatin The Basic Custmizatin feature allws yu t custmize yur wn page. Yu can use Visual Studi t create the SharePint slutin, and then create a SharePint page. Use the cde f the created page t invke the HttpCntext.Current.Items[ ErrrText ] prperty fr accessing the errr message string. 244 Cmpliance Guardian Installatin and Administratin User Guide

245 T cnfigure the RTS prcess, cmplete the fllwing steps: 1. Open RTS4v2.exe.cnfig (apply t SharePint 2007 r SharePint 2010) r RTS4v4.exe.cnfig (apply t SharePint 2013) in \AvePint\Cmpliance Guardian 4\Agent\bin. 2. Find the nde: <cnfiguratin><appsettings><add key="errrpagepath">. Change the value t be the path f the custmized page. Refer t Methd t Get the Page Path. Methd t Get the Page Path T get the custmized page path, cmplete the fllwing steps: 1. Open the IIS Manager. 2. Find the _layuts nde in the left pane f IIS Manager. 3. Right-click the _layuts nde. A drp-dwn list appears. 4. Select Explre and then find the custmized page. 5. Open the page. 6. Cpy the part after layuts/ r layuts/15/ f the page s URL, and then paste it in the <cnfiguratin><appsettings><add key="errrpagepath"> nde. Advanced Custmizatin The Advanced Custmizatin feature allws yu t custmize the pp-up message. Write the DLL file, implement the interface f Cntent.Cmpliance.Scanner.PAL.IMailFrmatter,CCS.PAL, Versin= , Culture=neutral, PublicKeyTken=fffb45e56dd478e3. Yu can receive ActinScpe (string the actin infrmatin), and the string template parameter thrugh the interface. Read and btain the data structure, and then cnvert t the desired character strings. After the character strings return, the RTS prcess will submit the strings t the SharePint built-in errr page, r submit the strings t the custmized page. Advanced Custmizatin als allws yu t frmat messages thrugh different methds. Fr example, frmat the message t plain text r HTML text. Refer t the fllwing steps: 1. After yu finish the DLL file, the user must pen the Share.cnfig file at \AvePint\Cmpliance Guardian 4\Agent\bin and find the fllwing ndes: <SharedCnfig> <cnfig name="imailfrmatter" type="default"/> </SharedCnfig> 2. Mdify the type value t the users wn class. 3. Enter the assembly-qualified name. Install the DLL file t GAC r put it t \AvePint\Cmpliance Guardian 4\Agent\bin. Cmpliance Guardian Installatin and Administratin User Guide 245

246 *Nte: The DLL file will be laded t RTS4v2.exe r RTS4v4.exe, s please be careful t avid deleting, checking, adding, r mdifying in the DLL file (these actins are nt recmmended). Creating Real-Time Classificatin Scanner Rules fr Yammer On the Scanner Manager interface, select the Real-Time Scanner tab. Select Create n the ribbn, a drp-dwn list appears. Select Yammer frm the drp-dwn list, and yu will be brught t the Create Yammer Rule interface. Cnfigure the fllwing settings: 1. In the Select Scpe step, select a Yammer cnnectin t scan cntent in Yammer. Select Create Yammer Cnnectin t create a new Yammer cnnectin. Fr mre infrmatin n creating a cnnectin, refer t Creating a Yammer Cnnectin. If yu select a nde that has rules applied, the related rule settings are displayed in the right pane. Select an ptin t determine if yu want t change the rule: Select Next. Change the rule settings Select this ptin t change the existing rule settings. Then, yu can select Next t edit the settings in the next steps. Stp using the existing Real-Time rule Select this ptin, and then select Apply. The rule will be remved frm this nde. 2. In the Cnfigure Scpe Settings step, select desired ptins in the fllwing questins t finish the settings: D yu want t scan cntent psted by specific users Select if yu want t scan cntent psted by specific users. Scan all psts Select this ptin t scan all psts. Imprt file with specific users Select this ptin t imprt a file alng with the added users. Yu can select Dwnlad Template, and save the template file. Edit the template file t add the users and then select Imprt t imprt the file. Specify users whse psts will be scanned Enter the users in the text field, and then select Check Users t check if the entered users are crrect. Use the semicln (;) as the separatr if yu entered multiple users. Yu can als select Advanced Search t find the desired users. The Advanced Search windw appears. Enter a keywrd in the search bx, the names and e- mail address f the related users wh are assciated with the netwrk are displayed in the table. Yu can als select the Advanced buttn t filter the results by user r grup. 246 Select All r Any in If _ f these cnditins are matched. Cmpliance Guardian Installatin and Administratin User Guide

247 If yu select All The psts f the grups r users wh are matched all f the cnfigured cnditins can be scanned. If yu select Any The psts f the grups r users wh are matched any f the cnfigured cnditins can be scanned. Select Add Cnditin. Select Grup Name r Username, and select Cntains r Equals. Then, add a value in the Enter a value field. T add mre cnditins, select Add Cnditin again. Select the delete ( ) buttn t delete a cnditin. Select Add Grup t add mre cnditin grups. After cnfiguring the filter rules, select Search t search fr the related users. The searched ut users r the users in the searched ut grup are displayed in the table. Select the user checkbxes and then select the Add buttn. The selected user will be added int the text field under Specify users whse psts will be scanned. Specify criteria t filter desired users whse psts will be scanned Cnfigure the criteria t filter the desired users. Select All r Any in If _ f these cnditins are matched. If yu select All The psts f the grups r users wh are matched all f the cnfigured cnditins can be scanned. If yu select Any The psts f the grups r users wh are matched any f the cnfigured cnditins can be scanned. Select Add Cnditin. Select Grup Name r Username, and select Cntains r Equals. Then, add a value in the Enter a value field. T add mre cnditins, select Add Cnditin again. Select the delete ( ) buttn t delete a cnditin. Select Next. 3. In the Cnfigure Scan Rule step, select if yu want t use test suites t scan files. If yu want t use the test suites, select Yes, I want t use test suites t examine the file cntents as well as attributes and select the test suites in the table. Yu can perfrm the fllwing actins in the test suite table: Cmpliance Guardian Installatin and Administratin User Guide 247

248 Select Next. Create Select Create t create a new test suite. Fr mre infrmatin n creating a test suite, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. View Descriptin Select n a test suite name, the descriptin is displayed in the Descriptin field f the right pane. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the G t f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 4. In the Cnfigure Actin Rule step, select if yu want t take actin n the bject when Cmpliance Guardian detects vilatins. If yu want t take actins t the bject, select Yes, and I want Cmpliance Guardian t take actins autmatically when it detects vilatins and cnfigure the actins. Fr details n cnfiguring actins, refer t Cnfiguring Actin Rule. *Nte: Yu must cnfigure at least the scan rule r actin rule fr the Real-Time rule. Select Next. 5. In the Cnfigure General Settings step, specify whether t send ut an alert when an errr ccurs during the prcess f scanning a file. If yu chse Yes, I want Cmpliance Guardian t send the t specific users, select an alert prfile and an template. 6. Select Finish t apply the rule. At any step, select Back t return t the previus step, and select Cancel t cancel the rule creatin. After yu finish the rule creatin, the plan will be listed under the Real-Time Scanner tab in the Scanner Manager interface. Cnfiguring Actin Rule In the Rule field f the Cnfigure Actin Rule step, enter an ptinal rule descriptin. Then, select an ptin under I want t mnitr cntent frm t define hw t achieve the Real-Time Scanner. Event Receiver Register event receiver t Yammer server withut dependency n SharePint. When users pst messages n Yammer, the receiver will synchrnusly get the event frm the Yammer server then dispatch messages t Cmpliance Guardian Agents t execute scan and actins. 248 Cmpliance Guardian Installatin and Administratin User Guide

249 Web part Yu must first add the AvePint Yammer Cnnectr Web Part t SharePint, each time a user psts messages thrugh this Web part, Cmpliance Guardian will synchrnusly capture and scan, and then execute a specific actins. Fr mre infrmatin abut the Yammer Cnnectr Web part, refer t Using AvePint Yammer Cnnectr Web Part t Pst Messages t Yammer. *Nte: The YammerCnnectr4.wsp slutin must be deplyed n SharePint in rder t use Real-Time Classificatin Scanner fr Yammer. Select an ptin under If the fllwing cnditins are met t specify if yu want t filter ut the desired cntent. If yu select All f the files, then select Add an Actin and then select an actin frm the drp-dwn list. The actin will be displayed under Actins. Select the Cnfigure buttn appeared after the added actin t cnfigure the settings fr the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. If yu select Specify cnditins, the scanned files will be filtered accrding t yur defined cnditins. The files that meet the cnditins will be affected by the actins. Then cnfigure the fllwing cnditins: 1. Select All/Any and True/False in If _ f these cnditins are _. All The files that meet all f the cnditins will be cnsidered True/False. Any The files that meet any f the cnditins will be cnsidered True/False. True The scanned files that meet the cnditins will be affected by the cnfigured actins. False The scanned files that d nt meet the cnditins will be affected by the cnfigured actins. 2. Select Add Cnditin, then cnfigure the settings: Select Message r Summary Result frm the first link and then select the value frm the secnd link. Message Based n the message infrmatin yu specified here t define the scpe in which cntent that is nt cmpliant will be affected by the specified actins. Summary Result If yu have selected a test suite that can generate a summary result, this ptin appears. This is based n the summary result that that the file returns. Select cnditins. Enter a value yu want the rule t use in the text bx. Repeat the step 2 t add mre cnditins. Cmpliance Guardian Installatin and Administratin User Guide 249

250 Select the delete ( ) buttn after a cnditin t delete a cnditin. 3. Yu can select Add Grup t add a cnditin grup. Then the files that first meet the cnditins yu cnfigured in step 2, and then meet the cnditins in the cnditin grup will be affected by actins. Repeat the step 3 t add mre cnditin grups. Select the delete ( ) buttn after a cnditin grup t delete a cnditin grup. 4. After cnfiguring the cnditins, select Add an Actin and then select an actin frm the drpdwn list. The actin will be displayed under Actins. Select the Cnfigure buttn appeared after the added actin t cnfigure the settings fr the actin. Repeat the abve step t add multiple actins. The actins then will be added. Yu can change the rder f the actin cnfiguratin by selecting the textbx befre the added actin t determine the pririty f the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Fr details f each actin, refer t Scanner Actins. 5. After yu cnfigured the cnditins and actins abve, yu can select Else t define actins t the scanned files that d nt meet the cnditins cnfigured in step 2 and step 3. Refer t step 2 and step 3 fr details n hw t cnfiguring the cnditins and actins. 6. Select Add a Rule t add anther rule. Yu can select Exprt t XML File t exprt the settings t an XML file; yu can als select Imprt XML File t imprt the XML file. Scanner Actins Refer t the fllwing sectin fr details abut each scanner actin. Redact If yu select Web part t achieve the Real-Time Scanner, this actin appears. The psts that meet the cnditin cnfigured in the actin plicy will be redacted. After yu select Cnfigure after the Redact actin, cnfigure the fllwing settings in the appeared Cnfigure interface: The cntent will be stred in the selected lcatin befre being redacted Select a lcatin t stre the cntent that will be redacted. Select hw d yu want t deal with the fund cntent: Delete the failed cntent immediately Select this ptin, the fund cntent will be deleted directly. Replace the matching cntent Select this ptin, the fund cntent will be replaced with the value specified in the fllwing settings. Cnfigure the fllwing settings t designate the target cntent: 250 Cmpliance Guardian Installatin and Administratin User Guide

