Compliance Guardian 3

Transcription

1 Cmpliance Guardian 3 Installatin and Administratin User Guide Service Pack 3 Revisin A Issued January 2015

2 Table f Cntents What's New in this Guide Abut Cmpliance Guardian Cmplementary Prducts Submitting Dcumentatin Feedback t AvePint Accessibility Infrmatin fr Screen Reading Sftware Preparatins Befre the Installatin Prts Used by Cmpliance Guardian Cmpliance Guardian Manager System Requirements System Requirements fr Cntrl Service Installatin Cmpliance Guardian Agent System Requirements Where t Install Cmpliance Guardian Agent System Requirements fr Agent Service Installatin SQL Server Requirements fr Cmpliance Guardian Databases SharePint Envirnment Requirements fr Cmpliance Guardian Agents Required Permissins fr Scanning Lync Cntent Required Permissins fr Scanning Oracle Database Required Permissins fr Scanning SQL Database Overview f Cmpliance Guardian Manager and Agent Services Installing Cmpliance Guardian Cmpliance Guardian Manager Installing Cmpliance Guardian Manager Cmpliance Guardian Agent Installing Cmpliance Guardian Agent Accessing the Cmpliance Guardian GUI Internet Explrer Setup Lgging In t Cmpliance Guardian Hw t Use Yur Keybard in Cmpliance Guardian Cmpliance Guardian Manager and Agent Maintenance Update Cmpliance Guardian Cmpliance Guardian Installatin and Administratin User Guide

3 Cmpliance Guardian Reprt Database Upgrade Tl Using the Tl Uninstalling Cmpliance Guardian Uninstalling Cmpliance Guardian Manager Uninstalling Cmpliance Guardian Agent Reslve Issues Occurred During the Cmpliance Guardian Installatin Unattended Installatin: Cmpliance Guardian Manager Generating the Installatin Answer File fr Cmpliance Guardian Manager Imprt the UnattendedInstallatin.dll File Cmmands and Cmmand Parameters fr Cmpliance Guardian Manager Unattended Installatin.. 50 Installatin Cmmand Unattended Installatin: Cmpliance Guardian Agent Generating the Installatin Answer File fr Cmpliance Guardian Agent Imprt the UnattendedInstallatin.dll File Cmmands and Cmmand Parameters fr Cmpliance Guardian Agent Unattended Installatin Installatin Cmmand Installing Cmpliance Guardian App fr Real-Time Classificatin Uninstalling Cmpliance Guardian App fr Real-Time Classificatin Navigatin Bar Navigating Cmpliance Guardian Cntrl Panel Getting Started Launching Cntrl Panel Understanding the Cntrl Panel Accessing the Cntrl Panel Mnitr Using the Manager Mnitr Using the Agent Mnitr System Optins Cnfiguring General Settings Cnfiguring Security Settings Viewing Security Infrmatin Cmpliance Guardian Installatin and Administratin User Guide

4 Authenticatin Manager Cnfiguring Windws Authenticatin Cnfiguring AD Integratin Cnfiguring ADFS Integratin Cnfiguring Client Certificate Authenticatin Accunt Manager Managing Permissin Levels Managing User Grups Managing Users My Settings License Manager Viewing License Infrmatin Imprting and Exprting the License File Cnfiguring License Renewal Ntificatins Cnfiguring Server Usage Update Manager Cnfiguring Update Settings Checking fr Updates Managing Updates Reviewing the Installatin Histry f Updates Agent Grups Managing Agent Grups User Ntificatin Settings Cnfiguring Send Settings Cnfiguring Receive Settings Cnfiguring Receive Ntificatin Managing Receive Ntificatin Cnfiguring Templates Jb Pruning Cnfiguring Pruning Rules Cnfiguring Settings Cnfiguring a Schedule Cmpliance Guardian Installatin and Administratin User Guide

5 Lg Manager Cnfiguring Lg Settings Cllecting Lgs SharePint Sites Managing SharePint Online Site Cllectin URLs Office 365 Accunt Prfile Manager Prfile Manager Security Prfile Auditr Cnfiguring Pruning Settings Exprting Auditr Data Reprt Self Checker Managing Self Checker Prfiles Managing Rules in a Self Checker Prfile Exprting Self Checker Reprt Slutin Manager Managing Slutins Slutin Descriptin Database Manager Database Database Plicy Test Suite Manager Backgrund Infrmatin Managing Test Suites Creating a New Check r Test Suite Uplading Checks and Test Suites Dwnlading a Test Suite Viewing Details abut a Test Suite Editing a Previusly Cnfigured Check r Test Suite Deleting a Test Suite Risk Frmula Viewing a Test Suite's r Check's Versin Histry Cmpliance Guardian Installatin and Administratin User Guide

6 Reprt Cnfiguratin Managing Reprt Settings Cnfiguring Reprt Settings Allwed Lcatin Cnfiguring Allwed Lcatin Exprt Lcatin Managing Exprt Lcatins Cnfiguring Exprt Lcatins Filter Plicy Managing Filter Plicies Cnfiguring Filter Plicies Editing Filter Plicies Website Scanner Settings Cnfiguring Authenticatin Prfile Cnfiguring User Agent Prfile Cmpliance Manager Pre-Cnfiguratins Cnfiguring Scan Plicies Cnfiguring Filter Plicies Cnfiguring Database Plicies Cnfiguring the Accunt Manager Cnfiguring Cnnectins fr File System Cnfiguring Cnnectins fr Database Cmpliance Scanner Launching Cmpliance Scanner Hme Page Overview Selecting Mde Managing Cmpliance Guardian Scanner Plans Cmpliance Guardian Scanner fr SharePint Launching Cmpliance Guardian Scanner SharePint Mde Selecting the Scan Scpe Scanning User Prfiles Cmpliance Guardian Installatin and Administratin User Guide

7 Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr SharePint Editing Template File fr Filtering User Prfiles Cmpliance Guardian Scanner fr File System Launching Cmpliance Guardian Scanner File System Mde Selecting the Scan Scpe Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr File System Cmpliance Guardian Scanner fr Website Launching Cmpliance Guardian Scanner in Website Mde Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr Website Scanning Gmail Cmpliance Guardian Scanner fr Lync Launching Cmpliance Guardian Scanner Lync Mde Cnfiguring Archiving Plans Searching Lync Cntent Selecting the Scan Scpe Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr Lync Cmpliance Guardian Scanner fr Database Launching Cmpliance Guardian Scanner in Database Mde Selecting the Scan Scpe Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr Database Cmpliance Reprts Getting Started Launching Cmpliance Reprt User Interface Overview Classificatin Manager Real-Time Classificatin Scanner Pre-Cnfiguratins Cnfiguring Scan Plicies Cnfiguring Filter Plicies Cnfiguring Actin Plicies Cnfiguring Actin Plicies fr Scial Netwrk Getting Started Cmpliance Guardian Installatin and Administratin User Guide

8 Launching Real-Time Classificatin Scanner Hme Page Overview Cnfiguring Actins n the Ribbn Selecting Mde Managing Ndes Real-Time Classificatin Scanner fr SharePint Launching Real-Time Classificatin Scanner SharePint Mde Using Real-Time Classificatin Scanner Rules in SharePint Mde Custmizing SharePint Page and Message Real-Time Classificatin Scanner fr Scial Netwrk Launching Real-Time Classificatin Scanner Scial Netwrk Mde Cnfiguring Cnnectins t Yammer Using Real-Time Classificatin Scanner Rules in Scial Netwrk Mde Using AvePint Yammer Cnnectr Web Part t Pst Messages t Yammer Enable the AvePint Yammer Cnnectr Feature Adding the AvePint Yammer Cnnectr Web Part Psting Messages t Yammer thrugh the AvePint Yammer Cnnectr Web Part Scheduled Classificatin Scanner Pre-Cnfiguratins Cnfiguring Scan Plicies Cnfiguring Filter Plicies Cnfiguring Actin Plicies fr SharePint Cnfiguring Actin Plicies fr File System Cnfiguring Actin Plicies fr Scial Netwrk Cnfiguring Cnnectins fr File System Getting Started Launching Scheduled Classificatin Scanner Hme Page Overview Selecting Mde Managing Scheduled Classificatin Scanner Plans Scheduled Classificatin Scanner fr SharePint Launching Scheduled Classificatin Scanner SharePint Mde Cmpliance Guardian Installatin and Administratin User Guide

9 Scanning User Prfiles Perfrming a Scheduled Classificatin Scanner Plan in Wizard Mde Perfrming a Scheduled Classificatin Scanner Plan in Frm Mde Scheduled Classificatin Scanner fr File System Launching Cmpliance Guardian Scanner File System Mde Perfrming a Scheduled Classificatin Scanner Plan in Wizard Mde Perfrming a Scheduled Classificatin Scanner Plan in Frm Mde Scheduled Classificatin Scanner fr Scial Netwrk Launching Scheduled Classificatin Scanner Scial Netwrk Mde Cnfiguring Cnnectins t Yammer Perfrming a Scheduled Classificatin Scanner Plan in Wizard Mde Perfrming a Scheduled Classificatin Scanner Plan in Frm Mde Using Cmpliance Guardian Features in SharePint Using Cmpliance Guardian Tag Assist Manager in SharePint Using Cmpliance Guardian Quarantine Manager in SharePint Classificatin Reprt Launching Classificatin Reprt Jb Mnitr Getting Started Launching Jb Mnitr Understanding Jb Mnitr Jb Mnitr Interface Jb Mnitr vs. Scheduled Jb Mnitr Cnfiguring the Viewing Pane The View Tlbar The Filter Tlbar Searching Jbs Managing Jbs Operatins in the Jb Mnitr Tab The Manage Tlbar The Actins Tlbar The Settings Tlbar Cmpliance Guardian Installatin and Administratin User Guide

10 Operatins in the Scheduled Jb Mnitr Tab The Actins Tlbar The Filter Tlbar Using Check Validatr Tl Related Cnfiguratin File Using Detailed Risk Reprt Analysis Tl Generating the Reprt Infrmatin Included in the Exprted Excel File Generate Detailed Risk Reprt f a File Befre Yu Begin Using Cmpliance Guardian Transactin Capture System Requirements fr Using Cmpliance Guardian Transactin Capture Installing Cmpliance Guardian Transactin Capture Using the Tl Exprting Actin Reprts and Scial Reprts t Event Viewer Mnitring Cmpliance Guardian Jb Perfrmance in Perfrmance Mnitr Using the Fingerprinting Tl Appendix A: Accessing Ht Key Mde Cmpliance Scanner Page Cmpliance Scanner fr Lync Page Classificatin Scanner Page Scheduled Classificatin Scanner Page Scheduled Classificatin Scanner fr Scial Netwrk Page Real-Time Classificatin Scanner page Jb Mnitr Page Scheduled Jb Mnitr Page Cntrl Panel Page Appendix B: Cnfiguring Checks and Test Suites Cnfiguring Check Type Attributes Element Type Check EnhancedElement Type Check MatchedElement Type Check Cmpliance Guardian Installatin and Administratin User Guide

11 FindText Type Check CmplexFindText Type Check RegularExpressin Type Check CmplexRegEx Type Check Dictinary Type Check Ckie Type Check SSL Type Check WebBeacns Type Check FindFile Type Check LinkValidatin Type Check FilePrperty Type Check Redactin Type Check CustmScan Fingerprinting Cntext Cnfiguring Test Suite File Attributes Test Suite fr Cmpliance Reprting File Bdy Cnfiguratin Test Suite fr Classificatin and Tagging File Bdy Cnfiguratin Test Suite fr Redactin Using CustmScan in Cmpliance Guardian Methd CustmCheck Using CustmCheck Methd Cnfiguratin Example Related Cnfiguratin File Appendix C: Supprted File Types in Cmpliance Guardian Appendix D: Cmpliance Guardian Cnfiguratin File Appendix E: Using the Scan Engine API Initialize the ScanEngine Class Parameters f the ScanEngine.Scan Methd Cmpliance Guardian Installatin and Administratin User Guide

12 Usage Example Scan Files Using CCC Scan Files Using MCC Scan Metadata CCE.EngineWrker.exe Mde Appendix F: Using the CmplianceSetting.cnfig file Cnfiguring t Scan User Prfiles Cnfiguring Restricted Attachment Types and Mdifying the Allwed Maximum Size f Upladed Attachments in Incident Manager Appendix G: Displaying Only Vilatins in the Errr Highlight Reprt Appendix H: Cnfiguring fr Supprting Lad Balancing Cnfiguring fr Supprting Netwrk Lad Balancing Wrking Prcess Installing Netwrk Lad Balancing Feature Editing Netwrk Lad Balancing Cluster Prperties Cnfiguring File Share Lcatins Using CCE.EngineService.exe file t Encrypt Passwrds and D Operatins n the <FS> Nde Cnfiguring Cmmunicatin Settings Cntrl Service Lad Balancing Installing Cmpliance Guardian Manager Cntrl Service Lad Balancing Envirnment Appendix I: Cmpliance Guardian Cntrl Service Disaster Recvery Preparatins and Cnfiguratin Prerequisite Cmpliance Guardian Installatin Synchrnizing Databases frm PROD Envirnment t DR Envirnment Simulating the Disaster Recvery Prcess Appendix J: Limitatins f Scanning Oracle Database and SQL Server Prerequisite and Limitatin f Scanning Oracle Database Prerequisite Installing ODP.NET Prvider Limitatin f Scanning Oracle Database Limitatin f Scanning SQL Server Cmpliance Guardian Installatin and Administratin User Guide

13 Appendix K: Custmizing the Interval f Retrieving Scial Reprt Data Appendix L: Using the Discvery Functin Using the EXE File Using the BAT File Cnfiguring the CSV File Ntices and Cpyright Infrmatin Cmpliance Guardian Installatin and Administratin User Guide 13

14 What's New in this Guide Nw supprt Real-Time Classificatin and Real-Time Classificatin Scanner fr Scial Netwrk. Currently, Cmpliance Guardian nly supprts scanning cntent in Yammer. Nw supprt Cmpliance Guardian Scanner fr Lync. Allws users t scan archived Lync cntent. Users can scan by initiatr, participant, time, cnversatin type r attachment. Nw supprt Cmpliance Guardian Scanner fr Database. Allws users t scan database cntent. Added the Cntext and Fingerprinting type checks. Nw supprt Installing Cmpliance Guardian App fr Real-Time Classificatin in rder t use Real-Time Classificatin rule t scan SharePint Online sites. Nw supprt the Self Checker functin. Add the Dynamic type in the Test Suite fr Classificatin and Tagging File Bdy Cnfiguratin. Supprt exprting actin reprts and scial reprts in Exprting Actin Reprts and Scial Reprts t Event Viewer. Added the Frm-based Authenticatin methd in Cnfiguring Authenticatin Prfile. Add the Alert Only actin in Cnfiguring Actin Plicies fr SharePint and file system. 14 Cmpliance Guardian Installatin and Administratin User Guide

15 Abut Cmpliance Guardian Cmpliance Guardian is designed t ensure that infrmatin is available and accessible t the peple wh shuld have it and prtected frm the peple wh shuld nt. Cmpliance Guardian helps Chief Privacy Officers, Chief Infrmatin Security Officers, Cmpliance Managers, Recrds Managers, SharePint Administratrs, and Cmpany Executives practively prtect their IT envirnments frm harmful infrmatin leaks, cntaminatin, r misuse while simultaneusly ensuring that all activities and cntent residing in their envirnments are cmpliant, accessible, and manageable. Cmpliance Guardian is designed t empwer rganizatins t cmply with regulatry, statutry, r rganizatin specific requirements t manage and versee access t sensitive data. Cmpliance Guardian wrks with AvePint's extended Cmpliance Slutins t prvide a "heat map" that prvides additinal actinable cntext abut the dcument including: hw ld is the dcument, wh authred it, hw many times has it been accessed, wh can access it, wh has accessed it, and what have they dne with it. In this way, rganizatins can take specific steps t prtect and mitigate their risk. By identifying, classifying, and taking actin n cmpliance risks, and presenting this infrmatin in easily digestible frmats fr varius stakehlders, rganizatins can mre effectively build and maintain a cmpliant framewrk. Cmpliance Guardian Installatin and Administratin User Guide 15

16 Cmplementary Prducts Many prducts and prduct suites n the Cmpliance Guardian platfrm wrk in cnjunctin with ne anther. The DcAve Auditr Reprts are recmmended fr use with Cmpliance Guardian. Auditr Reprts are available in DcAve 6 Reprt Center under Cmpliance Reprts. 16 Cmpliance Guardian Installatin and Administratin User Guide

17 Submitting Dcumentatin Feedback t AvePint AvePint encurages custmers t prvide feedback regarding ur prduct dcumentatin. Yu can Submit Yur Feedback n ur website. Cmpliance Guardian Installatin and Administratin User Guide 17

18 Accessibility Infrmatin fr Screen Reading Sftware Ensure that the fllwing requirements are met befre yu use Jb Access with Speech (JAWS) r NnVisual Desktp Access (NVDA) t read Micrsft Silverlight: 1. JAWS des nt read ActiveX cntrls. In rder t enable JAWS t read Silverlight, the fllwing text must be added t the FsDmSrv.ini file, and JAWS must be restarted. Add this text t the FsDmSrv.ini file: [MS Silverlight Embedded in Internet Explrer using OBJECT Tag with type] DLLName=SDmNdeMSAA ; TagNameMatch ParamAndValueMatch MappingFlags=96 Param=applicatin/x-silverlight-2 TagName=OBJECT StartString=Silverlight applicatin start EndString=Silverlight applicatin end ImplementatinFlags=7 InteractinMdeFlags=3 The user must disable the Virtual Cursr by pressing Ins + Z after the page cntaining the Silverlight applicatin (Cmpliance Guardian interface) has laded. 2. Fr the NVDA screen reader, the fllwing step must be perfrmed in rder t enable NVDA t read Silverlight: The user must enable NVDA Virtual Buffer Pass-thrugh using Ins + Space after the page cntaining the Silverlight applicatin (Cmpliance Guardian interface) has laded. 18 Cmpliance Guardian Installatin and Administratin User Guide

19 Preparatins Befre the Installatin Refer t the fllwing sectins fr the prerequisites befre installing Cmpliance Guardian. Prts Used by Cmpliance Guardian Befre the installatin, make sure the prts required fr Cmpliance Guardian Manager and Agents can be accessed thrugh the firewall sftware installed n the crrespnding machines. Fr example, if the Windws Firewall is enabled n the servers which have installed Cmpliance Guardian, yu must make sure the and prts are allwed in the Inbund Rules n the crrespnding servers. *Nte: If there are multiple Cmpliance Guardian services installed n the same server, make sure all f the required prts are enabled n that server. 1. Remtely cnnect t the server where the Cmpliance Guardian Timer Service is installed. 2. Navigate t Start > Administrative Tls > Windws Firewall with Advanced Security. 3. Select Inbund Rules under Windws Firewall with Advanced Security n Lcal Cmputer and select New Rule. 4. In the Rule Type step, select Prt t cnfigure the inbund rule fr the prts used by Cmpliance Guardian Timer Service, and select Next. 5. In the Prtcl and Prts step, specify the rule t be applied t TCP, and then select Specific lcal prts ptin. Enter in the textbx, and then select Next. 6. In the Actin step, select the Allw the cnnectin ptin t allw the cnnectin t prt 14100, and then select Next. *Nte: The prt numbers may vary accrding t the settings cnfigured when installing Cmpliance Guardian in yur envirnments. 7. In the Prfile step, keep the default selectin s that all three ptins are selected, and then select Next. 8. In the Name step, enter the Name and an ptinal Descriptin fr this inbund rule. 9. Select Finish t cmplete the inbund rule creatin. 10. Repeat the same steps n all f the ther servers that have Cmpliance Guardian Agents installed and have Windws Firewall enabled. The prt used by the Cmpliance Guardian Agent is Cmpliance Guardian Installatin and Administratin User Guide 19

20 Cmpliance Guardian Manager System Requirements Cmpliance Guardian Manager cnsists f ne service called the Cmpliance Guardian Timer Service (a cntrl service). Yu can either run it n the same server as yur Cmpliance Guardian Agent r n a separate server. Fr mre infrmatin n Cmpliance Guardian Manager, refer t Installing Cmpliance Guardian Manager. While it is pssible t have the Cmpliance Guardian Manager and Agent n a single server, it is nt recmmended. T maximize perfrmance, AvePint recmmends yu install the Manager Service n ne server, and install nly the necessary agents n the agent servers. Refer t System Requirements fr Cntrl Service Installatin fr the system requirements f the Cmpliance Guardian Cntrl Service. System Requirements fr Cntrl Service Installatin Operating System Editin: Windws Server 2008, Windws Server 2008 R2, Windws 7, Windws Server 2012, Windws Server 2012 R2 Rules Ttal Physical Memry Available Disk Space.Net Framewrk Versin.Net Framewrk Features Net.Tcp Prt Sharing Service Windws Prcess Activatin Service Wrld Wide Web Publishing Service Requirements Required: 512MB r abve Recmmended: 2GB Required: 1GB r abve.net Framewrk 3.5 SP1 r abve (excluding.net Framewrk 4.0) The Windws features, including WCF Activatin, HTTP Activatin and Nn-HTTP Activatin must be installed Net.Tcp Prt Sharing Service is started Windws Prcess Activatin Service is started Prcess Mdel,.NET Envirnment and Cnfiguratin APIs are installed Wrld Wide Web Publishing Service is started 20 Cmpliance Guardian Installatin and Administratin User Guide