251 Please define keywrds. The cntent that Cntains/Equals the keywrds will be redacted Select Cntains r Equals in the sentence. Then, enter a keywrd and select if the cntent shuld be case sensitive. The cntent that cntains r equals t the entered keywrd will be fund. Yu can enter multiple keywrds, and use the cmma (,) as the separatr. Please define a regular expressin. The cntent that matches the regular expressins will be redacted Enter a regular expressin and select if the cntent shuld be case sensitive. The cntent that matches the regular expressin will be fund. Yu can enter multiple expressins, and use the cmma (,) as the separatr. Yu can select Filter ut the fllwing cntent t nt be redacted t cnfigure settings t filter ut the desired cntent frm the cntent that matches the abve regular expressin. The filtered ut cntent will nt be redacted. The cntent that Cntains/Equals the keywrds Select Cntains r Equals in the sentence. Then, enter a keywrd, and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin cntains r equals t the entered keywrd, it will be filtered ut and will nt be redacted. The cntent that matches the regular expressins Enter a regular expressin and select if the cntent shuld be case sensitive. If the cntent that matches the abve regular expressin als matches the regular expressin here, it will be filtered ut and will nt be redacted. Cnfigure the value that is used t replace the fund cntent and cnfigure the related settings, these settings nly appear if yu select the Replace the matching cntent. Select Sectin r Wrd in Please fill in a Sectin/Wrd used t replace the cntent abve t define t replace a wrd t a sectin: If Wrd is selected, enter a value used t replace the fund cntent. If Sectin is selected, enter a value used t replace the fund sectin. Then, enter numbers in The previus _ characters and fllwing _ characters arund the cntent abve will als be redacted. The characters in the range f the specified number will als be redacted. Repeat the character s the redactin is the same length as the riginal value Select whether r nt t repeat the specified value t make sure the replaced result keeping the same length as the riginal cntent. Redact with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then Cmpliance Guardian Installatin and Administratin User Guide 251

252 select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. Select In the mean time, alert them with the template ptin, the alert will be sent t these users t send alert t these users. Then, select a template by selecting the Nne link. Select New Template t create a new template. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Blck If yu select Web part t achieve the Real-Time Scanner, this actin appears. The psts that meet the cnditin cnfigured in the actin plicy will be blcked. After yu select Cnfigure after the Blck actin, cnfigure the fllwing settings in the appeared Cnfigure interface: Cntent will be stred in the selected lcatin befre being blcked select a lcatin t stre the cntent that will be blcked. Blck with alert Select this ptin t cnfigure alert settings: When the actin successfully executes, send t Select the alert recipients when the actin successfully executes t the files: Users in the selected ntificatin prfile Select this checkbx t send an alert t the recipients in the selected alert ntificatin prfile. If this ptin is selected, select the crrespnding Nne links and then select an alert ntificatin prfile and template frm the drpdwn lists. When the actin fails t execute, send t Select the alert recipients when the actin fails t execute. Start an incident in Incident Manager when actin is executed, and the incident will be assigned t Select this ptin t start an incident in Incident Manager when an actin is executed. Then select the assignees. 252 Cmpliance Guardian Installatin and Administratin User Guide

253 Users in the scpe mapping The incident will be assigned t the users in the scpe mapping. If this ptin is selected, select the Nne link and then select a scpe mapping frm the drp-dwn list. Specify users/grups The incident will be assigned t the specified users. Enter user r grup name in the appeared text field, and press Enter n yur keybard r select Validate t test if the entered user r grup is valid. Yu can add multiple users r grups. Select In the mean time, alert them with the template ptin, the alert will be sent t these users t send alert t these users. Then, select a template by selecting the Nne link. Select New Template t create a new template. Select Save t save the settings in the windw, r select Cancel t cancel the changes. Delete If yu select Event Receiver t achieve the Real-Time Scanner, this actin appears. Fr details, refer t Delete. Ntificatin Only Fr details, refer t Ntificatin Only. Add Tag Fr details, refer t Add Tag. Using AvePint Yammer Cnnectr Web Part t Pst Messages t Yammer AvePint Yammer Cnnectr Web part is added in SharePint, which is used fr scanning the cntent pst t Yammer. Yu must cnfigure a Real-Time Scanner rule, and Cmpliance Guardian will scan the cntent accrding t the rule. Ensure that YammerCnnectr4.wsp is deplyed befre using this feature. Fr mre infrmatin n deplying the slutin, refer t Slutin Manager. *Nte: This feature is supprted in bth SharePint 2010 and SharePint Enable the AvePint Yammer Cnnectr Feature Navigate t the crrespnding SharePint site where yu want t add the AvePint Yammer Cnnectr Web part > Site Settings > Site features, and activate the AvePint Yammer Cnnectr feature. Adding the AvePint Yammer Cnnectr Web Part T add the AvePint Yammer Cnnectr Web Part, cmplete the fllwing steps: 1. Navigate a SharePint page, select the Page tab. 2. Select Edit n the ribbn. And then select Edit frm the drp-dwn list. The Insert tab appears. Cmpliance Guardian Installatin and Administratin User Guide 253

254 3. Select the Insert tab. And then select Web Part n the ribbn. 4. Select Custm in the Categries field f the left pane. The AvePint Yammer Cnnectr Web part appears. 5. Select Add in the right pane. The AvePint Yammer Cnnectr Web part is added. Psting Messages t Yammer thrugh the AvePint Yammer Cnnectr Web Part After adding the AvePint Yammer Cnnectr Web part t a SharePint page, cmplete the fllwing steps t lg int Yammer: 1. Select Lg int Yammer. 2. Select a cnnectin. Select Lgin. 3. Enter the accunt used t lg int Yammer. Then, select Lg In. When yu pst messages, refresh data r get messages using this lgin accunt, the messages will be scanned accrding t the Real-Time Scanner rule cnfigured in Cmpliance Guardian. *Nte: Yu can nly pst message t ne grup at a time using the Web part. 254 Cmpliance Guardian Installatin and Administratin User Guide

255 Figure 14:AvePint Yammer Cnnectr Web Part. Creating Real-Time Classificatin Scanner Rules fr Bx On the Scanner Manager interface, navigate t the Real-Time Scanner tab. Select Create n the ribbn, a drp-dwn list appears. Select Bx frm the drp-dwn list, and yu will be brught t the Bx interface. Cnfigure the fllwing settings: 1. In the Where shuld the scan be targeted sectin, select a Bx cnnectin t scan cntent in Bx. 2. In the D yu want t use Real-Time Scanner fr the primary scan sectin, select whether r nt t use the Real-Time Scanner and Scheduled Scanner tgether fr imprving the scan perfrmance. That is t use the real-time scan as the primary scan fr all cntent and use the scheduled scan as the secndary scan nly fr files that failed t scan in Real-Time Scanner. Cmpliance Guardian Installatin and Administratin User Guide 255

256 Select Yes, use a real-time plan instead f the existing scheduled scans, except fr the plans selected belw t enable this feature and select the plans yu want t exclude frm the secndary san list frm the drp-dwn menu. *Nte: The rules fr the scheduled scans in the secndary scan list must be the same as that in the real-time plan. Otherwise, the scan jb will fail. 3. All f the real-time rules fr this cnnectin appear in the table in the Create r cnfigure the rules fr Bx real-time scanning sectin. Yu can create r cnfigure the real-time rules fr scanning Bx. Yu can perfrm the fllwing actins fr the rules. Create Create a new real-time rule. G t step 3. Edit Edit the selected rule settings. Delete Delete the selected rule. Disable Disable the selected rule s it will nt be applied fr this real-time scanning. Enable Enable the selected rule s it will be applied fr this real-time scanning. Order Yu can change the sequence f a rule by selecting the number frm the Order drp-dwn list t determine the pririty f the rule. If a file meets multiple rules, it will apply the first rule accrding t the rder and skip all f the fllwing rules. View Details View the details f a selected rule n the right side f the table. *Nte: The Delete, Enable, and Disable actins and a change f rder take effect after yu select Apply. If yu want t create a new rule, select Create and g t step 3. If yu want t save yur mdificatins, select Apply. 4. Cmplete the Cnfigure Scpe Settings: In the D yu want t scan cntent managed by specific users? sectin, chse hw t scan cntent managed by specific users. Scan cntent fr all users Select this ptin t scan all cntent. Imprt file with specific users whse cntent will be scanned Select this ptin t imprt a file alng with the added users. Yu can select Dwnlad Template, and save the template file. Edit the template file t add the users and then select Imprt t imprt the file. Specify users whse cntent will be scanned Enter the usernames, grup names, r addresses in the text field. T enter multiple users, use a semicln (;) as the separatr. 256 Cmpliance Guardian Installatin and Administratin User Guide

257 In the D yu want t specify a filter plicy t determine what cntent will be scanned sectin, select N, scan everything in the scpe, then all f the cntent will be scanned; r yu can select anther ptin t use a filter plicy t define the desired cntent. The filter plicy drp-dwn list appears. By default, the default filter plicy is used, and all f the types f files supprted by Cmpliance Guardian are included in this default filter plicy. If yu want t set up a new filter plicy, select the New Filter Plicy link in the drp-dwn list. Refer t Cnfiguring Filter Plicies fr mre infrmatin. Select Next. 5. In the Cnfigure Scan Rule step, chse whether yu want t use test suites t scan files. If yu want t use test suites, select Yes, I want t use test suites t examine the file cntents as well as attributes and select the test suites frm the table. Yu can perfrm the fllwing actins in the test suite table: Select Next. Create Select Create t create a new test suite. The Create Test Suite interface appears. Fr mre infrmatin n creating a test suite, refer t Creating Test Suites. Refresh Select Refresh t refresh the test suite list. View Descriptin Select a test suite name, the descriptin is displayed in the Descriptin field f the right pane, displaying the checks the test suite includes. Search Enter a keywrd in the search field t search the desired test suite. Enter the page number in the Page f text bx at the lwer-right crner and press Enter t g t the specified page. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. 6. In the Cnfigure Actin Rule step, chse whether yu want t take actin n the bject when Cmpliance Guardian detects vilatins. If yu want t take actins t the bject, select Yes, and I want Cmpliance Guardian t take actins autmatically when it detects vilatins and cnfigure the actins. Fr details n cnfiguring actins, refer t Cnfiguring Actin Rule. *Nte: Yu must cnfigure at least a scan rule r an actin rule fr the plan. Select Next. 7. In the Cnfigure General Settings step, specify whether t send ut an alert when an errr ccurs during the prcess f scanning a file. If yu chse Yes, I want Cmpliance Guardian t send the t specific users, select an alert prfile and an template. 8. Select Finish t save and autmatically enable the rule. At any step, select Back t return t the previus step, and select Cancel t cancel the rule creatin. Cmpliance Guardian Installatin and Administratin User Guide 257

258 After yu finish the rule creatin, the rule will be listed in the Bx Rule Manager table. Cnfiguring Actin Rule In the Rule field f the Cnfigure Actin Rule step, enter an ptinal rule descriptin. Then, select an ptin under If the fllwing cnditins are met t specify hw t filter ut the desired cntent. If yu select All f the files, select Add an Actin and then select an actin frm the drp-dwn list. The actin will be displayed under Actins. Select the Cnfigure buttn that appeared after the actin was added t cnfigure the actin s settings. Select the Delete ( actin. Fr details f each actin, refer t Scanner Actins. ) buttn beside an actin t remve the If yu select Specify cnditins, the scanned files will be filtered accrding t yur defined cnditins and the files that meet the cnditins will be affected by the actins. Cnfigure the fllwing cnditins: 1. Select All/Any and True/False in If _ f these cnditins are _. All The files that meet all f the cnditins will be cnsidered True/False. Any The files that meet any f the cnditins will be cnsidered True/False. True The scanned files that meet the cnditins will be affected by the cnfigured actins. False The scanned files that d nt meet the cnditins will be affected by the cnfigured actins. 2. Select Add Cnditin, then cnfigure the settings: Select File r Summary Result frm the first link and then select a value frm the secnd link. File Based n the file prperty value yu specified here t define the scpe in which cntent that is nt cmpliant will be affected by the specified actins. Summary Result If yu have selected a test suite that can generate a summary result, this ptin appears. This is based n the summary result that the file returns. Select cnditins. Enter the value that yu want the rule t use in the text bx. Repeat step 2 t add mre cnditins. Select the delete ( ) buttn beside a cnditin t delete the cnditin. 3. Yu can select Add Grup t add a cnditin grup. The files that meet the cnditins yu cnfigured in step 2, and then meet the cnditins in the cnditin grup, will be affected by the actins. Repeat step 3 t add mre cnditin grups. 258 Cmpliance Guardian Installatin and Administratin User Guide