21 Operating System Editin: Windws Server 2003, Windws Server 2003 R2 Rules Web Server (IIS) Rle Requirements The fllwing Windws features are installed: Web Server Cmmn HTTP Features (Static Cntent, Default Dcument) Applicatin Develpment (ASP.NET,.NET Extensibility, ISAPI Extensins and ISAPI Filters) Management Tls (IIS Management Cnsle, IIS 6 Management Cmpatibility and IIS 6 Metabase Cmpatibility) Ttal Physical Memry Required: 512MB r abve Recmmended: 2GB Available Disk Space Required: 1GB r abve.net Framewrk Versin.NET Framewrk 3.5 SP1 r abve (excluding.net Framewrk 4.0) Net.Tcp Prt Sharing Net.Tcp Prt Sharing Service is started Service Wrld Wide Web Wrld Wide Web Publishing Service is started Publishing Service ASP.NET ASP.Net r abve Applicatin Server Netwrk COM+ access is enabled. Internet Infrmatin Services (IIS) is started, including the fllwing installed features: Cmmn Files, IIS Manager, and Wrld Wide Web Service IIS Service HTTP SSL IIS Admin Service is started IIS versin must be 6.0 r abve HTTP SSL Service is started Cmpliance Guardian Installatin and Administratin User Guide 21

22 Required Applicatin Pl Settings The fllwing applicatin pl settings are required by Cmpliance Guardian Cntrl Service Installatin. If yu chse t create a new applicatin pl, Cmpliance Guardian will autmatically cnfigure these settings. If yu chse t use an existing applicatin pl, yu must cnfigure the applicatin pl accrding t the fllwing table: IIS Versin IIS7 IIS Setting Value Nte Advanced Settings > General >.NET Framewrk Versin Advanced Settings > General > Enable 32-bit Applicatins Advanced Settings > General > Managed Pipeline Mde Prcess Mdel > Lad User Prfile Advanced Settings > General > Start Autmatically v2.0 / v4.0 N Managed Cde is nt supprted. False Integrated / Classic True True / False False is required since Cmpliance Guardian must lad sme third-party dlls which are 64-bit nes. It is nt supprted t use Classic tgether with.net Framewrk v4.0. True is required by Cmpliance Guardian SSO, and False is nt supprted. True is strngly recmmended because if yu set the value t False, the applicatin pl requires manual start up. Required Applicatin Pl Accunt Permissins The applicatin pl accunt must have the fllwing lcal system permissins. The selected applicatin pl accunt will be granted Full Cntrl permissin t the fllwing grups and flders autmatically during Cmpliance Guardian Manager installatin: IIS_WPG (fr IIS 6.0) r IIS_IUSRS (fr IIS 7.0) Full Cntrl t HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian Full Cntrl t Cmpliance Guardian Manager flder Member f the Perfrmance Mnitr Users grup Full Cntrl t Cmpliance Guardian Certificate private keys Full Cntrl (r Read, Write, Mdify, and Delete) t C:\WINDOWS\Temp (nly fr Windws 2003 envirnment) Yu can add the applicatin pl accunt t the lcal Administratrs grup t meet the required permissins. The applicatin pl accunt must have the fllwing permissins t use the AvePint Yammer Cnnectr Web Part: 22 Cmpliance Guardian Installatin and Administratin User Guide

23 Full Cntrl t Cmpliance Guardian Agent flder Full Cntrl HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian Cmpliance Guardian Agent System Requirements The Cmpliance Guardian Agent has ne service called the Cmpliance Guardian Agent Service. A Cmpliance Guardian Agent cmmunicates with SharePint based n the cmmands it receives frm the Cmpliance Guardian Manager s Cntrl Service. Multiple agent setups prvide redundancy as well as scalability fr large envirnments by allwing yu t use different accunts fr different farms where multiple farms exist. The Cmpliance Guardian Agent can be installed n different machines accrding t the rle f the machine, and the Cmpliance Guardian mdules and functinalities yu want t use. Fr mre infrmatin n where t install the Cmpliance Guardian Agents, refer t Where t Install Cmpliance Guardian Agent. *Nte: Cmpliance Guardian supprts scanning Micrsft Office files in a 2003 r earlier frmat using ifilter. If yu are using an earlier versin f Cmpliance Guardian r if yu updated t Cmpliance Guardian 3 SP3 frm an earlier versin, yu must dwnlad a cmpatibility pack t scan the Micrsft Office files (can keep the file s accessibility attributes). If yu prefer t scan these files thrugh installing the cmpatibility pack but nt thrugh ifilter, yu can install the pack and then add the fllwing nde under the OfficeFileMapping nde in the cnfiguratin file CntentCmplianceCnfig.xml (yu can find the file under the path \Cmpliance Guardian\Agent\Bin): <NeedCnvert> <Extensin>.xls</Extensin> </NeedCnvert> Cmpliance Guardian Installatin and Administratin User Guide 23

24 Figure 1: NeedCnvert nde. The value in the Extensin attribute is the extensin f the file that yu want t scan thrugh the cmpatibility pack. Where t Install Cmpliance Guardian Agent In rder t install Cmpliance Guardian Agents, the fllwing requirements must be met t make all f the functins and cnfiguratins f the prduct available: All f the installed Cmpliance Guardian Agents must be prperly licensed in the mdules yu want t use. In rder t use Cmpliance Scanner, Cmpliance Guardian Agent must be installed n at least ne f the frnt-end Web servers. In rder t use the Scheduled Classificatin Scanner, Cmpliance Guardian Agent must be installed n at least ne f the frnt-end Web servers. In rder t use the Real-Time Classificatin Scanner, Cmpliance Guardian Agents must be installed n all f the frnt-end Web servers. 24 Cmpliance Guardian Installatin and Administratin User Guide

25 System Requirements fr Agent Service Installatin Operating System Editin: Windws Server 2003, Windws Server 2003 R2, Windws Server 2008, Windws Server 2008 R2, Windws Server 2012, Windws Server 2012 R2 Rules Ttal Physical Memry Available Disk Space.NET Framewrk Versin.Net Framewrk Features (nly in Windws Server 2008, Windws Server 2008 R2 and Windws Server 2012 envirnments) Net.Tcp Prt Sharing Service SharePint Versin Requirements Required: 512MB r abve Recmmended: 2GB Required: 1GB r abve.net Framewrk 3.5 SP1 r abve (excluding.net Framewrk 4.0) The Windws features, including HTTP Activatin and Nn-HTTP Activatin are installed. Net.Tcp Prt Sharing Service has started. SharePint Server 2007, SharePint Server 2010, r SharePint 2013 is installed. SQL Server Requirements fr Cmpliance Guardian Databases Databases SQL Server Editin Cntrl Database Micrsft SQL Server 2005 Reprt Database Micrsft SQL Server 2008 R2 Micrsft SQL Server 2012 RTM SharePint Envirnment Requirements fr Cmpliance Guardian Agents Cmpliance Guardian Agents can be installed and used in the fllwing SharePint envirnments: Micrsft Office SharePint Server 2007 with SP2 Windws SharePint Services 3.0 with SP2 Micrsft SharePint Server 2010 with SP1 Micrsft SharePint Fundatin 2010 with SP1 Micrsft SharePint Server 2010 RTM Micrsft SharePint Fundatin 2010 RTM Micrsft SharePint Server 2013 with SP1 Micrsft SharePint Fundatin 2013 with SP1 Micrsft SharePint Server 2013 RTM Micrsft SharePint Fundatin 2013 RTM Cmpliance Guardian Installatin and Administratin User Guide 25

26 Required Permissins fr Scanning Lync Cntent In rder t scan the Lync cntent, the agent accunt must meet the fllwing permissin requirements: Lcal System Permissins Cmpliance Guardian users must have Read permissin t the Registry HKEY_LOCAL_MACHINE\SOFTWARE\Micrsft\Real-Time Cmmunicatins\{A593FD00-64F A6F4-E699ED9DCA35}. PwerShell Permissin The agent accunt must be member f Dmain Users and RTCUniversalServerAdmins. The PwerShell cmdlet: Get-CsSite, Get-CsPl, Get-CsManagementStreReplicatinStatus requires the permissin f RTCUniversalServerAdmins. Database Permissin Database rle f db_wner fr all databases that are related with Lync, including LcsLg and LcsCDR. Cmpliance Guardian archiving database (db_wner fr existing database and db_creatr fr new database) Cmpliance Guardian reprt database (db_wner fr existing database and db_creatr fr new database) Lync File Share Flder Permissin At least Read permissin t the Files Stres that are defined in the tplgy t stre attachments. Dmain Permissin Member f the Dmain Users grup under Default Grup Plicy. Required Permissins fr Scanning Oracle Database In rder t scan an Oracle database, the user wh creates the cnnectin with the database must meet the fllwing permissin requirements: The CREATE SESSION permissin The SELECT permissin t the table that will be scanned. The SELECT permissin t the captured table. The SELECT permissin t the remte bjects if using distributin CDC. If the table that will be scanned has the BFILE clumn, the BFILE table will use ne r mre directries. The user must have the READ permissin t these directries. The SELECT permissin t the fllwing bjects: 26 Cmpliance Guardian Installatin and Administratin User Guide

27 ALL_CHANGE_TABLES ALL_CHANGE_SETS ALL_CHANGE_SOURCES ALL_USERS ALL_CONSTRAINTS ALL_CONS_COLUMNS ALL_DB_LINKS ALL_TAB_COLUMNS ALL_INDEXES ALL_IND_COLUMNS ALL_TABLES ALL_TYPES ALL_COLL_TYPES ALL_TYPE_ATTRS v$instance v$database v$services If yu want t use Oracle netwrk alias t cnnect t the database, make sure the agent accunt has the READ permissin t the fllwing files: %ORACLE_HOME%\netwrk\admin\listener.ra %ORACLE_HOME%\netwrk\admin\tnsnames.ra %ORACLE_HOME%\netwrk\admin\sqlnet.ra *Nte: %ORACLE_HOME% means yur ORACLE_HOME envirnment. Required Permissins fr Scanning SQL Database If Windws Authenticatin r SQL Authenticatin was selected when creating the cnnectin with the database, the agent accunt r the user wh creates the cnnectin must meet the fllwing permissin requirements: The Database-Level rle is db_datareader fr the database that will be scanned; the Server-Level Rle is Public. The SELECT permissin t the table clumns. The SELECT permissin t the captured table. Cmpliance Guardian Installatin and Administratin User Guide 27

28 The EXECUTE permissin t the fllwing functins r prcedures: Prcedure:sys.sp_cdc_help_change_data_capture Prcedure:sys.sp_cdc_get_captured_clumns Functin:SERVERPROPERTY Functin:COLLATIONPROPERTY Functin:DATEDIFF Functin:DATEADD Functin:sys.fn_cdc_map_time_t_lsn Functin:SQL_VARIANT_PROPERTY Functin:GET_FILESTREAM_TRANSACTION_CONTEXT() Functin:[FileStreamClumn].PathName() The SELECT permissin t the fllwing system views: sys.databases sys.clumns sys.identity_clumns sys.indexes sys.index_clumns sys.freign_key_clumns sys.freign_keys sys.schemas sys.tables sys.types Overview f Cmpliance Guardian Manager and Agent Services After prperly installing all f the services, including Cmpliance Guardian Manager and Agent Services, yu are able t manage the cmpliance f yur SharePint data via the Cmpliance Guardian prduct. Cntrl Service receives the request frm Cmpliance Guardian Manager, and then sends the request t Agent Services which retrieves the data frm SharePint. Agent Services then send the data t the Cntrl Service fr analyzing. If an actin shuld be perfrmed n the SharePint cntents that are cnsidered nt cmpliant by Cmpliance Guardian, thse actins will be perfrmed by the Agent Services. The Agent Services will als be used t exprt the cmpliance reprts frm the reprt database. 28 Cmpliance Guardian Installatin and Administratin User Guide

29 Installing Cmpliance Guardian The Cmpliance Guardian Installatin Wizard will guide yu thrugh the installatin prcess. In rder t cmplete the installatin successfully, a lcal administratr accunt must be used t run the Installatin Wizard. *Nte: Install Cmpliance Guardian in the fllwing rder: 1. Install the Cmpliance Guardian Manager with the Manager Installatin Wizard. 2. Install the Cmpliance Guardian Agents with the Agent Installatin Wizard. 3. Lg int Cmpliance Guardian t make sure the Manager and Agent are able t cmmunicate with each ther prperly. Cmpliance Guardian Manager Make sure the system requirements are met befre starting installatin fr Cmpliance Guardian Manager. Fr mre infrmatin, refer t System Requirements fr Cntrl Service Installatin. *Nte: When running the Manager Installatin Wizard n the server running Windws Server 2003/Windws Server 2003 R2, make sure the Windws cmpnents are nt being added r remved during the rule scanning; therwise, the scanning result will be affected. *Nte: When running the Manager Installatin Wizard n the server running Windws Server 2008/Windws Server 2008 R2/Windws 7, make sure the Server Manager is nt being used t add r remve Windws features during the rule scanning; therwise, the scanning result will be affected. Installing Cmpliance Guardian Manager T install Cmpliance Guardian Manager, cmplete the fllwing steps: 1. Dwnlad the Manager ZIP file, either by requesting a dem versin r by cntacting an AvePint representative fr links t this package. 2. Unzip the package, and then pen the unpacked Cmpliance Guardian Manager directry. Run the Setup.exe file. 3. After the welcme screen appears, select Next. 4. Enter yur Name and Organizatin int the prvided fields. Select Next. 5. Carefully review the Cmpliance Guardian License Agreement. After yu have read the agreement, check the I accept the terms in the license agreement checkbx, and select Next. 6. Select Brwse, and then select the lcatin fr the Manager installatin. By default, the installatin lcatin is C:\Prgram Files\AvePint. Select Next. Cmpliance Guardian Installatin and Administratin User Guide 29

30 7. Select the Cmpliance Guardian Manager Service yu want t install by checking the crrespnding checkbx. There is nly ne service t install. Cntrl Service Manage all Cmpliance Guardian peratins and achieve the Web-based Cmpliance Guardian platfrm, allwing users t interact with the sftware. All agents can cmmunicate with the manager thrugh the Cntrl Service, s it is imperative that the machine yu install the cntrl service n is accessible by all agent machines. Select Next. 8. Cmpliance Guardian will perfrm a brief pre-scan f the envirnment t ensure that all rules meet the requirements. The status fr each rule will be listed in the Status clumn. Select the hyperlink f the status, and the detailed infrmatin abut the scan result will be listed in the pp-up windw. Yu may select Details t view the detailed infrmatin f all f the requirements. If any rules have failed the pre-scan, update yur envirnment t meet the requirements, and then select the Rescan buttn t check yur envirnment again. Once all the rules pass, select Next. 9. Set up the Cntrl Service Cnfiguratin: Cntrl Service Address Specify the current machine s hstname r IP address. The Cntrl Service manages internal cnfiguratin data, user access cntrl, scheduling, and jb mnitring. IIS Website Settings Cnfigure the IIS website settings fr the Cntrl Service. Yu can select t use an existing IIS website r create a new IIS website. The IIS website is used t access Cmpliance Guardian Manager. Use an existing IIS website Select an existing IIS website frm the drp-dwn list, and if necessary, yu can adjust the Website Prt used t access the Cmpliance Guardian Cntrl Service. Create a new IIS website Enter the website name and create a new IIS website fr the Cntrl Service. The default Website Prt used t access Cmpliance Guardian Cntrl Service is 14100; yu d nt need t change it unless a knwn prt cnflict exists. Website Prt Cntrl Service cmmunicatin prt. The default prt is Applicatin Pl Settings Cnfigure the IIS applicatin pl settings fr the crrespnding website. Yu can select t use an existing applicatin pl r create a new applicatin pl. The applicatin pl is used t handle the requests sent t the crrespnding website. The fllwing settings can be cnfigured: Use an existing applicatin pl (nt recmmended) Select an existing applicatin pl frm the drp-dwn list. If yu chse t use an existing applicatin pl, the Applicatin Pl Accunt settings are greyed ut and cannt be changed. 30 Cmpliance Guardian Installatin and Administratin User Guide

31 Create a new applicatin pl Enter the applicatin pl name and applicatin pl accunt settings t create a new IIS applicatin pl fr the crrespnding website. By default, the new applicatin pl s name is CmplianceGuardian. Select Next t cntinue t cnfigure the database settings fr Cntrl Service. 10. In this page, MS SQL is selected in the Database Type drp-dwn menu. The fllwing infrmatin must be cnfigured fr the MS SQL database: Database Server The MS SQL server name. Cntrl Service Database Name Enter a database name fr the Cntrl Service, if the database des nt exist, it will be created in the prvided MS SQL server. Database Credentials Select the credentials fr this Cntrl Service database. Windws Authenticatin (the default ptin) Use this methd when yu want the user identity t be cnfirmed by Windws. The specified accunt must have permissin t access the SQL Server machine where yu want t create the Cntrl Service Database. SQL Authenticatin SQL server will cnfirm the user identity itself accrding t the specified accunt and passwrd. The specified accunt must have the fllwing permissin: DB Owner f the existing Cmpliance Guardian Cntrl Database r DB Creatr f the newly created Cmpliance Guardian Cntrl Database. Passphrase Settings Enter the passphrase yu want t use fr prtecting Cmpliance Guardian Manager data. Advanced Database Settings Yu can chse t assciate the Cmpliance Guardian Cntrl database with a specific failver SQL server that is used in cnjunctin with SQL Server database mirrring. Select Next. 11. Set up the Advanced Cnfiguratin. SSL Certificatin Specify the methd fr encrypting infrmatin and prviding authenticatin fr Cmpliance Guardian: Select Next. Built-in Certificate Uses the certificate prvided by Cmpliance Guardian. N additinal cnfiguratin is necessary. User-defined Certificate Enabling this ptin allws yu t select a certificate frm yur lcal machine. It will use the Certificate Authenticatin server f the current machine t check whether the certificate is revked. After the certificates are filtered, nly the certificates that are nt revked will be displayed. Cmpliance Guardian Installatin and Administratin User Guide 31

32 12. In the Ready t install Cmpliance Guardian Manager page, all f the infrmatin cnfigured in the previus steps is listed. Select Install t begin the installatin. Select Back t change any f the previus settings. Select Cancel t abandn all f the cnfiguratins and exit the installatin wizard. 13. When the Manager installatin is cmpleted, the Manager Passphrase yu specified t prtect Cmpliance Guardian Manager data will be displayed n the Install Cmpleted page. Save this passphrase t enter it during the Agent installatin. After the installatin is cmplete, select Finish t exit the installatin wizard. Cmpliance Guardian Agent Make sure the system requirements are met befre starting the Cmpliance Guardian Agent installatin. Fr mre infrmatin, refer t 32 Cmpliance Guardian Installatin and Administratin User Guide

33 System Requirements fr Agent Service Installatin. Check that the Cmpliance Guardian Manager services have started befre installing the Cmpliance Guardian Agents. Installing Cmpliance Guardian Agent After the Manager s services have started, cmplete the fllwing steps t install the Cmpliance Guardian Agent: 1. Dwnlad the Agent ZIP file, either by requesting a dem versin r by cntacting an AvePint representative fr links t this package. 2. Unzip this package and navigate t the Cmpliance Guardian Agent directry. Run the Setup.exe file. 3. Frm the welcme screen, select Next. 4. Enter yur Name and Organizatin int the prvided fields, and then select Next. 5. Carefully review the Cmpliance Guardian License Agreement. After yu have read the terms in the license agreement, check the I accept the terms in the license agreement checkbx, and then select Next. 6. Select Brwse, and then select the lcatin fr the Agent installatin. By default, the installatin lcatin is C:\Prgram Files\AvePint. Select Next. 7. Cmpliance Guardian will perfrm a brief pre-scan f the envirnment t ensure that all rules meet the requirements. The status fr each rule will be listed in the Status clumn. Select the hyperlink f the status, and the detailed infrmatin abut the scan result will be listed in the pp-up windw. 8. Select Details t view the detailed infrmatin f all f the requirements. Update yur envirnment t meet the requirements if there are sme checked rules that failed. 9. Select the Rescan buttn t check yur envirnment again. Once all rules pass, select Next. 10. Set up the Cmmunicatin Cnfiguratin. Cmpliance Guardian Agent Hst Specify the current server s hstname, IP address, r fully qualified dmain name (FQDN). Cmpliance Guardian Agent Prt The prt specified here is used by the Manager r ther Agents fr cmmunicatin. The default prt number is Cntrl Service Hst The hstname r IP address f the machine where the Cntrl Service is installed. *Nte: If yu want t cnfigure the cnnectin with Yammer fr scanning psts, yu must enter the hstname f the machine where the Cntrl Service is installed. Fr Cmpliance Guardian Installatin and Administratin User Guide 33

34 mre infrmatin n cnfiguring the cnnectin, refer t Cnfiguring Cnnectins t Yammer. Cntrl Service Prt This is the prt used fr cmmunicatin with Cntrl Service and shuld match the infrmatin prvided during the Manager cnfiguratin. The default prt number is SSL Certificatin Specify the SSL Certificatin used fr the specified Cmpliance Guardian Manager. Select Next. 11. Set up the Agent Cnfiguratin: Agent Authenticatin Enter the Manager Passphrase specified when cnfiguring the Cmpliance Guardian Manager installatin. If yu frget the passphrase, yu can view it by navigating t Cmpliance Guardian > Cntrl Panel > System Optins > Security Settings. Fr mre infrmatin, refer t Viewing Security Infrmatin. Agent Accunt Specify the Agent Accunt under which the agent activities are perfrmed. Fr mre infrmatin n the permissins required fr each Cmpliance Guardian mdule, refer t the sectin f that mdule in this user guide. The ideal accunt permissins fr all Cmpliance Guardian prducts are listed belw: Lcal System Permissins The specified Agent Accunt will be granted Full Cntrl permissin t the fllwing grups and flders during Cmpliance Guardian Agent installatin: *Nte: The lcal administratr permissin is required fr the Agent Accunt when yu are installing the Cmpliance Guardian slutins using the Agent Accunt in Slutin Manager. IIS_WPG (fr IIS6.0) r IIS_IUSRS (fr IIS7) Perfrmance Mnitr Users Cmpliance Guardian Users (the grup is created by Cmpliance Guardian autmatically and it has the fllwing permissins): Full Cntrl t the Registry f HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian. Full Cntrl t the Registry f HKEY_LOCAL_MACHINE\SYSTEM\CurrentCntrlSet\services\eventlg. Full Cntrl t the Cmmunicatin Certificate. Permissin f Lg n as a batch jb (it can be fund within Cntrl Panel\Administrative Tls\Lcal Security Plicy\Security Settings\Lcal Plicies\User Rights Assignment) 34 Cmpliance Guardian Installatin and Administratin User Guide