259 Select the delete ( ) buttn after a cnditin grup t delete a cnditin grup. 4. After cnfiguring the cnditins, select Add an Actin and then select an actin frm the drpdwn list. The actin will be displayed under Actins. Select the Cnfigure buttn that appeared after the actin was added t cnfigure the settings fr the actin. Repeat Step 4 t add multiple actins. Yu can change the rder f the actins by selecting an ptin frm the Order drp-dwn list t determine the actin s pririty. Select the delete ( ) buttn after an actin t remve the actin. Fr details f each actin, refer t Scanner Actins. 5. After yu have cnfigured the cnditins and actins, yu can select Else t define actins fr the scanned files that d nt meet the cnditins cnfigured in Step 2 and Step 3. Refer t Step 2 and Step 3 fr details n hw t cnfigure the cnditins and actins. 6. Select Add a Rule t add anther rule. Yu can select Exprt t XML File t exprt the settings t an XML file; yu can select Imprt XML File t imprt the XML file. Scanner Actins Refer t the fllwing sectin fr details abut each scanner actin. Delete Fr details, refer t Delete. Quarantine Fr details, refer t Quarantine. Mve Fr details, refer t Mve. Ntificatin Only Fr details, refer t Ntificatin Only. Cmpliance Guardian Installatin and Administratin User Guide 259

260 Incident Management Center Incident Manager Center allws the user t view scan recrds, reprts, and track r perfrm actins t thse files after a scan. Yu can cnfigure permissins fr users t limit which features r actins a user can access and use in the Incident Manager Center. Fr detailed infrmatin, refer t the Cmpliance Guardian User Guide. Launching Mdules in Incident Management Center T launch the Incident Manager Center mdules, cmplete the fllwing steps: 1. Lg int Cmpliance Guardian. Select the mdules in the Incident Management Center. 2. If yu are already in the sftware, select Incident Manager Center frm the tp navigatin. The Start interface fr Incident Management Center appears. There are fur parts in the Start interface: My Tasks Displays the mst recent five tasks that have been assigned t yu. Select View All t view all tasks. Heatmap Includes Test Suite Heatmap and Platfrm Heatmap. Select the link t g int each heatmap interface. Trend Reprt Includes Check Trend Reprt and Test Suite Trend Reprt. Select the link t g int each reprt. Dashbard Select G t Dashbard t g int the Dashbard t view each type f reprt. 3. Yu can als select the mdules frm the appeared navigatin n the tp f the screen t launch each mdule. 260 Cmpliance Guardian Installatin and Administratin User Guide

261 Figure 15: The Start interface fr Incident Manager Center. *Nte: Cmpliance Guardian supprts the CCSScpeMapping.dll that cntains classes and methds used t manage the scpe mapping data. Yu can refer t the DLL file using the custm prgress t save the scpe mapping data int the database, and then update, query, and delete data. Cmpliance Guardian Installatin and Administratin User Guide 261

262 Jb Mnitr Jb Mnitr allws yu t view the status r details f jbs, dwnlad reprts, and manage the jbs all frm a central interface. Jb Mnitr is als integrated int ther Cmpliance Guardian prducts, which enables yu t manage the jbs inside its crrespnding mdules with additinal features specific t the prduct itself. These additinal features are als available in the stand-alne Jb Mnitr mdule. Getting Started Refer t the fllwing sectins fr imprtant infrmatin n getting started with Jb Mnitr. Launching Jb Mnitr T launch Jb Mnitr and access its functinality, cmplete the fllwing steps: 1. Lg int Cmpliance Guardian. In the Hme interface f Cmpliance Guardian, yu can see the Jb Mnitr field. 2. Select Jb Mnitr n the tp f the screen t launch Jb Mnitr. 262 Cmpliance Guardian Installatin and Administratin User Guide

263 Figure 16: Launching Jb Mnitr. Understanding Jb Mnitr Jb Mnitr allws yu t custmize the way yur jbs are displayed s yu can mre efficiently manage them. The fllwing tw sectins will cver the different viewing ptins. Jb Mnitr Interface The interface in Jb Mnitr cntains the fllwing fur areas: 1. Tabs Switch between the Jb Mnitr and Scheduled Jb Mnitr interface. 2. Ribbn Tlbar where yu can custmize the view, perfrm actins n selected jbs, and cnfigure reprt lcatin settings. 3. Search Search tl fr filtering the displayed jbs. 4. Viewing pane List f jbs displayed accrding t the filters yu cnfigure. Cmpliance Guardian Installatin and Administratin User Guide 263

264 Figure 17: Jb Mnitr user interface. Jb Mnitr vs. Scheduled Jb Mnitr The Jb Mnitr mdule interface cntains tw tabs: Jb Mnitr Allws yu t access all f the current and previus jbs. Scheduled Jb Mnitr Allws yu t exclusively access jbs that are scheduled t run in the future. *Nte: Differentiate between scheduled jbs (jbs scheduled t run in the future) and recurring jbs. Scheduled jbs will nly shw up n the Scheduled Jb Mnitr tab. Recurring jbs will shw up n bth tabs. Cnfiguring the Viewing Pane In bth the Jb Mnitr and Scheduled Jb Mnitr tabs, there is a View tlbar and a Filter tlbar n the ribbn with further cnfigurable ptins t help yu mre efficiently manage yur current and previus jbs. The View Tlbar This tlbar allws yu t chse t have yur jbs displayed in List View r Calendar View: List View Displays yur jbs in a table. Yu can add r remve a clumn t custmize yur view by selecting the manage clumns buttn ( ). Select the desired clumn fr this view by checking the checkbx next t its name in the drp-dwn menu. Select OK 264 Cmpliance Guardian Installatin and Administratin User Guide

265 t save yur chices, r select Cancel t clse the drp-dwn menu withut saving yur chices. Calendar View Displays yur jbs in a calendar. Yu can cnfigure Calendar View t display in Day Week, r Mnth frmat by selecting the respective buttn in the upper right-hand crner. T see detailed infrmatin abut a jb, place yur muse cursr ver its time slt. Yu can als cnfigure the Time Zne in this tlbar by specifying ne f the ptins belw t display in the jb infrmatin. Default Displays the time zne f the machine where the cntrl service is installed. In the Scheduled Jb Mnitr tab, the default time zne is based n the time zne cnfigured fr each schedule. Lcal Displays the time zne that the Internet Explrer (IE) brwser used t access Cmpliance Guardian. By default, the time zne f the jb infrmatin is set t Default. *Nte: In Calendar View, the time zne is set t Lcal and cannt be altered. T change the time zne, select the drp-dwn menu, and select Lcal. The Filter Tlbar This tlbar allws yu t filter the jbs listed in the viewing pane by Date Range r Mdule. Date Range Allws yu t limit the jbs displayed by specifying a time frame. Mdule Allws yu t limit the jbs displayed by specifying the mdule where the jbs are run. Searching Jbs Jb Mnitr als allws yu t search fr jbs t further custmize which jbs are displayed t yu. The search interface is lcated under the tlbar ribbn. Select the crrespnding radi buttn t either Search all pages r Search current page. Placing yur cursr ver the Search text bx will bring up a tltip infrming yu f the searchable parameters. *Nte: The search functin is nt case sensitive. Since the Jb ID includes the start time fr the jb, yu can search fr a jb by start time. Enter the time as a numerical string in the text bx, then select the magnifying glass ( ) (fr example, search fr :05:10 by typing in the search text bx). Cmpliance Guardian Installatin and Administratin User Guide 265

266 Managing Jbs The Jb Mnitr tab and the Scheduled Jb Mnitr tab ffer different sets f tls mre suitable fr managing the different types f jbs. *Nte: If ne tl is nt supprted fr the selected jb f the specified prduct, the crrespnding buttn f this tl will be greyed ut and nt available t select. Operatins in the Jb Mnitr Tab The Jb Mnitr tab prvides yu with a number f tls that allw yu t perfrm actins t jbs yu are currently running r have run in the past. The Manage Tlbar This tlbar prvides yu with the fllwing functinality: View Details Allws yu t view a jb reprt f the selected jb. Select the jb by checking the crrespnding checkbx. Select View Details n the ribbn. The Jb Details tab appears with the jb reprt displayed in the viewing pane with the Summary tab selected. The Summary tab displays general infrmatin abut the jb. Fr mre indepth infrmatin, select the Details tab in the viewing pane. Select Dwnlad t dwnlad the jb reprt. Select TXT, CSV, r XLS as the frmat fr the reprt, then select t dwnlad the Current clumns r All clumns frm the Details tab, and then select OK t dwnlad the reprt, r Cancel t return t the Jb Details tab. Delete Deletes jb infrmatin withut sending a ntificatin t anyne. Select the checkbxes befre the jbs, and then select Delete. A cnfirmatin pp-up windw will appear t cnfirm the peratin. Select OK t delete the selected jbs, r select Cancel t return t the interface withut deleting the jbs. Dwnlad Allws yu t dwnlad the jb reprt f the selected jbs t a specified lcatin. Yu have the ptin t set the Reprt Frmat t dwnlad in TXT, CSV, r XLS frmat. Here yu can nly chse t dwnlad All clumns frm the Details tab. *Nte: Prir t dwnlading the jb reprt, make sure the Internet Explrer (IE) dwnlad settings are cnfigured prperly. Yu can cnfigure the dwnlad settings fr IE by fllwing the steps belw. 1. Navigate t Internet Explrer > Tls > Internet Optins. 2. Switch t the Security tab and select a zne. 3. Select the Custm level buttn inside the Security level fr this zne field. 4. Scrll dwn t the Dwnlads setting. 266 Cmpliance Guardian Installatin and Administratin User Guide

267 5. Change the detailed settings accrding t the screensht belw. Figure 18: IE security settings. The Actins Tlbar When yu select ne r mre jbs, the tlbar appears. This tlbar prvides yu with the Stp actin t stp the selected in-prgress jb immediately. The jb status will change t Stpped, but the jb infrmatin will be retained, as well as any data aggregated by the jb. Yu can als select Pause t stp the jb; select Resume, the jb will cntinue t run. *Nte: Once a jb is stpped, in rder t run it again, yu must launch the respective mdule yu used t run that jb. Select the Plan Manager tab, and then select the plan by checking the checkbx, and select Run Nw. When yu run the same jb again, it will be cnsidered a new jb, s the previus data is retained. The Settings Tlbar This tlbar prvides access t the Reprt Lcatin tl that allws yu t specify a lcatin fr string the reprts generated after running the jbs. If yu d nt cnfigure this tl, the jb reprts will be stred in the default lcatin (...\AvePint\Cmpliance Guardian 4\Manager\wrk). T stre the jb reprts n a netwrk share: 1. Check the Use the Net Share path as the reprt lcatin checkbx. 2. Enter the UNC Path. 3. Enter the Username. 4. Enter the Passwrd. 5. Select OK. Cmpliance Guardian Installatin and Administratin User Guide 267

268 The Advanced Tlbar This tlbar prvides access t Jb Perfrmance Alert that allws yu t cnfigure the settings f the jb perfrmance alert fr the unrespnsive jbs. When a jb des nt respnd within the cnfigured time, a ntificatin will be sent abut this issue. Refer t the Jb Perfrmance Alert sectins in Jb Perfrmance Alert. Scheduled Trigger and Autmatic Trigger The jbs fr a Scheduled Scanner plan are listed under Scheduled Trigger. The jbs fr a Real-Time Scanner are listed under Autmatic Trigger. Under Autmatic Trigger, select Cnfigure Jb Filter t filter the desired jbs: Data Surce Select SharePint r Yammer. Then select the SharePint scpe r Yammer cnnectin. Time Range Select All, all f the jbs in the selected scpe will be displayed; yu can als select Trigger Rule Within, then select Last 7 days, Last 14 days, Last 30 days, r Custm. Specify the time range by selecting date n the calendar if yu select Custm. Scan Status Select the scan status. Actin Status Select the actin status. Select Clear t clear all f the settings; select Shw Results, the jbs that are met the filter settings will be displayed; Select Dwnlad Jb Reprt t dwnlad a reprt. Operatins in the Scheduled Jb Mnitr Tab The Scheduled Jb Mnitr tab prvides yu with tw tlbars that allw yu t perfrm actins t jbs that yu have scheduled t run in the future. The fllwing sectins explain what these tls d in detail. The Actins Tlbar This tlbar prvides the fllwing actins fr a scheduled jb: Enable If the status f the selected jbs is disabled, yu will have the ptin t select this buttn t enable it. Disable If the status f the selected jbs is enabled, yu will have the ptin t select this buttn t disable it. The Filter Tlbar This tlbar prvides the fllwing filter ptins fr a scheduled jb: 268 Cmpliance Guardian Installatin and Administratin User Guide