35 Full Cntrl Permissin f Cmpliance Guardian Agent installatin directry SharePint Permissins fr SharePint 2007 Member f the Farm Administratrs grup Full Cntrl permissin t all znes f all Web applicatins via the User Plicy fr Web Applicatins Manage User Prfiles f Shared Services Rights SharePint Permissins fr SharePint 2010 Member f the Farm Administratrs grup Full Cntrl permissin t all znes f all Web applicatins via the User Plicy fr Web Applicatins User Prfile Service Applicatin permissins: Permissins > Cnnectin Permissins fr User Prfile Service: Full Cntrl Administratrs > Administratrs fr User Prfile Service Applicatin: Manage Prfiles Administratrs > Administratrs fr User Prfile Service Applicatin: Manage Scial Data Use Persnal Features Create Persnal Site Use Scial Features Managed Metadata Service: Term Stre Administratr Business Data Cnnectivity Service: Full Cntrl Search Service: Full Cntrl SharePint Permissins fr SharePint 2013 Member f the Farm Administratrs grup Full Cntrl permissin t all znes f all Web applicatins via the User Plicy fr Web Applicatins User Prfile Service Applicatin permissins: Permissins > Cnnectin Permissins fr User Prfile Service: Full Cntrl Administratrs > Administratrs fr User Prfile Service Applicatin: Manage Prfiles Cmpliance Guardian Installatin and Administratin User Guide 35

36 Administratrs > Administratrs fr User Prfile Service Applicatin: Manage Scial Data Use Persnal Features Create Persnal Site Use Scial Features Managed Metadata Service: Term Stre Administratr Business Data Cnnectivity Service: Full Cntrl Search Service: Full Cntrl SharePint Online Fr regular scan Site cllectin administratr f the target site cllectins In scan mde SQL Server Permissins Glbal administratr rle, and the user must apply a valid SharePint Online license Select Next. Database rle f db_wner fr all f the databases related with SharePint, including cntent databases, SharePint cnfiguratin database, and Central Admin database, and fr Cmpliance Reprt database and Classificatin Reprt database Database rle f dbcreatr and Security Admin t SQL Server, and database rle f dbcreatr fr creating new Cmpliance Reprt database and Classificatin Reprt database 12. In the Ready t install Cmpliance Guardian Agent Page, review the custmer infrmatin yu defined, and then select Install t begin the installatin. Select Back t change any f the previus settings. Select Cancel t abandn all cnfiguratins and exit the installatin wizard. 13. After the installatin is cmplete, select Finish t exit the installatin wizard. Cngratulatins! Cmpliance Guardian is nw installed and cnfigured. Once yu have cmpleted the prduct installatin, yu can begin t cnfigure the reprt database needed t stre the reprt data. Accessing the Cmpliance Guardian GUI The fllwing table displays the supprted brwsers and their requirements n the Silverlight versin if yu want t access the Cmpliance Guardian GUI in a Windws Server 2008 R2 Enterprise SP1 envirnment. 36 Cmpliance Guardian Installatin and Administratin User Guide

37 Rules Silverlight Versin 5.0 r abve Internet Explrer IE 7 r abve Ggle Chrme Mzilla Firefx Requirement Internet Explrer Setup When first accessing Cmpliance Guardian using Micrsft Internet Explrer (IE), sme initial security settings must be cnfigured. Run Cmpliance Guardian s server applicatin fund in the Start menu n the machine where the Cmpliance Guardian Cntrl Service is installed, and cmplete the fllwing steps: 1. When yu access Cmpliance Guardian by IE, the brwser will display a security certificate prmpt. Select the Cntinue t this website ptin listed next t the shield. Figure 2: Security certificate prmpt. 2. Select the Certificate Errr buttn next t the address bar. Figure 3: Certificate Errr buttn. Cmpliance Guardian Installatin and Administratin User Guide 37

38 3. Select View certificates in the pp-up. The Certificate windw appears. Figure 4: View certificates link. 4. Select the Install Certificate buttn t install the Cmpliance Guardian certificate. The name f this certificate is the same as the hstname f the server that has Cmpliance Guardian Cntrl Service installed. Figure 5: Install Certificate buttn. 5. Select Next t cntinue installing the certificate. 38 Cmpliance Guardian Installatin and Administratin User Guide

39 6. Select the Place all certificates in the fllwing stre ptin and select Brwse t brwse t the Trusted Rt Certificatin Authrities flder. Select OK t cnfirm the selectin and select Next. Figure 6: Certificate Imprt Wizard. 7. Select Finish t cmplete the certificate imprt. 8. Select OK in the prmpt windw t acknwledge the successful imprt. 9. Chse t temprarily allw the Cmpliance Guardian GUI pp-up windw r t always allw the Cmpliance Guardian GUI in the prmpt windw. Figure 7: Chse hw t allw the pp-ups. Yu can nw lg int Cmpliance Guardian frm Internet Explrer. Cmpliance Guardian Installatin and Administratin User Guide 39

40 Lgging In t Cmpliance Guardian The Cmpliance Guardian GUI can be launched frm Web brwsers within the same netwrk as the Cmpliance Guardian Manager. Refer t Accessing the Cmpliance Guardian GUI fr the supprted Web brwsers. Cnnect t the interface using the IP/hstname fr the Cmpliance Guardian Manager Cntrl Service, as well as the Cntrl Service Prt if it was changed. 1. Open an Internet Explrer windw and enter where <machine> is the hstname r IP address f the machine running the Cmpliance Guardian Cntrl Service. If the default prt number has been changed frm 14100, enter the new prt number. *Nte: If the hstname f the machine running the Cmpliance Guardian Cntrl Service cntains the underline (_), use the IP address f the crrespnding machine t access Cmpliance Guardian. 2. The Cmpliance Guardian lgin screen pps up. Select Lcal System frm the Lg n t drpdwn list and enter the default lgin accunt infrmatin: Lgin ID: admin Passwrd: admin 3. Select Lgin. *Nte: When yu lg n t Cmpliance Guardian fr the first time, it is strngly recmmended that yu back up the Cmpliance Guardian security keys fr prtectin. Fr mre infrmatin, refer t Viewing Security Infrmatin. Yu can als lg n Cmpliance Guardian using the integratin with ther authenticatin methds. Fr mre infrmatin, refer t 40 Cmpliance Guardian Installatin and Administratin User Guide

41 Authenticatin Manager. Hw t Use Yur Keybard in Cmpliance Guardian Please refer t the fllwing table fr instructins n using the keybard in Cmpliance Guardian. Keybard Key Tab Enter Space F2 When t Use Switch amng all f the functins in ne page. Select ne buttn. Select ne check bx/radi buttn/buttn. Gain fcus in ne cell f a table. Switch amng ptins in ne list bx, ptins in ne cmb bx, r amng cells in ne table. Cmpliance Guardian Manager and Agent Maintenance If yu want t mdify the cnfiguratin f Cmpliance Guardian Manager/Agent after the installatin, pen the Start Menu in Windws n the Cmpliance Guardian Manager/Agent server, and navigate t All Prgrams > AvePint Cmpliance Guardian. Then, pen the Cmpliance Guardian Manager Tls/ Cmpliance Guardian Agent Tls flder and select Manager Cnfiguratin Tl/Agent Cnfiguratin Tl. Select the items listed n the left part f the tl and yu can mdify the crrespnding settings. Refer t Installing Cmpliance Guardian Manager and Installing Cmpliance Guardian Agent fr detailed infrmatin abut the settings. Cmpliance Guardian Installatin and Administratin User Guide 41

42 Update Cmpliance Guardian T update Cmpliance Guardian, cmplete the fllwing steps: 1. Navigate t Cmpliance Guardian Manager > Cntrl Panel > Update Manager. The Update Manager interface appears. 2. Select Manage Updates n the ribbn. The Manage Updates interface appears. 3. Select Dwnlad t dwnlad the selected update frm Cmpliance Guardian update server, r select Brwse n the ribbn t brwse and lad the update file int Cmpliance Guardian Manager. 4. Select the update yu want t install and select Install. The Server Selectin pp-up windw shws all f the available Manager services n the Manager tab and all f the available Agents n the Agent tab. 5. On the Manager tab, select the Install the update fr all the managers belw checkbx t install the update n the Manager services. 6. On the Agent tab, select the farms whse Agent services yu want t update by selecting the crrespnding checkbxes. The update will be installed n the selected Agents. 7. Select Install n the ribbn r n the lwer-right crner. A message appears t prmpt yu whether t autmatically restart the IIS service immediately. 8. Select OK t autmatically restart the IIS service, r select Cancel t manually restart the IIS service later. The Update Installatin page appears, displaying the prgress. After installatin, a message appears t indicate that the installatin is successful. 9. Select Finish. After updating Cmpliance Guardian and the IIS service finishes restarting, yu must update the reprt databases if yu still want t use the databases in the updated Cmpliance Guardian versin. 10. Navigate t Cntrl Panel > Slutin Manager. 11. If a message appears after a slutin (The Current slutin versin is lwer than the agent versin), then select the checkbx befre the slutin, and select Upgrade n the ribbn t update the slutin. Cmpliance Guardian Reprt Database Upgrade Tl Cmpliance Guardian Reprt Database Upgrade tl is used t update the reprt database r ut f quarantined files (nly applies t files created in a versin earlier than Cmpliance Guardian 3 SP3) if yu want use it in Cmpliance Guardian 3 SP3. 42 Cmpliance Guardian Installatin and Administratin User Guide

43 Using the Tl T upgrade the Cmpliance Guardian reprt database r ut f place quarantined files, cmplete the fllwing steps: Navigate t the machines with Cmpliance Guardian Manager installed. Open the \Cmpliance Guardian\Manager\Shared\Tls\CGReprtDBUpgrade directry t find the CGReprtDBUpgrade.exe file. Select CGReprtDBUpgrade.exe, and then select Run as administratr. The cmmand line interface appears. Enter the Cmpliance Guardian Manager Server IP address, and press Enter. Enter the Cmpliance Guardian Manager Server prt, press Enter. Enter the Cmpliance Guardian lgin username, and press Enter. Enter the lgin passwrd, and press Enter. Figure 8: The CGReprtDBUpgrade.exe file interface. Enter the versin t which yu want t update. If yu want t update the reprt databases that stre the Cmpliance Scanner frm the previus versin (the versin lwer than Cmpliance Guardian 3 SP1) t Cmpliance Guardian 3 SP1, enter 3.1.0, and then wait until the Press any key t exit message appears after the databases finishes updating. If yu want t update the reprt databases that stre the Cmpliance Scanner data and the reprt databases that stre the Classificatin Scanner data frm the previus Cmpliance Guardian versin (the Cmpliance Guardian 3 SP1 versin r the versin greater than Cmpliance Guardian 3 SP1 but lwer than Cmpliance Guardian 3 SP2 r Cmpliance Guardian 3 SP3) t Cmpliance Guardian 3 SP2 r 3 SP3. Enter r Then, wait until the Press any key t exit message appears. If yu have entered n, yu must finish the fllwing steps (step 4 and step 5) fr cmpleting the update f the reprt databases. Cmpliance Guardian Installatin and Administratin User Guide 43

44 *Nte: Yu can nly update the Cmpliance Guardian versin in sequence. Fr example: if yu want t update Cmpliance Guardian 3 SP1 t Cmpliance Guardian 3 SP3, yu can nly first update Cmpliance Guardian 3 SP1 t Cmpliance Guardian 3 SP2, and then update Cmpliance Guardian 3 SP2 t Cmpliance Guardian 3 SP3. Update the ld reprt data in the Cmpliance Guardian Agent server. G t the machines with Cmpliance Guardian Agent installed and pen the \Cmpliance Guardian\Agent\Bin directry t find the CCS.Tlkit.v2.exe r CCS.Tlkit.v4.exe file. In the SharePint 2007 r SharePint 2010 envirnment, select CCS.Tlkit.v2.exe; in the SharePint 2013 envirnment, select CCS.Tlkit.v4.exe. Select Run as administratr. The cmmand line interface appears. Enter 7 t update all f the ld reprt data and press Enter. Wait until Press Enter t exit appears after the reprt databases finishes updating. Figure 9: The CCS.Tlkit.v2.exe file interface. *Nte: Yu are nly required t run CCS.Tlkit.v2.exe r CCS.Tlkit.v4.exe and perfrm the actin in step 11 n ne agent service per SharePint farm. 44 Cmpliance Guardian Installatin and Administratin User Guide

45 Uninstalling Cmpliance Guardian The Cmpliance Guardian Uninstallatin Wizard is there t guide yu thrugh this uninstallatin prcess. By fllwing the steps belw, yu will have Cmpliance Guardian remved frm yur envirnment very quickly. In rder t cmplete the uninstallatin successfully, the Uninstallatin Wizard must be run by a lcal administratr. Uninstalling Cmpliance Guardian Manager In rder t uninstall Cmpliance Guardian Manager, please ensure the Manager Service being remved is nt in use by anther prcess. T uninstall Cmpliance Guardian Manager, cmplete the fllwing steps: *Nte: Once the uninstallatin is in prgress, it cannt be cancelled and the uninstallatin interface cannt be clsed. 1. Open the Start Menu in Windws n the Cmpliance Guardian Manager Server, and navigate t All Prgrams > AvePint Cmpliance Guardian. 2. Open the Cmpliance Guardian Manager Tls flder, and then select Manager Uninstall. 3. Select the Remve ptin, and then select Next. 4. In the Ready t Remve Cmpliance Guardian Manager page, cnfigure the Remve cnfiguratin file ptin. Select this ptin if yu want t remve all f the flders and cnfiguratin files generated by the Cmpliance Guardian Manager installatin. *Nte: The Lgs flder will nt be remved whether yu select the Remve cnfiguratin file ptin r nt. 5. Select Remve t start the Manager uninstallatin prcess. If the applicatin pl created by Cmpliance Guardian Manager installatin is still useful, it will nt be deleted during the Manager uninstallatin. If the applicatin pl created by Cmpliance Guardian Manager installatin is nt used by any ther applicatins, it will be deleted during the Manager uninstallatin. *Nte: The Manager uninstallatin will nt delete the Manager databases. 6. Select Finish t cmplete the uninstallatin. Cmpliance Guardian Installatin and Administratin User Guide 45

46 Uninstalling Cmpliance Guardian Agent In rder t uninstall Cmpliance Guardian Agent, please ensure there are n current jbs running n the agent. T uninstall Cmpliance Guardian Agent, cmplete the fllwing steps: *Nte: Once the uninstallatin is in prgress, it cannt be cancelled and the uninstallatin interface cannt be clsed. 1. Open the Start Menu in Windws n the Cmpliance Guardian Agent server, and navigate t All Prgrams > AvePint Cmpliance Guardian. 2. Open the Cmpliance Guardian Agent Tls flder, and then select Agent Uninstall. 3. Select the Remve ptin, and then select Next. 4. In ready t Remve Cmpliance Guardian Agent page, cnfigure the Remve cnfiguratin file ptin. Select this ptin if yu want t remve all f the flders and cnfiguratin files generated by the Cmpliance Guardian Agent installatin. *Nte: The Lgs flder will nt be remved whether yu select the Remve cnfiguratin file ptin r nt. 5. Select Remve and the Agent uninstallatin prcess starts. 6. Select Finish t cmplete the uninstallatin. Reslve Issues Occurred During the Cmpliance Guardian Installatin If yu encunter ther issues when installing the Cmpliance Guardian Manager r Agents, fllw the prmpt messages t reslve the issue, and run the installatin prgram again. If the issue persists, refer t the AvePint Technical Supprt site fr additinal help. 46 Cmpliance Guardian Installatin and Administratin User Guide

47 Unattended Installatin: Cmpliance Guardian Manager Make sure the system requirements are met befre starting the Cmpliance Guardian Manager unattended installatin. Fr mre infrmatin, refer t Cmpliance Guardian Manager System Requirements. Generating the Installatin Answer File fr Cmpliance Guardian Manager The Answer file is an XML file which prvides cnfiguratin infrmatin required fr the unattended installatin. Befre perfrming the unattended installatin, the Answer file must be generated using the Cmpliance Guardian Setup Manager. Navigate t the \UnattendedInstall\SetupManager flder inside the unzipped Manager installatin package, and duble select SetupManager.exe t run it. Cmplete the fllwing steps: On the welcme screen, select Next. Select Create a new answer file fr Cmpliance Guardian Manager. Mdify an existing answer file If yu want t reuse an existing Answer file, select Mdify an existing answer file. If this is selected, the path field will be enabled. Enter the full path f the answer file is r select Brwse t brwse fr an answer file. Fr example, C:\AnswerFile.xml Select Next. *Nte: We recmmend yu create a generic Answer file s that it can be reused later with mdificatin. Carefully review the Cmpliance Guardian License Agreement. After yu have read the terms in the license agreement, check the I accept the terms in the license agreement checkbx t agree t the terms. Select Next. Enter yur name and the rganizatin int the prvided field. Select Next t cntinue the cnfiguratin, r select Back t return t the previus interface. Set up the installatin lcatin using the fllwing cnditins: Default directry The Cmpliance Guardian Manager will be installed t the default installatin lcatin n the specified destinatin server, which is \Prgram Files\AvePint\Cmpliance Guardian\Manager. Custmized directry If yu select this ptin, enter a custmized path in the Installatin Path field where yu want t install the Cmpliance Guardian Manager n the destinatin server. Cmpliance Guardian Installatin and Administratin User Guide 47

48 Use the default directry if yur custmized directry is invalid Enable this ptin t install Cmpliance Guardian Manager t the default directry shuld the path yu defined fr custmized directry be invalid. Fr example, if the drive indicated by the path yu specified des nt exist n the destinatin server. Select the Cmpliance Guardian Manager service yu want t install. There are nly ne service yu can install. Cntrl Service Manages all Cmpliance Guardian peratins and cmmunicates with Cmpliance Guardian, allwing users t interact with the sftware. All agents cmmunicate with the Manager via the Cntrl Service, s it is imperative that the machine yu install the Cntrl Service n is accessible by all agent machines. This service can be run n a Windws Netwrk Lad Balanced cluster t ensure lad balancing which leverages the Windws Netwrk Lad Balancer t autmatically select the prper Cmpliance Guardian Cntrl Service fr ptimal perfrmance. Select Next. Set up the Cntrl Service Cnfiguratin: IIS Website Settings Cnfigure the IIS website settings fr the Cntrl Service. The IIS website is used t access Cmpliance Guardian Manager. IIS website Enter the website name and create a new IIS website fr the Cntrl Service. The default Website Prt used t access Cmpliance Guardian Cntrl Service is 14100, yu d nt need t change it unless a knwn prt cnflict exists. Website Prt Cntrl Service cmmunicatin prt. The default prt is Applicatin Pl Settings Cnfigure the IIS applicatin pl settings fr the crrespnding website. The applicatin pl is used t handle the requests sent t the crrespnding website. Applicatin pl Enter the applicatin pl name fr the crrespnding website. Applicatin Pl Accunt Enter an applicatin pl accunt t be the administratr f the specified applicatin pl, and the crrespnding passwrd. *Nte: The applicatin pl accunt fr cnnecting an existing IIS website r creating a new IIS website must have the fllwing Lcal System Permissins: Member f the fllwing lcal grup: IIS_WPG (fr IIS 6) r IIS_IUSRS (fr IIS 7 and IIS 8) Full Cntrl t HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\Cmpliance Guardian Full Cntrl t Cmpliance Guardian Manager flder 48 Cmpliance Guardian Installatin and Administratin User Guide

49 Member f the Perfrmance Mnitr Users grup Full Cntrl t Cmpliance Guardian Certificate private keys Full Cntrl (r Read, Write, Mdify and Delete) t C:\WINDOWS\Temp (nly fr Windws 2003 envirnment) Yu can add the applicatin pl accunt t the lcal Administratrs grup t meet the required permissins. Select Next t cntinue t cnfigure the database settings fr the Cntrl Service. Cnfigure a database fr string the relevant data f Cntrl Service. Database Type Only MS SQL Server is supprted t serve as the database server fr Cntrl Service. Database Server Enter the MS SQL server name. Cntrl Database Name Enter a database name fr the Cntrl Service. If the database des nt exist, it will be created in the prvided MS SQL server. Database Credentials Select the credential fr this Cntrl Service database. Windws Authenticatin (the default ptin) Use this methd when yu want the user identity t be cnfirmed by Windws. The specified accunt must have the necessary permissin t access the SQL Server machine where yu want t create the cntrl service database. SQL Authenticatin SQL server will cnfirm the user identity itself accrding t the specified accunt and passwrd. The specified accunt must have the fllwing permissin: DB Owner f the existing Cmpliance Guardian Cntrl Database r DB Creatr f the newly created Cmpliance Guardian Cntrl Database. Passphrase Settings Enter the passphrase yu want t use fr prtecting Cmpliance Guardian Manager data. Advanced Database Settings Yu can chse t assciate the Cmpliance Guardian Cntrl Database with a specific failver SQL server that is used in cnjunctin with SQL Server database mirrring. Select Next. Once all f the required infrmatin has been cnfigured, all f the infrmatin cnfigured in the previus steps is listed n the Installatin Summary page. Select Save, and specify the path yu want t save the Answer file t. Yu can als mdify the Answer file s name in the pp-up windw. Cmpliance Guardian Installatin and Administratin User Guide 49