269 Date Range Allws yu t limit the jbs displayed by specifying a time frame. Mdule Allws yu t limit the jbs displayed by specifying the mdule where the jbs are run. Cmpliance Guardian Installatin and Administratin User Guide 269

270 Using Check Validatr Tl The Check Validatr tl is used t verify if the custm check that is created using Cmpliance Guardian is crrect, and als used t verify if yu can get the type f scan results yu want. T use the Check Validatr, cmplete the fllwing steps: 1. G t the machine with Cmpliance Guardian Agent installed and pen the \AvePint\Cmpliance Guardian 4\Agent\bin directry t find the CCE.TDFValidatr.exe file. 2. Open the CCE.TDFValidatr.exe t start this tl. Figure 19: Check Validatr interface. 3. Select the Check/Test Suite (T) buttn (r yu can press T n yur keybard), a pp-up windw appears, select the check r test suite that yu want t validate, and then select Open in the pp-up windw. The full path f the selected check/test suite will be displayed n the tl interface. 270 Cmpliance Guardian Installatin and Administratin User Guide

271 4. Select the Test File (F) buttn (r yu can press F n yur keybard), a pp-up windw appears, select the file yu want t test, and then select Open in the pp-up windw. The full path f the selected file will be displayed n the tl interface. 5. Select the Scan buttn, the file then will be tested accrding t the rules defined in the selected check r test suite. 6. The scan results will be displayed in the Scan Result field f this tl. In the Scan Result field, the Check ID, Check Name, the cunt f the instances that are fund and the status f each check will be displayed. If ne f the statuses f the checks is Failed, the Scan Result will be Failed. The time that the scan takes will als be displayed. Figure 20: Scan results f Check Validatr. 7. Select Exprt Reprt t generate the scan result. After yu select the Exprt Reprt buttn, a pp-up windw appears, select the lcatin where yu want t save the reprt, and select OK n the windw. The detailed scan reprt will be saved in the specified lcatin. Yu can check the reprt t verify if the scan results are what yu wanted. 8. Befre scanning the selected file, the tl will first validate if the check r test suite is crrect, if the selected check r test suite is nt crrect, after yu select the Scan buttn, the errr message will be displayed n the tl interface, yu can then review the lgs fr the detailed infrmatin. Cmpliance Guardian Installatin and Administratin User Guide 271

272 9. After the scan jb, a reprt is als generated in \AvePint\Cmpliance Guardian 4\Agent\bin\TDFValidatrReprt. The reprt cntains three kinds f files: The file that is scanned by Check Validatr. The HTML frmat f the scanned file. The reprt that cntains all f the scanned file s vilatins as well as the vilatin s lcatins. Figure 21: Check Validatin reprt. Related Cnfiguratin File The tl has a related cnfiguratin file named CCE.TDFValidatr.exe.cnfig, the file is lcated under the directry \AvePint\Cmpliance Guardian 4\Agent\bin directry. Figure 22: CCE.TDFValidatr.exe.cnfig file verview. Yu can cnfigure the Value attribute t specify the maximum scan time. If the time that the scan takes exceeds the specified scan time, an errr message will be displayed n the tl interface, and the scan will stp. By default, the value fr the Value attribute is 180 secnds. 272 Cmpliance Guardian Installatin and Administratin User Guide

273 Using Cmpliance Guardian Transactin Capture Cmpliance Guardian Transactin Capture is used t recrd the webpages that yu access, and then yu can save the recrded results as a transactin file, which is used by Cmpliance Guardian Website Scanner. The recrded URLs in the transactin file will be the start URLs used in Cmpliance Guardian scans. *Nte: Make sure Micrsft Visual C x86 Redistributable and Micrsft.NET Framewrk 3.5 r abve versin must be installed befre using Cmpliance Guardian Transactin Capture. System Requirements fr Using Cmpliance Guardian Transactin Capture Cmpliance Guardian Transactin Capture includes tw versins: AgentTlWebSiteRecrder_.NETv2.msi and AgentTlWebSiteRecrder_.NETv4.msi. Refer t the fllwing table fr the system requirements f the tw versins: Cmpliance Guardian Transactin Capture Installatin File Versins AgentTlWebSiteRecrder_.NETv2.msi Requirements Windws XP Windws Server 2003 Windws Vista Windws Server 2008 Windws 7 Windws Server 2008 R2 Windws Thin PC AgentTlWebSiteRecrder_.NETv4.msi Windws 8 Windws Server 2012 Windws 8.1 Windws Server 2012 R2 Cmpliance Guardian Installatin and Administratin User Guide 273

274 Installing Cmpliance Guardian Transactin Capture T install Cmpliance Guardian Transactin Capture, cmplete the fllwing steps: 1. Find the AgentTlWebSiteRecrder_.NETv2.msi r AgentTlWebSiteRecrder_.NETv4.msi file in...\cmpliance Guardian 4\Agent\bin\WebSiteRecrderInstallFiles. 2. Open the AgentTlWebSiteRecrder_.NETv2.msi r AgentTlWebSiteRecrder_.NETv4.msi. *Nte: Yu can decide the versin t install accrding t yur system. Refer t Cmpliance Guardian Prerequisites and System Requirements. 3. Select Install in the appeared drp-dwn menu. The Cmpliance Guardian Transactin Script Recrder Setup wizard appears, which helps yu t install the Cmpliance Guardian Transactin Capture tl. 4. Select Next n the wizard welcme page. 5. Select a flder where the related files f this tl will reside. The default lcatin is: C:\Prgram Files (x86)\avepint\cg Transactin Script Recrder\. Yu can select Brwse t select anther lcatin. Select the Disk Cst buttn under the Brwse buttn t view the drives yu can install the tl, and each drive's available and required disk space f the tl. Select Next n this page. 6. Cnfirm the installatin n the Cnfirm Installatin page, and select Next. 7. The tl will begin installing. 8. After the installatin cmpletes, select Clse t exit the installatin wizard. Using the Tl T use Cmpliance Guardian Transactin Capture, pen Windws Internet Explrer (x86) frm the path \Prgram Files (x86)\internet Explrer, select View n the Menu Bar, and select Explrer Bars. Yu will find Cmpliance Guardian Transactin Capture in the drp-dwn menu that appears. Select Cmpliance Guardian Transactin Capture t pen this tl. The tl interface appears n the bttm f the current webpage. Refer t the fllwing screensht: 274 Cmpliance Guardian Installatin and Administratin User Guide

275 Figure 23: The Cmpliance Guardian Transactin Capture interface. Operatin Field Yu can perfrm the fllwing actins in this field: Recrd On the webpage yu want t recrd, select the Recrd buttn. Cmpliance Guardian Transactin Capture will then start t recrd the webpages yu access frm this current webpage. The URLs that are recrded will be displayed n the Recrded Infrmatin Field. Stp Select the Stp buttn t stp recrding the webpages. Play Select the Play buttn. The series f webpages that yu have recrded will autmatically play as they are accessed. Reset Select the Reset buttn, all the recrded results will be cleared up. Save Select the Save buttn t save the series f peratin results as a transactin file. After select the Save buttn, the Save As windw pps up. Select a lcatin, and then select Save n the Save As windw t save the transactin file, which will be used fr Cmpliance Guardian Website Scanner. Optins Select the Optins buttn, a pp-up windw appears. Select the checkbx befre Capture the Ajax Request (XMLHttpRequest). Then Cmpliance Guardian Transactin Capture can recrd the webpages that use the Ajax Request. Delete Select a recrd in the Recrded Infrmatin Field, and select Delete, the recrd then will be deleted. Imprt Imprt a previusly saved transactin file. Yu can view the results that the transactin file recrds by selecting Play. Help Select the Help buttn t view the Help infrmatin. Recrded Infrmatin Field The recrded results will be displayed in this field. URL The webpage URLs that have been recrded. Status The status cde f a webpage. Dmain The dmain f the URL. Scan Select the checkbxes under this clumn. The crrespnding URL will be signed. After yu save the related transactin file fr Cmpliance Guardian Website Scanner, nly the URLs that are signed here can be used as the Start URLs t be scanned. Only the checkbx f the URL whse crrespnding status cde is 200 can be selected and scanned. Cmpliance Guardian Installatin and Administratin User Guide 275

276 Select the clse buttn ( Capture tl. ) n the tp-right crner t clse the Cmpliance Guardian Transactin 276 Cmpliance Guardian Installatin and Administratin User Guide

277 Mnitring Cmpliance Guardian Jb Perfrmance in Perfrmance Mnitr Cmpliance Guardian allws yu t mnitr the Cmpliance Guardian jb perfrmance in Perfrmance Mnitr. 1. On the machine where Cmpliance Guardian agent is installed, select Start > Administrative Tls > Perfrmance Mnitr. 2. Select Perfrmance Mnitr in the left pane, and then select the Add ( ) buttn in the right pane. The Add Cunters windw appears. 3. Find the Cmpliance Guardian categry, then add the crrespnding cunters. 4. Then, yu can view the Cmpliance Guardian jb perfrmance. 5. Yu can als create a new data set and then view the Cmpliance Guardian jb perfrmance reprt. Refer t the fllwing steps: a. Expand Data Cllectr Sets in the left pane. b. Right-click User Defined under Data Cllectr Sets. Select New in the appeared drpdwn list. Then, select Data Cllectr Set. c. Select the Create manually (Advanced) radi buttn, and enter a name in the Create new Data Cllectr Set windw. Select Next. d. Select the Perfrmance cunter checkbx and then select Next. e. Select Add. Then, add the Cmpliance Guardian categry cunters in the appeared windw, and select OK in the appeared windw. Specify the interval and units fr cllecting data. Select Next. f. Select a directry t stre the reprt. Select Next. g. Select Finish. The new data set is created. Select the data set under User Defined and then select Start t start cllecting the data. Select the data set and select Stp t stp cllecting data. Then, yu can view the reprt. Cmpliance Guardian Installatin and Administratin User Guide 277

278 Using the Fingerprinting Tl The fingerprinting tl is used t cmpare the files and then help yu t have a general view f file similarity fr using the Fingerprinting type check. The tl can achieve the fllwing functins: 1. Add sme files as templates in a Fingerprinting type check 2. Cmpare a file with ther files in a flder 3. Cmpare files in a flder and generate a matrix file reprting the similarity f these files 4. Based n the matrix reprt generated in functin 3, generate a file gruping the files whse similarity is greater than the specified similarity threshld In rder t realize the functins, the CCE.FingerPrintingTl.exe file must be run in the Cmmand Line. G t the machine with Cmpliance Guardian Agent installed and pen the \AvePint\Cmpliance Guardian 4\Agent\bin directry t find the CCE.FingerPrintingTl.exe file. On the machine, navigate t Start > All Prgrams > Accessries > Cmmand Prmpt. In the cmmandline interface, enter the directry. Fr example, C:\Prgram Files\AvePint\Cmpliance Guardian 4\Agent\bin\ CCE.FingerPrintingTl.exe, and press Enter. T add sme files as templates in a Fingerprinting type check, refer t the fllwing steps: 1. Enter the registerfile cmmand. 2. Enter the file cmmand, and then enter the template file path. Yu can als use * t match files. Fr example, enter C:\12*.dcx, then all f the DOCX files that start with 12 under disk C will be used as the template files. 3. Enter the tdf cmmand, and then enter the check file path. The template files will be used in this check. 4. Press Enter. Figure 24: Using the registerfile cmmand. T cmpare a file with ther files in a flder, refer t the fllwing steps: 1. Enter the cmparefile cmmand. 2. Enter the file cmmand, and then enter the file path. 278 Cmpliance Guardian Installatin and Administratin User Guide