50 Imprt the UnattendedInstallatin.dll File Befre perfrming the Cmpliance Guardian Manager unattended installatin, the UnattendedInstallatin.dll file must be imprted int Windws PwerShell using either f the tw methds belw. *Nte: If the UnattendedInstallatin.dll file is nt imprted successfully, use the Set-ExecutinPlicy cmmand t set the executin plicy t Unrestricted, RemteSigned, r AllSigned in Windws PwerShell and perfrm the imprt again using ne f the fllwing methds. T manually imprt the UnattendedInstallatin.dll file, cmplete the fllwing steps: Select Start n the server with the unzipped Manager installatin package residing in, and find Windws PwerShell. Right-click n it, and select Run as administratr t run it. Enter the fllwing cmmand, and press Enter t imprt the UnattendedInstallatin.dll file: Imprt-Mdule \UnattendedInstall\PwerShellMdules\UnattendedInstallatin.dll T autmatically imprt the UnattendedInstallatin.dll file, cmplete the fllwing steps: Navigate t the \UnattendedInstall\PwerShellMdules flder inside the unzipped Manager installatin package. Right-click n the UnattendedInstallatinLauncher.bat file, and select Run as administratr t run it. Nw that yu have imprted the UnattendedInstallatin.dll file, yu can use the cmmands in the fllwing sectins t check yur envirnment, perfrm the manager installatin, and cnfigure settings. Cmmands and Cmmand Parameters fr Cmpliance Guardian Manager Unattended Installatin T perfrm the Cmpliance Guardian Manager unattended installatin, refer t the fllwing sectins fr the cmmands. Installatin Cmmand The Cmpliance Guardian Manager Unattended Installatin cmmand fr installing Cmpliance Guardian Manager remtely is Install-CGManager. Fr example: Install-CGManager -CustmTDFPath C:\Users\add\Desktp\custm checks.zip -TargetName hstmachine -Username AvePint\Cmpliance Guardian -Passwrd Ave -PackageFilesFlder "C:\Cmpliance Guardian Manager" -AnswerFilePath "C:\AnswerFile.xml" -RemteTempPath C:\TempFlder 50 Cmpliance Guardian Installatin and Administratin User Guide

51 This table cntains detailed infrmatin fr each f the parameters: Parameter Type Descriptin -CustmTDFPath Optinal The path f the ZIP file that cntains the custm ZIP checks. After Cmpliance Guardian is installed, the ZIP file will lcate in Cmpliance Guardian\Manager\Cntrl\bin\Resurces. The name f the ZIP file will be changed t Custm XML AIO.zip. Cmpliance Guardian s built-in checks and the checks in this ZIP file will be laded in Test Suite Manager f Cmpliance Guardian. -TargetName Required The name r IP address f the destinatin machine where yu want t install the Cmpliance Guardian Manager. *Nte: If the hstname is used, ensure that the specified cmputer name can be reslved thrugh the lcal Hsts file, by using Dmain Name System (DNS) queries, r thrugh NetBIOS name reslutin techniques. -Username Required The username f the user used t access the destinatin machine where yu want t install the Cmpliance Guardian Manager. The frmat f the username is: dmain\username. The permissins f the user specified here are as fllws: If the specified user is the lcal administratr f the destinatin machine, it can be used directly. Enter.\administratr fr the Username parameter. If the specified user is frm the dmain which the destinatin machine belngs t, the dmain user must be added t the Administratrs grup n the destinatin machine. The user specified here must have the Full Cntrl permissin t the path specified in RemteTempPath parameter. -Passwrd Required The passwrd f the user specified abve. Qute the passwrd if it cntains any special character r space. -PackageFilesFlder Required The lcal path n the machine where yu run the cmmand. The specified path stres the unzipped Cmpliance Guardian Manager installatin package Cmpliance Guardian Installatin and Administratin User Guide 51

52 Parameter Type Descriptin (Manager ZIP file). The frmat f the path is: C:\package. Qute the path if it cntains any special character r space. -AnswerFilePath Required The lcal path where yu saved the Answer file. The path must be detailed t the name f the Answer file. Fr example, C:\AnswerFile.xml. -RemteTempPath Required A lcal path n the destinatin machine that the Cmpliance Guardian Manager is installed t. The frmat f the path is: C:\temp. The path will be used t stre the temprary files generated during the Cmpliance Guardian Manager unattended installatin. The temprary files will be deleted as sn as the unattended installatin finishes. -Lg Optinal This is an ptinal parameter. If used, the lgs f the unattended installatin will be saved t the.txt file in the specified path. The path specified in this parameter must be detailed t the name f the lg file. Fr example, C:\Lg.txt. If the specified lg file des nt exist, it will be generated autmatically. -UseIPv6frCmmunicatin Optinal This is an ptinal parameter used t specify the cmmunicatin methd between the machine where the cmmand is run and the destinatin machine that the Cmpliance Guardian Manager is installed. If an IPv6 address is entered in TargetName parameter, this parameter must be entered. *Nte: When using this parameter, bth the destinatin machine and the machine where yu run this cmmand must supprt IPv6. -ReceiveInfPrt Optinal This is an ptinal parameter t specify a prt fr the surce machine t receive the data frm the destinatin machine. This prt and the destinatin machine s IP are added t an inbund rule f the surce machine s firewall s it allws all the cnnectins frm the destinatin machine. Cmpliance Guardian recmmends yu cnfigure this parameter t ensure smth cmmunicatin between the surce machine and the destinatin machine. -Timeut Optinal This is an ptinal parameter t specify a timeut value fr the cnnectin t the destinatin machine. A 52 Cmpliance Guardian Installatin and Administratin User Guide

53 Parameter Type Descriptin timeut errr will ccur if there is n cnnectin t the destinatin machine in the specified perid. Cmpliance Guardian Installatin and Administratin User Guide 53

54 Unattended Installatin: Cmpliance Guardian Agent The Cmpliance Guardian Agent can be installed remtely using the unattended installatin after the Manager s services have started. Ensure the system requirements are met befre starting the Cmpliance Guardian Agent unattended installatin. Fr mre infrmatin, refer t System Requirements fr Agent Service Installatin. Generating the Installatin Answer File fr Cmpliance Guardian Agent The Answer file is an XML file which prvides cnfiguratin infrmatin required fr the unattended installatin. Befre perfrming the unattended installatin, the Answer file must be generated using the Cmpliance Guardian 6 Setup Manager. Navigate t the \UnattendedInstall\SetupManager flder inside the unzipped Manager installatin package, and duble select SetupManager.exe t run it. Yu will be guided thrugh the fllwing steps. On the welcme screen, select Next. Select Create a new answer file fr Cmpliance Guardian Agent. Mdify an existing answer file If yu want t reuse an existing Answer file, select Mdify an existing answer file. If this is selected, the path field will be enabled. Enter the full path f the answer file r select Brwse t brwse fr an answer file. Fr example, C:\AnswerFile.xml *Nte: We recmmend yu create a generic Answer file s that it can be reused later with mdificatin. Select Next. Carefully review the Cmpliance Guardian License Agreement. After yu have read the terms in the license agreement, select n the check-bx t select I accept the terms in the license agreement. Select Next. Enter yur name and the rganizatin int the prvided field. Select Next t cntinue the cnfiguratin. Select Back t g back t the previus interface. Set up the installatin lcatin using the fllwing cnditins. Default Directry The Cmpliance Guardian Agent will be installed t the default installatin lcatin n the specified destinatin server, which is \Prgram Files\AvePint\Cmpliance Guardian\Agent. Custmized Directry If select this ptin, the Installatin Path field will be enabled, enter a custmized path and the Cmpliance Guardian Agent will be installed t the specified path n the destinatin server. 54 Cmpliance Guardian Installatin and Administratin User Guide

55 Use the default directry if yur custmized directry is invalid If this ptin is selected, the Cmpliance Guardian Agent will be installed t the default directry when the custmized directry is invalid. Fr example, the path yu specified is n a drive which des nt exist n the destinatin server. Set up the Cntrl Service cnfiguratin: Cmpliance Guardian Cntrl Service Hst The hstname r IP address f the machine where installed Cntrl Service. Cmpliance Guardian Cntrl Service Prt This is the prt used fr cmmunicatin with Cntrl Service and shuld match the infrmatin prvided during the Manager cnfiguratin. The default prt number is Set up the Agent prt: Cmpliance Guardian Agent Prt The prt specified here is used by the Manager r ther Agents fr cmmunicatin. The default prt number is Use a randm prt number if the specified ne is being used If select this ptin, Cmpliance Guardian will use a randm prt number if the prt yu specified has already been used. This ptin is selected by default. Set up the Agent cnfiguratin: Manager Passphrase Enter the Manager Passphrase specified when cnfiguring the Cmpliance Guardian Manager installatin answer file. Cmpliance Guardian Agent Accunt Specify the username and passwrd f the Agent accunt under which the Agent activities are perfrmed. Once all the required infrmatin has been cnfigured, all f the infrmatin cnfigured in the previus steps is listed in the Installatin Summary page. Select Save, and specify the path yu want t save the Answer file t. Yu can als mdify the Answer file s name in the pp-up windw. Imprt the UnattendedInstallatin.dll File Befre perfrming the Cmpliance Guardian Agent unattended installatin, the UnattendedInstallatin.dll file must be imprted int Windws PwerShell using either f the tw methds belw. *Nte: If the UnattendedInstallatin.dll file is nt imprted successfully, use the Set-ExecutinPlicy cmmand t set the executin plicy t Unrestricted, RemteSigned, r AllSigned in Windws PwerShell and perfrm the imprt again using either f the tw methds belw. T manually imprt the UnattendedInstallatin.dll file, cmplete the fllwing steps: Select Start, and find Windws PwerShell. Right-click n Windws PwerShell, and select Run as administratr t run it. Cmpliance Guardian Installatin and Administratin User Guide 55