279 3. Enter the flder cmmand after the file path, and then enter the flder path. The files in the first level f the flder will be used t cmpare with the specified file, the files in the sub flders f the specified flder will nt be used t cmpare with the specified file. 4. Enter the type cmmand and then enter RAW, TEXT r EXACT t specify the matching frm. Fr mre infrmatin n the matching frm, refer t Creating Fingerprinting Type Check. 5. Enter the utput cmmand and then enter the full path f the generated CSV reprt. 6. Press Enter. The specified CSV reprt will be generated in the specified path. Figure 25: Using the cmparefile cmmand. T cmpare files in a flder and generate a matrix file reprting the similarity f these files, refer t the fllwing steps: 1. Enter the buildcmparematrix cmmand. 2. Enter the flder cmmand, and then enter the flder path. The files in these flders will cmpare with each ther. 3. Enter the type cmmand and then enter RAW, TEXT r EXACT t specify the matching frm. 4. Enter the utput cmmand and then enter a full path f the generated CSV reprt. 5. Press Enter. The matrix CSV reprt will be generated in the specified path. Figure 26: Using the cmparefile cmmand. T generate a reprt gruping the files whse similarity is greater than the specified similarity threshld based n the functin 3, refer t the fllwing steps: 1. Enter the reprtcluster cmmand. 2. Enter the matrix cmmand, and then enter the full path f the matrix CSV reprt. 3. Enter the threshld cmmand, and then enter the similarity threshld. 4. Enter the utput cmmand, and then enter a full path f the generated reprt. Cmpliance Guardian Installatin and Administratin User Guide 279

280 5. Press Enter. The reprt will be generated under the specified path. The files whse similarity is equal t r greater than the specified threshld will be gruped in ne rw in the CSV file. Figure 27: Using the reprtcluster cmmand. 280 Cmpliance Guardian Installatin and Administratin User Guide

281 Using the Perfrmance Matrix Tl The perfrmance matrix tl allws yu t estimate the time f scanning files in yur envirnment. Navigate t \AvePint\Cmpliance Guardian 4\Agent\bin directry t find the CCE.ScanEstimate.exe file. Right-click the file, and then select Run as administratr t pen the tl. Cmplete the fllwing steps n the tl t estimate the scan time: 1. Generating the Average Speed f a Scan. 2. Prviding the Target Envirnment Infrmatin. 3. Estimating Scan Time. Generating the Average Speed f a Scan In the Step 1 field f the tl, the Built-in ptin is selected and the average speed is displayed, which means that the tl uses the built-in matrix file CCE.ScanEstimateBuildinMatrix.xml (resides in \AvePint\Cmpliance Guardian 4\Agent\bin) t estimate the average speed. Cmpliance Guardian Installatin and Administratin User Guide 281

282 Figure 28: Perfrmance Matrix Tl interface. If yu d nt want t use the built-in matrix file t generate the average speed, yu can select Generate a new ne. Then, select a test suite that yu want t use t scan files, and select a flder in which the files will be scanned by the selected test suite. Select Generate Matrix, and then select a lcatin t stre the generated file. The matrix file used t estimate the average time f the files scanned by the selected test suite will be generated. Yu can als edit the generated matrix file accrding t yur wn requirement. Select Select ne, and then select the desired matrix file. The average speed will be displayed. 282 Cmpliance Guardian Installatin and Administratin User Guide

283 Prviding the Target Envirnment Infrmatin In the Step 2 field f the tl, yu must prvide yur envirnment data size infrmatin t estimate the ttal time f scanning files. Specify ttal data size Select this ptin. Enter the ttal data size in the The ttal size is abut field and then select a unit. Specify the size f each file type Select this ptin, and the file types that exist in the matrix file (used t estimate the average speed in Step 1) are displayed. Enter the ttal data size f each file type. This is mre accurate t estimate the scan time than entering a ttal data size by selecting the Specify ttal data size ptin. Imprt discvery result file Imprt a discvery result file directly. The discvery result file can be generated by using the Discvery functin. Fr mre infrmatin n the functin, refer t Appendix H: Using the Discvery Functin. Estimating Scan Time After generating the average speed in step 1 and specifying the data size in step 2, select Estimate in step 3. The time f scanning data is generated and displayed. Select Exprt details t excel, and then select a lcatin t stre the exprted excel. There are three sheets in the exprted excel: Summary Display the summary f the scan settings, scanned data size, and the ttal scan time. File Cnversin Display the scanned file types and the time f extracting file cntent. A graph is als in the sheet displaying the file size and the extracted time. File Scan Display the scanned file types and the time f scanning the extracting file cntent. A graph is als in the sheet displaying the file size and the scan time. Cmpliance Guardian Installatin and Administratin User Guide 283

284 Figure 29: The exprted excel. 284 Cmpliance Guardian Installatin and Administratin User Guide

285 Appendix A: Using CustmScan in Cmpliance Guardian CustmScan is used t implement a custmized check methd n the check level, wrks as an extensin f current check types. It is used in cmbinatin with ther checks t find infrmatin n a file and act n it. Methd Define an Interface ICustmTDF in CCE, all the implementatin classes need t implement the interface. This interface is initially defined as: public interface ICustmTDF { } ReprtResult TrueResult { get; set; } ReprtResult FalseResult { get; set; } TDFCntentType CntentType { get; set; } TestResult Scan(ScanCntext cntext, ScanCntent cntent); ScanCntext and ScanCntent include everything a built-in check needs fr scanning: public class ScanCntent { // File extensin public string FileType; public string Url; // Original file path public string FilePath; // including ckie, SSL level, SharePint metadata etc. } public IDictinary<string, bject> Metadata; Cmpliance Guardian Installatin and Administratin User Guide 285

286 The fllwing cde is the check: <Tdf TdfID="CustmTDFID"> <ReprtText> <Name>CustmTDF</Name> <PlicyURL> <Descriptin>CustmTDF definitin</descriptin> <True result="pass">passed</true> <False result="fail">failed</false> </ReprtText> <CustmTDF Class="Namespace.Class, DllName" /> </Tdf> Refer t the fllwing helpful ntes: The custm DLL shuld implement the interface defined as abve. When scanning, CCE calls the cnstructr, passing the XML cntent as parameter. Then CCE calls the scan() methd defined in the interface. The result returned by the scan() methd shuld be treated as a regular check result. The fllwing is an example f a regular check result: public class TestResult { public string TdfId; public ReprtResult Status; //Check Result // A list f all vilatins public List<TestResultUnit> ResultList; } public class TestResultUnit { public string TdfId; public int Line; appear). public int Clumn; vilatins appear). 286 // Lcatin f vilatins (which lines the vilatins // Lcatin f vilatins (which clumns the Cmpliance Guardian Installatin and Administratin User Guide

287 public int StartIndex; public int Length; defining the actual result. // Lcatin by start index // Start Index and Length are used tgether fr public ListLcStatus Result; public string MatchResult; // Nte, Warn, Fail // The actual matched value. } After writing the check DLL file, yu must put it in \Cmpliance Guardian 4\Agent\Bin, then the CustmScan check wrks. CustmCheck CustmCheck is used t calculate the check digit n the result f the regular expressins, in rder t validate the result. Using CustmCheck Refer t the fllwing sectin fr using the CustmCheck functin. Methd Define an Interface IValidatin, all the implementatin classes need t implement the interface and expse a public methd Validate fr CCE t use them. This Interface is initially defined as: } public interface IValidatin { string Parameters { get; set; } bl Validate(string id); Cnfiguratin Define the DLL and the class cnfiguratin file CntentCmplianceCnfig.xml. The value f Class shuld be the full name f the class and the full name f the DLL, separated by a cmma (,). Name refers t the name f the checksum algrithm. Regex will call the algrithm frm this value. Nde <Parameters> is fr the parameters needed fr specific algrithms, all cntent will be passed internally as a string. <!-- CustmCheck Nde --> Cmpliance Guardian Installatin and Administratin User Guide 287

288 <CustmCheck Name="Credit Card Number" Class="DcAve.CntentCmpliance.Engine.Checksum, CmmnChecksum"> <Parameters> <![CDATA[ Parameter as string ]]> </Parameters> </CustmCheck> *Nte: In rder t lad the external DLLs, they must be put either in the agent\bin flder r in GAC. Example <!-- Canadian SIN & Credit Card Number--> <RegEx CaseSensitive="N" ListLcStatus="Fail" ListLc="Yes" SearchAll="True" TrueIf="NtFund" CustmCheck="Credit Card Number"> <![CDATA[(?<=^ \b)\d{3}([- ])\d{3}(\1)\d{3}(?=$ \b)]]> </RegEx>This is an example that hw a checksum is defined in check. Nte the checksum algrithm t the RegEx is defined by CustmCheck="Credit Card Number". A Class example which implements the interface: public class LuhnAlgrithm : IValidatin { { public string Parameters { get; set; } public LuhnAlgrithm(string parameters) } this.parameters = parameters; public bl Validate(string number) { if (string.isnullorempty(this.parameters)) { } else { return ValidateInternal(number); 288 Cmpliance Guardian Installatin and Administratin User Guide

289 return ValidateInternal(number, this.parameters); } } public bl ValidateInternal(string number) { // Methd withut parameter } public bl ValidateInternal(string number, string parameters) { // Methd with parameter } } Related Cnfiguratin File The cnfiguratin file CntentCmplianceCnfig.xml prvides several built-in CustmCheck methds. The cnfiguratin file resides in \Cmpliance Guardian 4\Agent\Bin. Yu can add yur custmized CustmCheck methds in the cnfiguratin file. Cmpliance Guardian Installatin and Administratin User Guide 289

290 Appendix B: Supprted File Types in Cmpliance Guardian Cnditin Supprted fr Scanning Supprted fr Adding Tag Supprted fr Redactin DOC DOCX XLS XLSX PPT PPTX PDF ASP ASPX HTM HTML TXT XML ZIP JSP PHP DOCX XLSX PDF HTM HTML ASPX PPTX PPT DOC XLS DOCX XLSX PPTX PDF HTML TXT File Type *Nte: In the XLS file and the XLSX file, the hidden sheet whse Visible prperty is set t 2 xlsheetveryhidden is supprted t be scanned. 290 Cmpliance Guardian Installatin and Administratin User Guide

291 *Nte: PDFs with unstructured textual cntent are nt supprted t be scanned in Cmpliance Guardian. *Nte: Cmpliance Guardian des nt supprt redacting hyperlinks in Office files (.dcx,.xlsx, and.pptx). The redactin fr Wrd files may impact the display f rws, paging, and layuts. *Nte: Cmpliance Guardian nly supprts the redactin f ASCII characters in PDFs. The redactin f PDF files may cause cntent t either disappear and/r appear verlapping. Cmpliance Guardian Installatin and Administratin User Guide 291

292 Appendix C: Using the Scan Engine API Refer t the infrmatin belw t use the Scan Engine API. Initialize the ScanEngine Class The use f Scan Engine API requires the supprt f the Cmpliance Guardian license. The third-party prject must be cmpiled in the perating system where the Cmpliance Guardian agent is installed, and the third-party prject must reference the CCE.Engine.dll in the bin flder f the Cmpliance Guardian agent installatin path. Currently, the Scan Engine supprts t perfrm the single thread scan. When initializing the ScanEngine class, the cnstructr requires taking ne argument with ScanSetting Class. The fllwing cding sample indicates the cnstructin: Figure 30: Cding sample 1. Parameters f the ScanEngine.Scan Methd The fllwing parameters are used fr this methd fr cmpleting the scan prgress. Figure 31: Parameters used fr the ScanEngine.Scan methd. List<string> xmls The list made up by multiple test suite strings. A string is in the XML frmat, it cmbines the test suite XML string with the check XML string. string url The riginal URL f the file that will be scanned. string filepath The physical strage path f the file that will be scanned r the flder path in which the files will be scanned. IDictinary<string, bject> metadata A dictinary which hlds the scanned file s related metadata infrmatin. Guid crelatinid Use the default value and d nt need t assign a value. 292 Cmpliance Guardian Installatin and Administratin User Guide

293 Usage Example Refer t the fllwing examples t understand hw t scan files using test suite (the cnfiguratin file f test suite used fr the Cmpliance Scanner). Scan Files Using Test Suite T cmbine files using test suite, cmplete the fllwing steps: 1. Cmbine checks accrding t the test suite XML file. Figure 32: The Test Suite XML file. Cmpliance Guardian Installatin and Administratin User Guide 293

294 Figure 33: Related Check ffice.a.1.xml. Figure 34: Related Check ffice.j.xml. With all test suite XML files and checks available, by using the GetC3sDefinitin methd in CntentCmplianceCllectinDefinitinUtility class, the required argument string xml required by ScanEngine.Scan can be returned. 294 Cmpliance Guardian Installatin and Administratin User Guide

295 Figure 35: Cding sample Set the riginal URL f the file that will be scanned. Figure 36: Set the riginal URL. 3. Set the physical strage path f the file that will be scanned. Figure 37: Set the physical strage path. 4. Set the scanned file s related metadata infrmatin. Figure 38: Set the scanned file s related metadata infrmatin. 5. Call the ScanEngine.Scan methd. Figure 39: Call the ScanEngine.Scan methd. Result Explanatin The screensht shws the sample wrd dcument cntaining a picture withut Alt Text, which vilates the scan language defined in the check 508.ffice.a.1.xml. Cmpliance Guardian Installatin and Administratin User Guide 295

296 Figure 40: Screensht f the sample Micrsft Wrd dcument 1. The screensht shws the pages in a sample wrd dcument with a page number set up. This fulfills the check 508.ffice.j.xml. Figure 41: Screensht f the sample Micrsft Wrd dcument Cmpliance Guardian Installatin and Administratin User Guide

297 Basing this sample dcument settings, the scan result status fr this wrd dcument shuld be Fail (the GetStatus value in the screensht. Furthermre, when drilling dwn t the details, the status (in the TestResultList) fr the check 508.ffice.a.1.xml is Fail, and the status fr check 508.ffice.j.xml is Pass. Figure 42: Scanned result 1. Figure 43: Scanned result 2. Cmpliance Guardian Installatin and Administratin User Guide 297

298 Figure 44: Scanned result 3. Scan Metadata Regarding the check language, the user is able t define a custmized check t perfrm a custmized scan accrding t their requirements. Amng all kinds f supprted check types, the SSL and Ckie Validatin type checks will require the scan engine t test the SSL level r Ckie dmain and expiratin. The Cmpliance Guardian SharePint metadata test is supprted in the installatin package. Therefre, fr Scan Engine API, the scan methd requires the SSL level, Ckie infrmatin, r SharePint Metadata fr the surce dcument, t be passed via an argument metadata if the crrespnding SSL/Ckie /Metadata checking is defined and used in test suite. Dictinary<string, bject> metadata = new Dictinary<string, bject>(); Fr SSL Level infrmatin, if the surce site is under the HTTPS prtcl and SSL level checking check is used, the SSL level fr the surce site shuld be set in metadata. The key fr the scan engine t recgnize SSL infrmatin is PublicKeySize, and the security level value shuld be an Integer. Figure 45: The key and value fr SSL Level infrmatin. Fr ckie infrmatin, if the ckie validatin check is used in the test suite, the ckie cllectin shuld be passed via the metadata Dictinary. The Key shuld be Ckie and the value shuld be a 298 Cmpliance Guardian Installatin and Administratin User Guide

299 System.Net.CkieCllectin bject, which cntains all the ckie bjects retrieved frm the surce envirnment. Figure 46: The key and value fr ckie infrmatin. Fr SharePint Metadata infrmatin, the Key shuld be Metadata, hwever the Value bject shuld be anther Dictinary<string, ClumnObject> instance, which uses the SharePint clumn name as the key. The bject ClumnObject is defined in CmmnCntract.dll. *Ntes: Fr SharePint build-in clumns, if the ClumnObject s attribute public bl IsBuildIn { get; set; } is true, the clumn s display name will be ignred by the scan engine during the scanning prgress. Figure 47: The key and value fr SharePint metadata. CCE.EngineWrker.exe Mde Use the parameter f the ScanSetting s bject t mdify the methd f starting CCE.EngineWrker.exe. After the ScanSetting s bject setting is created, the attribute CmmunicatinSetting f the ScanSetting s bject is used t cnfigure the methd f starting CCE.EngineWrker.exe: Figure 48: The cnditin after the ScanSetting s bject setting is created. Cmpliance Guardian Installatin and Administratin User Guide 299

300 IsSinglePrcess This attribute is used t cnfigure if the CCE.EngineWrker.exe is started using the singe prcess. The default value is false. If the value f this attribute is set t false: After creating the engine bject, the ScanEngine.Scan methd will be called and the CCE.EngineWrker.exe will start t scan files. Figure 49: The CCE.EngineWrker.exe starts. If the value f this attribute is set t true: The CCE.EngineWrker.exe will nt be started fr scanning files. IsRemte The attribute will take affect when the value f IsSinglePrcess is set t false. It is used t cnfigure whether the CCE.EngineWrker.exe prcess and the user prcess that is creating the engine bject are running in a same machine where the crrespnding agent is installed. If the value f this attribute is set t true, the CCE.EngineWrker.exe prcess can run n anther machine where anther agent (this agent and the agent that is used t create engine bject must cnnect t a same server) is installed. The values f the RemteIp nde and the RemtePrt nde must be specified. The default values are the IP and prt f the machine where the agent that creates the engine bject is installed. The CCE.EngineWrker.exe prcess will run n the specified machine (accrding t the values yu specified fr the RemteIp nde and the RemtePrt nde). If the value f this attribute is set t false, the CCE.EngineWrker.exe prcess will run n the machine where the agent that creates the engine bject. The values f the RemteIp nde and the RemtePrt nde are invalid, and d nt need t be specified. ScanTimeOut The attribute will take effect when the value f the IsSinglePrcess attribute is false. It is used t cnfigure the timeut perid. The default value is 180. The unit is secnds. RetryTimes The attribute will take effect when the value f the IsSinglePrcess attribute is false. It is used t define the times f retrying when an errr ccurred during scanning a file. The default value is 3. CheckInterval The attribute will take effect when the value f the IsSinglePrcess attribute is false. It is used t define the interval f checking the Keepalive thread. The default value is 60. The unit is secnds. 300 Cmpliance Guardian Installatin and Administratin User Guide

301 Appendix D: Using the CmplianceSetting.cnfig file The CmplianceSetting.cnfig file can be used t realize the fllwing functins. Cnfiguring t Scan User Prfiles Cmpliance Guardian supprts scanning user prperties and scial ntes in user prfiles. Cmpliance Guardian accesses the user prfiles thrugh the persnal site. Hwever, if the persnal site is nt created, yu cannt scan the crrespnding user prfile since there is n persnal site nde in the tree. Cmpliance Guardian prvides a methd t scan the user prfile in Cmpliance Scanner and Scheduled Classificatin Scanner when the persnal site is nt created. The User Prfile Service nde is laded n the farm tree by changing the UserPrfile Used="false" nde in the CmplianceSetting.cnfig file. T change the nde fr displaying the User Prfile Service nde in the tree, cmplete the fllwing steps: 1. G t the machines with Cmpliance Guardian Manager installed. 2. Open the \Cmpliance Guardian 4\Manager\Cntrl\Cnfig directry t find the CmplianceSetting.cnfig file. 3. Open the CmplianceSetting.cnfig file. 4. Lcate the UserPrfile nde. 5. Change the value f the Used attribute t true. 6. Save the file. The User Prfile Service nde appears in the farm tree in Cmpliance Scanner and Scheduled Classificatin Scanner. Cnfiguring Restricted Attachment Types and Mdifying the Allwed Maximum Size f Upladed Attachments Incident Manager allws the ptin t uplad attachments when yu add a cmment t a quarantined, encrypted r redacted file. Yu can cnfigure the file types that are restricted t uplad t Classificatin Reprt > Incident Manager as attachments, and mdify the allwed maximum size f the upladed file by cnfiguring the CmplianceSetting.cnfig file. Refer t the fllwing steps: 1. G t the machines with Cmpliance Guardian Manager installed. 2. Open the \Cmpliance Guardian\Manager\Cntrl\Cnfig directry t find the CmplianceSetting.cnfig file. 3. Open the CmplianceSetting.cnfig file. 4. Lcate the IMSAttachmentSetting nde: Cmpliance Guardian Installatin and Administratin User Guide 301

302 The value is the current allwed maximum size f uplading each file. Yu can change the size value t the desired size. Yu can als change the unit f the size by change the value f unit. fileexensinlimit The values are the files that are currently restricted t uplad t Cmpliance Guardian. Use the cmma (,) as the separatr. Figure 50: The fileupladsettingcnfiguratin nde in the cnfiguratin file. 5. Save the file. Custmizing the Directry Where the Checks r Test suites Will Be Temprarily Unzipped When a user uplads checks r test suites t Cmpliance Guardian, the ZIP file f the checks r test suites will be temprarily unzipped t a default directry. The default directry is \Cmpliance Guardian 4\Manager\Wrk. The full path f the checks r test suites that will be upladed is \Cmpliance Guardian 4\Manager\Wrk\Test Suite Name\Check Name r \Cmpliance Guardian 4\Manager\Wrk\Test Suite Name. Due t the limitatin f Micrsft Windws, the length f the check r test suite s full path cannt exceed 260 characters, r the check r test suite will nt be upladed t Cmpliance Guardian. The CmplianceSetting.cnfig file allws yu t custmize the directry where the checks r test suites will be temprarily unzipped thrugh the custmized directry t reduce the length f the check r test suite s full path. T change the default directry where the checks r test suites will be temprarily unzipped, cmplete the fllwing steps: 1. G t the machines with Cmpliance Guardian Manager installed and pen the \Cmpliance Guardian 4\Manager\Cntrl\Cnfig directry t find the CmplianceSetting.cnfig file. 2. Open the CmplianceSetting.cnfig file and find the CnfigureFilePath nde. 3. Change the value f the IsCnfigured attribute t True. Then specify a path fr the path attribute. Restart the Cmpliance Guardian Timer Service. The checks r test suites will be temprarily unzipped under the specified path. *Nte: The path that yu specified fr the path attribute must exist. 302 Cmpliance Guardian Installatin and Administratin User Guide

303 Appendix E: Cnfiguring fr Supprting Lad Balancing Cnfiguring fr Supprting Netwrk Lad Balancing Cmpliance Guardian supprts Netwrk Lad Balancing. Wrking Prcess Fr the Cmpliance Guardian Agents in agent grup: Users first cnfigure several file share lcatins n the Cmpliance Guardian Agent servers. The Agents run jbs frm Cmpliance Guardian Manager. The Agents send the files that will be scanned t the file share lcatins, and then pass the UNC path f the temprary file in file share lcatins t Cmpliance Guardian engine wrkers (The Cmpliance Guardian Agents added in cluster are used as the Cmpliance Guardian engine wrkers). Fr the Cmpliance Guardian Agents in NLB cluster: The Cmpliance Guardian Agents are used as Cmpliance Guardian engine wrkers. They are nt assigned jbs frm Cmpliance Guardian Manager. The Cmpliance Guardian Agents scan the files in file share lcatins. Installing Netwrk Lad Balancing Feature The Netwrk Lad Balancing feature must be installed in the Cmpliance Guardian Agent servers that yu want t be used as Cmpliance Guardian engine wrkers. Ensure that tw netwrk interface cards must be installed n the machines befre installing the feature. T install the NLB feature, cmplete the fllwing steps: 1. Navigate t Administrative Tls > Server Manager. 2. Select Features in the left pane. 3. Select Add Features in the right pane. Cmpliance Guardian Installatin and Administratin User Guide 303

304 4. In the Add Features Wizard, select the checkbx befre Netwrk Lad Balancing in the Features field f the middle pane. 5. Select Install. Editing Netwrk Lad Balancing Cluster Prperties After installing the NLB feature, pen Netwrk Lad Balancing Manager, and then add a cluster. Add the Cmpliance Agent servers that yu want t be used as Cmpliance Guardian engine wrkers t the cluster. Yu must edit the cluster prperties. T edit the cluster prperties, cmplete the fllwing steps: 1. Duble select the cluster. 2. Select Cluster Prperties in the drp-dwn list. The Cluster Prperties windw appears. 3. Select the Cluster Parameters tab, and make sure the Unicast mde is selected. 4. Select the Prt Rules tab. 5. Select Edit. The Add/Edit Prt Rule windw appears. 6. Edit the fllwing settings in the Add/Edit Prt Rule windw: Deselect the checkbx befre All in the Cluster IP address field. Select TCP in the Prtcls field. Select Nne fr Affinity in the Filtering mde field. 7. Select OK in the Add/Edit Prt Rule windw. 8. Select OK in the Cluster Prperties windw. Cnfiguring File Share Lcatins File share lcatins must be cnfigured fr string the files that will be scanned temprarily. All f the Cmpliance Guardian Agents must cnfigure the file share lcatins. T cnfigure file share lcatins n the Cmpliance Guardian Agent servers, cmplete the fllwing steps: 1. Find the CntentCmplianceCnfig.xml file under the path \Cmpliance Guardian 4\Agent\Bin. 2. Open the CntentCmplianceCnfig.xml file with Ntepad. 3. Find the <FileShares> nde. 4. Specify the username and passwrd t access the file share lcatin. 304 Cmpliance Guardian Installatin and Administratin User Guide

305 5. Specify the file share path. Fr example: <FileShares> <FS> <User>bj\administratr</User> <Passwrd>encrypted passwrd</passwrd> <Path>\\BJ\shared</Path> </FS> </FileShares> Yu can cnfigure several file share lcatins fr the cnsideratin f perfrmance by adding mre <FS> ndes. Als yu can add, edit r delete the ndes thrugh the CCE.EngineWrker.exe file. Refer t Operatins n the <FS> Nde. Fr security cnsideratins, the passwrd must be encrypted. Refer t Encrypting Passwrds fr Accessing File Share Lcatins fr hw t encrypt the passwrd. 6. Save the CntentCmplianceCnfig.xml file. *Nte: The file share settings cnfigured fr each Cmpliance Guardian agent servers must be same. Using CCE.EngineService.exe file t Encrypt Passwrds and D Operatins n the <FS> Nde Refer t the fllwing sectin fr using CCE.EngineService.exe file t encrypt passwrds and d peratins n the <FileShares> nde. Encrypting Passwrds fr Accessing File Share Lcatins Fr security cnsideratins, the passwrd used t access the file share lcatin must be encrypted. Refer t the fllwing steps t encrypt the passwrd. 1. Find the cmd.exe n the servers where Cmpliance Guardian Agents (added in the agent grup) install. 2. Select cmd.exe, and then select Run as administratr. The cmmand line interface appears. 3. Enter cd and the path f the CCE.EngineWrker.exe: \Cmpliance Guardian 4\Agent\Bin. If the file is nt in the disk C, yu must add \disk befre the path, fr example: cd /d d:\avepint\cmpliance Guardian 4\Agent\bin. Press Enter. 4. Enter \Cmpliance Guardian 4\Agent\Bin\CCE.EngineWrker.exe, and then enter the cmmand encrypt. Press Enter. The passwrd will be encrypted. Cmpliance Guardian Installatin and Administratin User Guide 305

306 Figure 51: Using CCE.EngineWrker.exe and the cmmand encrypt t encrypt the passwrd. *Nte: Yu must use CCE.EngineWrker.exe and the cmmand encrypt t encrypt the passwrd in all f the servers where Cmpliance Guardian Agents (added in the agent grup) install. Operatins n the <FS> Nde Yu can use the CCE.EngineWrker.exe file t add, edit and delete the <FS> nde. After yu encrypt the passwrd (refer t Encrypting Passwrds fr Accessing File Share Lcatins), the message Please select the peratin <A=Add; M=Mdified; D=Delete; L=List; E=Exit; H=Help> appears in the cmmand line. A=Add Enter A t add anther <FS> nde. M=Mdified Enter M t mdify the <FS> nde. D=Delete Enter D t delete a <FS> nde. L=List Enter L t list all f the <FS> ndes. E=Exit Enter E t exit the cmmand line interface. H=Help Enter H t get the help infrmatin. 306 Cmpliance Guardian Installatin and Administratin User Guide

307 Figure 52: Ding Operatins n the <FS> Nde. Cnfiguring Cmmunicatin Settings All f the Cmpliance Guardian Agents must cnfigure the cmmunicatin settings fr supprting Netwrk Lad Balancing. T cnfigure the cmmunicatin settings, cmplete the fllwing steps: 1. Find the CntentCmplianceCnfig.xml file under the path \Cmpliance Guardian 4\Agent\Bin. 2. Open the CntentCmplianceCnfig.xml file with Ntepad. 3. Find the <Cmmunicatin> nde. Fr the agent server that has been added in the cluster, the first line f the nde is: <Cmmunicatin IsSinglePrcess="False" IsRemte="False" InCluster="True"> Fr the agent server that has been added int the agent grup, the first line f the nde is: <Cmmunicatin IsSinglePrcess="False" IsRemte="True" InCluster="False"> Cnfigure the fllwing attributes fr the <Cmmunicatin> nde t supprt Netwrk Lad Balancing: RemteIP Enter the cluster IP address as the attribute s value. RemtePrt Enter the cluster IP address crrespnding prt. ScanTimeOut Enter the timeut value fr a scan. This is ptinal. The default value is 180 secnds. Cmpliance Guardian Installatin and Administratin User Guide 307

308 RetryTimes Enter the value f the retrying scan times. This is ptinal. The default value is 3 times. CheckInterval Enter the interval f checking scanning jb. This is ptinal. The default value is 60 secnds. *Nte: The value f the RemteIP attribute and the value f the RemtePrt attribute cnfigured fr each server must be same. Cntrl Service Lad Balancing Refer t the fllwing sectins fr details abut the Cmpliance Guardian Cntrl Service lad balancing. Installing Cmpliance Guardian Manager Cntrl Service Lad Balancing Envirnment T install the Cmpliance Guardian Manager Cntrl Service Lad Balancing envirnment, cmplete the fllwing steps: 1. Prepare the envirnment. a. Cnfigure Windws Netwrk Lad Balancing. There are tw ndes in the envirnment, which are nde A and nde B. Nde A s IP address is IP02 and nde B s IP address is IP03. b. The public IP address is IP01: c. Nde A s IP address IP02 is , its hstname is PerfA7. d. Nde B s IP address IP03 is , its hstname is PerfB7. 2. Install Cmpliance Guardian Manager Cntrl service Cntrl01 n nde A with its wn IP02/Hstname. 308 Cmpliance Guardian Installatin and Administratin User Guide

309 Figure 53: Cntrl Service Cnfiguratin. 3. Install Cmpliance Guardian Manager Cntrl service Cntrl02 n nde B with its wn IP03/Hstname. *Nte: Make sure that the Database Server and Cntrl Service database names entered in the Cntrl Database Server and Cntrl Service Database Name fields are the nes used when installing Cmpliance Guardian Manager Cntrl service Cntrl01 and the passphrase is the ne used when installing Cmpliance Guardian Manager service Cntrl01. Cmpliance Guardian Installatin and Administratin User Guide 309

310 Figure 54: Cntrl Service Cnfiguratin. 4. When installing Cmpliance Guardian Agents t cnnect t Cntrl Service hst, ensure using the public IP IP01 as Cntrl Service Hst. 310 Cmpliance Guardian Installatin and Administratin User Guide

311 Figure 55: Cmmunicatin Cnfiguratin. The installed Cmpliance Guardian Manager Cntrl Service Lad Balancing envirnment is based n the lad balancing f the Windws Netwrk Lad Balancing envirnment. Cmpliance Guardian Manager Cntrl Service Lad Balancing fulfills Lad Balancing and Cntrl Service High Availability. Cmpliance Guardian Manager Cntrl Service Lad Balancing supprts t access and perate Cmpliance Guardian Manager by using the public IP address IP01. Windws Netwrk Lad Balancing will autmatically handle the received requests and send them t the ptimal nde. The Cmpliance Guardian Manager Cntrl service f the nde that is chsen by Windws Netwrk Lad Balancing will then handle the request. When turning ff the netwrk f ne nde that has installed Cmpliance Guardian Manager Cntrl Service, ther Cntrl Services will cntinue wrking as usual. *Nte: In a Cmpliance Guardian Manager Cntrl Service Lad Balancing envirnment, all f the Cntrl services will perate cperatively and are regarded as ne Cntrl service fr the end users; s issues may ccur when invlving the lcal files and lcal machine s memry status. Therefre, it is recmmended cnfiguring a UNC path as the Jb Reprt Path befre running any jb. Cmpliance Guardian Installatin and Administratin User Guide 311

312 Appendix F: Cmpliance Guardian Cntrl Service Disaster Recvery Refer t the fllwing sectins fr details abut Cmpliance Guardian Cntrl Service disaster recvery. Preparatins and Cnfiguratin The fllwing sectins prvide a slutin fr the Cmpliance Guardian Manager Cntrl service disaster recvery. Prerequisite Prepare a prductin (PROD) envirnment and a disaster recvery (DR) envirnment fr simulating the Cntrl service disaster recvery prcess in yur testing envirnment. Make sure a DNS Alias Recrd fr the machine where the Cmpliance Guardian Manager Cntrl Service n the PROD is installed has been created n yur DNS server. SQL Express is unsupprted fr the Cmpliance Guardian Manager Cntrl Service disaster recvery. Cmpliance Guardian Installatin Install the Cmpliance Guardian platfrm using SQL databases n bth PROD and DR envirnments respectively: Install Cmpliance Guardian Manager Cntrl Services fr bth PROD and DR envirnments. Make sure the name f Cmpliance Guardian Manager Databases f the PROD and DR envirnments are the same. Cntrl Database name: CmplianceGuardian_CntrlDB *Nte: The Cmpliance Guardian Cntrl database must have the same passphrase in PROD and DR envirnments. Create the Cmpliance Reprt Database f the PROD envirnment. Reprt Database name: CmplianceGuardian_ReprtDB Install Cmpliance Guardian Agents n bth PROD and DR envirnments and have all f them cnnected t the Cmpliance Guardian Manager Cntrl service where installed n PROD. 312 Cmpliance Guardian Installatin and Administratin User Guide

313 Figure 56: Cmpliance Guardian Agent Cnfiguratin. *Nte: Make sure all f the Cmpliance Guardian Agents are cnnected t the same DNS Alias recrd fr the machine where Cmpliance Guardian Manager Cntrl Service n the PROD is installed. Synchrnizing Databases frm PROD Envirnment t DR Envirnment Refer t the fllwing sectins fr details abut synchrnizing databases frm the PROD envirnment t the DR envirnment. Deleting the Specified Databases frm the SQL Instance at the DR Side In rder t set up SQL mirrring r lg shipping, the empty database f the DR envirnment needs t be deleted first. Stp the Cmpliance Guardian Manager Cntrl Service at the DR side and delete the fllwing database: Cntrl Database: CmplianceGuardian_CntrlDB *Nte: This step is preparing fr synchrnizing the prductin Cmpliance Guardian Manager databases t the SQL instance f the DR side. Setting Up Database Synchrnizatin PROD SQL Instance DR SQL Instance CmplianceGuardian_CntrlDB CmplianceGuardian_CntrlDB CmplianceGuardian_ReprtDB CmplianceGuardian_ReprtDB There are three ways t d database synchrnizatin: Database SQL Lg Shipping, SQL Mirrring, and Availability Grup (if SQL 2012). *Nte: Change the Recvery Mde f the Cmpliance Guardian databases t full befre setting up the Synchrnizatin. Simulating the Disaster Recvery Prcess T simulate the disaster recvery prcess, cmplete the fllwing steps: Cmpliance Guardian Installatin and Administratin User Guide 313

314 Shut dwn the PROD envirnment (fr testing purpses). Start up the database n DR envirnment. Start the Cmpliance Guardian Manager Cntrl Service at the DR side. Start all f the Cmpliance Guardian Manager Cntrl Services within the DR envirnment. Make sure all f the Cmpliance Guardian Manager Cntrl Services are started befre prceeding t the next step. Switch t the DR Cmpliance Guardian Manager Cntrl Service in DNS Alias Recrd. G t the DNS server and change the IP address f the DNS alias recrd. Mdify the IP address t the ne f the machine where the Cmpliance Guardian Manager Cntrl Service is installed n DR envirnment. 314 Cmpliance Guardian Installatin and Administratin User Guide

315 Appendix G: Limitatins f Scanning Oracle Database and SQL Server Prerequisite and Limitatin f Scanning Oracle Database Cmpliance Guardian supprts scanning Oracle Database. Befre yu can begin a scan in Oracle yu have t cmplete the prerequisites. There are sme limitatin t this feature. Prerequisite Befre yu run an Oracle Database scan make sure the.net framewrk versin 4.0 r abve is installed and ODF.NET Prvider is installed. Installing ODP.NET Prvider Refer t the fllwing steps t install ODP.NET Prvider: *Nte: Yu must have the lcal administratr permissin fr installing ODP.NET Prvider. 1. Open the hyperlink If yur cmputer is 32-bit, select 32-bit ODAC Xcpy Dwnlads; if yur cmputer is 64-bit, select 64-bit ODAC Dwnlads in the pened webpage. Figure 57: Oracle Data Access Cmpnents (ODAC) fr Windws Dwnlads interface. Cmpliance Guardian Installatin and Administratin User Guide 315

316 2. The Dwnlads interface appears after yu select 32-bit ODAC Xcpy Dwnlads r 64-bit ODAC Dwnlads. Select ODP.NET_MangedSerialNumber.zip t dwnlad. Figure 58: 32-bit Oracle Data Access Cmpnents (ODAC) Dwnlads interface. Figure 59: 64-bit Oracle Data Access Cmpnents (ODAC) Dwnlads interface. 3. After dwnlad the Zip file, unzip it t a specified lcatin, fr example: C:\ODP.NET_Managed Open the unzipped flder ODP.NET_ManagedSerialNumber\dp.net\managed\64 r ODP.NET_Managedxxx\dp.net\managed\32, and then find cnfigure.bat. Right-click cnfigure.bat, and select Run as administratr t install ODP.NET Prvider. 316 Cmpliance Guardian Installatin and Administratin User Guide

317 Figure 60: Finding cnfigure.bat. Limitatin f Scanning Oracle Database There are sme limitatins fr scanning Oracle database: The table must include primary key r index t be scanned in Cmpliance Guardian. A table that des include a primary key r index will nt be scanned. Functin-based Indexes are nt supprted. The field in the bject type cannt be defined as index. If yu want t perfrm the incremental scan jb, Change Data Capture must be enabled. Fr details abut hw t enable Change Data Capture and the related perfrmance details, refer t Nte that Oracle 9i nly supprts Synchrnus Change Data Capture. The captured clumns must include a cmplete unique index list, r include the primary key clumns. Befre enabling Change Data Capture, make sure the time zne f the database is same as the hst where the database service resides. When enabling Change Data Capture, pass the parameter "timestamp=>'y'" t DBMS_CDC_PUBLISH.CREATE_CHANGE_TABLE t generate the timestamp clumn. After enabling Change Data Capture, if yu use a user (fr example, user1) t cnnect t the Oracle database, but the Change Data Capture publisher is anther user (fr example, user2), yu must run the fllwing cmmand t grant the user1 the SELECT permissin t the captured table, r the result f querying the table will nt return: GRANT SELECT ON publisher user name. captured table name t the user used t cnnect t the Oracle database. Fr example: GRANT SELECT ON "user2". table1 t user2. Cmpliance Guardian Installatin and Administratin User Guide 317

318 Limitatin f Scanning SQL Server There are sme limitatin when scanning SQL server in Cmpliance Guardian. The table must include primary key r unique index t be scanned in Cmpliance Guardian. The clumn whse type is CLR is nt supprted. If the table cntains multiple unique indexes and als cntains the primary key, the key has the pririty t be picked up t identify the table rw; if the table des nt have key, Cmpliance Guardian will select the index whse size is the smallest ne t identify the table rw. If yu want t perfrm the incremental scan jb, Change Data Capture must be enabled. Fr details abut hw t enable Change Data Capture, refer t fr details abut the perfrmance details after enabling Change Data Capture, refer t fr details abut the increase f the disk space, refer t the Remarks sectin in The captured clumns must include a cmplete unique index list, r include the primary key clumns. Yu must adjust the schedule f Change Data Capture cleanup jb and adjust the Cmpliance Guardian incremental jb schedule. Fr details abut the Change Data Capture cleanup jb schedule, refer t If yu have enabled multiple Change Data Capture instances (nly tw Change Data Capture instances can be enabled n ne table at mst) n a table, Cmpliance Guardian first selects the Change Data Capture instance that cntains the clumns f the unique index (whse size is the smallest) t scan cntent; if bth f the Change Data Capture instances cntain the clumns f the unique index, the instance that captured mre clumns will be used. SQL Server 2005 des nt supprt Change Data Capture. The incremental scan jb will fail if Cmpliance Guardian scans SQL Server 2005 database. 318 Cmpliance Guardian Installatin and Administratin User Guide

319 Appendix H: Using the Discvery Functin Cmpliance Guardian supprts a discvery functin. Yu can use the EXE File and BAT File t achieve the fllwing requirements: Discver the number f files and items in the SharePint scpes (site cllectin, site r list). Calculate the number f file types and the number f files in each file type. Discver the number f files scanned by the Cmpliance Guardian engine, and the number f files scanned by ifilter. Calculate the ttal size f files and items in each SharePint scpe (site cllectin, site r list). Calculate the size f files in each file type. Fr details, refer t Using the EXE File and Using the BAT File. Yu can use the script t achieve the discvery functin. Fr details, refer t Using the Script. Using the EXE File 1. G t the machines with Cmpliance Guardian Agent installed and pen the \Cmpliance Guardian 4\Agent\Bin directry t find the CCS.Tlkit.v2.exe r CCS.Tlkit.v4.exe file. 2. In the SharePint 2007 r SharePint 2010 envirnment, select CCS.Tlkit.v2.exe; in the SharePint 2013 envirnment, select CCS.Tlkit.v4.exe. 3. Select Run as administratr. The cmmand line interface appears. 4. Enter spd t select the Discvery SharePint functin. 5. Enter the jb mde. 1 Enter 1 and then enter the URL f the site cllectin, site r list that will be discvered. Then, enter the scpe level. 2 Enter 2 and then enter a path f a CSV file cntaining the URLs that will be discvered. Yu can discvery multiple site cllectins, sites r lists by entering 2. Fr details n cnfiguring the CSV file, refer t Cnfiguring the CSV File. Cmpliance Guardian Installatin and Administratin User Guide 319

320 Figure 61: Enter the jb mde. 6. Enter the flder path f the exprted file that cntains the discvery results. 7. The tl take actin and then exprt a file with the discvery results in the specified flder path. Using the BAT File Refer t the fllwing step t create a BAT file t realize the functin. 1. Create an XML file under the directry \Cmpliance Guardian 4\Agent\Bin. 2. Cnfigure the file: cd Enter the path f the CCS.Tlkit.v2.exe r CCS.Tlkit.v4.exe file that will be invked. Enter spd t use the discvery functin. -Lcatin Enter the scpe URL r enter a path f a CSV file that cntains the URLs that will be discvered. Fr details n cnfiguring the CSV file, refer t xx. If yu enter a scpe URL, yu must enter scpe and then enter the scpe level. -path Enter the path f the exprted file with the discvery results. Figure 62: The XML File. 3. Save the file. 4. Change the file s extensin frm.xml t.bat. 5. Duble-click the BAT file. The discvery prgress will start. Once the prcess has finished yu can check the results in the specified flder. Cnfiguring the CSV File Yu must specify tw clumns in the CSV file: URL and Type: 320 Cmpliance Guardian Installatin and Administratin User Guide

321 URL The URL f the site cllectin, site r list. Type The scpe type: Site Cllectin, Site r List. Figure 63: The CSV File. Using the Script Yu can use the fllwing script files t achieve the discvery functin: Scripts used t discver data in SharePint (yu can find them in \Cmpliance Guardian 4\Agent\Bin\DiscverScripts\SharePint): SPSiteCllectinDiscver.ps1 Discver the number f sites in a specified site cllectin. SPSiteCllectinFileTypeAndSizeDiscver.ps1 Discver the number f file types, the number f files in each file type, and the size f each file type in a specified site cllectin. SPSiteCllectinItemCuntAndSizeDiscver.ps1 Discver the size and the number f the items, files, attachments, and versins in a specified site cllectin. SPSiteCllectinFileSizeChecker.ps1 Discver the files and the number f the files whse sizes exceed the specified size in a specified site cllectin. If yu want t use this script file, yu must edit the script file befre running it. Refer t the fllwing steps t edit the file: i. Open the file with Ntepad: ii. Find the $checksize=30*1024*1024 nde. Change 30 t a specified number. By default, the number is 30, and the unit is 1024*1024, which represents 30 MB. The files whse sizes are greater than 30 MB will be discvered. Change the number. Yu can als change the unit t 1024 which represents KB, r change the unit t 1024*1024*1024 which represents GB. iii. Save the file. Cmpliance Guardian Installatin and Administratin User Guide 321

322 Figure 64: The nde in the SPSiteCllectinFileSizeChecker.ps1 file. SPWebapplicatinDiscver.ps1 Discver the number f site cllectins in a specified Web applicatin, and the number f sites in each site cllectin. SPWebApplicatinFileTypeAndSizeDiscver.ps1 Discver the number f file types in a specified Web applicatin, the number f files in each file type, and the size f each file type; discver the number f file types in each site cllectin f the specified Web applicatin, the number f files in each file type in each site cllectin, and the size f each file type in each site cllectin. SPWebApplicatinItemCuntAndSizeDiscver.ps1 Discver the size and the number f the items, files, attachments, and versins in a specified Web applicatin; discver the size and the number f the items, files, attachments, and versins in each site cllectin f the specified Web applicatin. SPWebApplicatinFileSizeChecker.ps1 Discver the files and the number f the files whse sizes exceed the specified size in a specified Web applicatin. If yu want t use this script file, yu must edit the script file befre running it. Open the file, find the $checksize=30*1024*1024 nde, then change the size t a desired ne. 322 Cmpliance Guardian Installatin and Administratin User Guide

323 Figure 65: The nde in the SPWebApplicatinFileSizeChecker.ps1 file. Scripts used t discver data in File System (yu can find them in \Cmpliance Guardian 4\Agent\Bin\DiscverScripts\FileSystem): FileSystemFlderDiscver.ps1 Discver the number f sub flders in a specified flder, and the ttal number f files in the specified flder. FileSystemFileTypeAndSizeDiscver.ps1 Discver the number f file types, the number f files in each file type, and the size f each file type in a specified flder. FileSystemFlderFileSizeChecker.ps1 Discver the files and the number f the files whse sizes exceed the specified size in a specified flder. If yu want t use this script file, yu must edit the script file befre running it. Open the file, find the $checksize=30*1024*1024 nde, then change the size t a desired ne. Cmpliance Guardian Installatin and Administratin User Guide 323

324 Figure 66: The nde in the FileSystemFlderFileSizeChecker.ps1 file. Running the Script t Generate Discvery Results Refer t the fllwing steps t run the script t generate the discvery results: 1. Navigate t Start > Administrative Tls > Windws PwerShell Mdules, and select Windws PwerShell Mdules t prmpt the cmmand line windw. 2. Drag the crrespnding script file t the appeared cmmand line windw, and press Enter n yur keybard. Then, enter the crrespnding URL. *Nte: If the script file URL cntains a space, after yu pen the cmmand windw, enter &, and leave a space by pressing yur space bar n yur keybard. Then, drag the crrespnding script file; If the script file URL des nt cntain any space, after yu pen the cmmand windw, drag the crrespnding script file int the cmmand line windw directly. 3. Press Enter. 4. After the jb finishes, the discvery result file and the lg file are generated. The reprt path is displayed in the cmmand line windw. Yu can g t the reprt path t find the discvery result file and the lg file. The result file name is script file name_ URL.csv, and the lg file name is script file name_ URL.lg. 324 Cmpliance Guardian Installatin and Administratin User Guide