56 Enter the fllwing cmmand. Imprt-Mdule \UnattendedInstall\PwerShellMdules\UnattendedInstallatin.dll Press Enter t imprt the UnattendedInstallatin.dll file. T autmatically imprt the UnattendedInstallatin.dll file, cmplete the fllwing steps: Navigate t the \UnattendedInstall\PwerShellMdules flder inside the unzipped Manager installatin package. Right click n the UnattendedInstallatinLauncher.bat file, and select Run as administratr t run it. *Nte: The value f the Set-ExecutinPlicy f the Pwershell must be set as AllSigned. Nw that yu have imprted the UnattendedInstallatin.dll file, yu can use the cmmands in the fllwing sectins t check yur envirnment, perfrm the agent installatin and cnfigure settings. Cmmands and Cmmand Parameters fr Cmpliance Guardian Agent Unattended Installatin T perfrm the Cmpliance Guardian Agent unattended installatin, run the cmmands in the fllwing sectins. Installatin Cmmand The Cmpliance Guardian Agent Unattended Installatin cmmand fr installing Cmpliance Guardian Agent remtely is Install-CGAgent. Fr example: Install-CGAgent -TargetName hstmachine -Username AvePint\Cmpliance Guardian -Passwrd Ave -PackageFilesFlder "C:\Cmpliance Guardian_Agent" -AnswerFilePath "C:\AnswerFile.xml" - RemteTempPath C:\TempFlder Detailed infrmatin abut the parameters is listed in the fllwing table: Parameter Type Descriptin -TargetName Required The name r IP address f the destinatin machine where yu want t install the Cmpliance Guardian Agent. *Nte: If the hstname is used, ensure that the specified cmputer name can be reslved thrugh the lcal Hsts file, by using Dmain Name System (DNS) queries, r thrugh NetBIOS name reslutin techniques. 56 Cmpliance Guardian Installatin and Administratin User Guide

57 Parameter Type Descriptin -Username Required The username f the user used t access the destinatin machine where yu want t install the Cmpliance Guardian Agent. The frmat f the username is: dmain\username. The permissins f the user specified here are as fllws: If the specified user is the lcal administratr f the destinatin machine, it can be used directly. Enter.\administratr fr the Username parameter. If the specified user is frm the dmain which the destinatin machine belngs t, the dmain user must be added t the Administratrs grup n the destinatin machine. The user specified here must have the Full Cntrl permissin t the path specified in RemteTempPath parameter. -Passwrd Required The passwrd f the user specified abve. Qute the passwrd if it cntains any special character r space. -PackageFilesFlder Required The lcal path n the machine where yu run the cmmand. The specified path stres the unzipped Cmpliance Guardian Agent installatin package (Agent ZIP file). The frmat f the path is: C:\package. Qute the path if it cntains any special character r space. -AnswerFilePath Required The lcal path where yu saved the Answer file. The path must be detailed t the name f the Answer file. Fr example, C:\AnswerFile.xml. -RemteTempPath Required A lcal path n the destinatin machine that the Cmpliance Guardian Agent is installed t. The frmat f the path is: C:\temp. The path will be used t stre the temprary files generated during the Cmpliance Guardian Agent unattended installatin. The temprary files will be deleted as sn as the unattended installatin finishes. -Lg Optinal This is an ptinal parameter. If used, the lgs f the unattended installatin will be saved t the.txt file in the specified path. The path specified in this Cmpliance Guardian Installatin and Administratin User Guide 57

58 Parameter Type Descriptin parameter must be detailed t the name f the lg file. Fr example, C:\Lg.txt. If the specified lg file des nt exist, it will be generated autmatically. - UseIPv6frCmmunicatin Optinal This is an ptinal parameter. It specifies the cmmunicatin methd between the machine where the cmmand is run and the destinatin machine that the Cmpliance Guardian Agent is installed t. If an IPv6 address is entered in TargetName parameter, this parameter must be entered. *Nte: When using this parameter, bth the destinatin machine and the machine where yu run this cmmand must supprt IPv6. -ReceiveInfPrt Optinal This is an ptinal parameter t specify a prt fr the surce machine t receive the data frm the destinatin machine. This prt and the destinatin machine s IP are added t an inbund rule f the surce machine s firewall s it allws all the cnnectins frm the destinatin machine. Cmpliance Guardian recmmends yu cnfigure this parameter t ensure smth cmmunicatin between the surce machine and the destinatin machine. -Timeut Optinal This is an ptinal parameter t specify a timeut value fr the cnnectin t the destinatin machine. A timeut errr will ccur if there is n cnnectin t the destinatin machine in the specified perid. 58 Cmpliance Guardian Installatin and Administratin User Guide

59 Installing Cmpliance Guardian App fr Real-Time Classificatin Cmpliance Guardian App fr Real-Time Classificatin is used t supprt scanning SharePint Online sites in real time. T scan SharePint Online sites, yu must first install the app, and then activate the app in Cntrl Panel > SharePint Sites. Fr mre infrmatin n Real-Time Classificatin Scanner, refer t Real-Time Classificatin Scanner. *Nte: Micrsft.NET Framewrk 4.5 r abve versin must be installed befre installing this app. The user wh installs the app must have lcal system permissins. The user will be granted Full Cntrl permissin t the fllwing grups and flders autmatically during the Cmpliance Guardian Manager App installatin: IIS_IUSRS (fr IIS 7.0) Full Cntrl t HKEY_LOCAL_MACHINE\SOFTWARE\AvePint\CmplianceGuardian\App Full Cntrl t Cmpliance Guardian App flder Member f the Perfrmance Mnitr Users grup Full Cntrl t Cmpliance Guardian Certificate private keys The applicatin pl accunt needs t be added t the lcal Administratrs grup t meet the required permissins. Refer t the fllwing steps t install the app: Dwnlad the CmplianceGuardian_O365APP_Serial_Number.zip file t a machine by cntacting yur AvePint representative. Unzip the package, and then pen the extracted directry. Run the Setup.exe file. The Cmpliance Guardian App fr Real-Time Classificatin Installatin Wizard interface appears. Select Next. Enter yur Name and Organizatin int the prvided fields. Select Next. Carefully review the Cmpliance Guardian License Agreement. After yu have read the agreement, check the I accept the terms in the license agreement checkbx, and select Next. Select Brwse, and then select the lcatin fr the app installatin. By default, the installatin lcatin is C:\Prgram Files\AvePint. Select Next. Cmpliance Guardian will perfrm a brief pre-scan f the envirnment t ensure that all rules meet the requirements. The status fr each rule will be listed in the Status clumn. Select the hyperlink f the status, and the detailed infrmatin abut the scan result will be listed in the pp-up windw. Yu may select Details t view the detailed infrmatin f all f the requirements. Cmpliance Guardian Installatin and Administratin User Guide 59

60 If any rules have failed the pre-scan, update yur envirnment t meet the requirements, and then select the Rescan buttn t check yur envirnment again. Once all the rules pass, select Next. Set up the Cmmunicatin Cnfiguratin: Cmpliance Guardian App Hst Specify the current server s hstname, IP address, r fully qualified dmain name (FQDN). Cmpliance Guardian App Prt The prt entered here is used by the Manager r ther Agents fr cmmunicatin. The default prt number is Cntrl Service Hst The hstname r IP address f the machine where the Cmpliance Guardian Cntrl Service is installed. Cntrl Service Prt This is the prt used fr cmmunicatin with the Cmpliance Guardian Cntrl Service and shuld match the infrmatin prvided during the Manager cnfiguratin. The default prt number is Manager Passphrase Manager Passphrase yu entered t prtect Cmpliance Guardian Manager data. SSL Certificatin Select the methd fr encrypting infrmatin and prviding authenticatin fr Cmpliance Guardian: Select Next. Set up the App Cnfiguratin: Built-in Certificate Uses the certificate prvided by Cmpliance Guardian. N additinal cnfiguratin is necessary. User-defined Certificate Enabling this ptin allws yu t select a certificate frm yur lcal machine. It will use the Certificate Authenticatin server f the current machine t check whether the certificate is revked. After the certificates are filtered, nly the certificates that are nt revked will be displayed. Cnfigure the App Accunt settings: App Catalg Site Enter the catalg site URL used t stre the app in SharePint Online. Username Enter the username that is used t lg int Office 365. Passwrd Enter the passwrd. Cnfigure the App Address settings: Lg int the SharePint Online site page: SharePint Online site URL/_layuts/15/AppRegnew.aspx, and then cpy the Client ID, Client Secret, App Title, App Dmain, Redirect URL infrmatin and then paste t the crrespnding field f this App Settings infrmatin field t build trust. Select Next. 60 Set up the website cnfiguratin: Cmpliance Guardian Installatin and Administratin User Guide

61 IIS Website Settings Cnfigure the IIS website settings fr the app. Yu can select t use an existing IIS website r create a new IIS website. The IIS website is used t cmmunicate between Office 365 and Cmpliance Guardian. Use an existing IIS website Select an existing IIS website frm the drp-dwn list. Create a new IIS website Enter the website name and create a new IIS website fr the app. Applicatin Pl Settings Cnfigure the IIS applicatin pl settings fr the crrespnding website. Yu can select t use an existing applicatin pl r create a new applicatin pl. The applicatin pl is used t handle the requests sent t the crrespnding website. The fllwing settings can be cnfigured: Use an existing applicatin pl (nt recmmended) Select an existing applicatin pl frm the drp-dwn list. If yu chse t use an existing applicatin pl, the Applicatin Pl Accunt settings are greyed ut and cannt be changed. Create a new applicatin pl Enter the applicatin pl name and applicatin pl accunt settings t create a new IIS applicatin pl fr the crrespnding website. IIS SSL Certificatin: Select Next. Nt Use IIS SSL Certificate D nt select an IIS SSL certificate. If yu select this radi buttn, yu can still add a certificate in IIS fr the website after yu finish installing the app. Select SSL Certificate Select an IIS SSL certificate. In the Ready t install Cmpliance Guardian App page, all f the infrmatin cnfigured in the previus steps is listed. Select Install t begin the installatin. Select Back t change any f the previus settings. Select Cancel t abandn all f the cnfiguratins and exit the installatin wizard. After the installatin is cmplete, select Finish t exit the installatin wizard. Cmpliance Guardian Installatin and Administratin User Guide 61

62 Uninstalling Cmpliance Guardian App fr Real-Time Classificatin T uninstall Cmpliance Guardian App fr Real-Time Classificatin, cmplete the fllwing steps: *Nte: Once yu have initiated the uninstallatin, it cannt be cancelled and the uninstallatin interface cannt be clsed. 1. Open the Start Menu in Windws n the Cmpliance Guardian Manager Server, and navigate t All Prgrams > AvePint Cmpliance Guardian. 2. Open the Cmpliance Guardian Manager Tls flder, and then duble-click Cmpliance Guardian App fr Real-Time Classificatin Uninstall. 3. In the appeared page, select the Remve cnfiguratin file ptin if yu want t remve all f the flders and cnfiguratin files generated by app installatin. 4. Select Remve t start the uninstallatin prcess. 5. Select Finish t cmplete the uninstallatin. 62 Cmpliance Guardian Installatin and Administratin User Guide

63 Navigatin Bar After yu lgin t Cmpliance Guardian, select Reprt r Administratin n the tp-left crner f the hme page. The navigatin bar appears. Yu can navigate t yur desired mdule by selecting the crrespnding tab in the navigatin bar. Figure 10: Navigatin bar. Cmpliance Guardian Installatin and Administratin User Guide 63

64 Navigating Cmpliance Guardian Cmpliance Guardian mimics the lk and feel f many Windws prducts, making fr an intuitive and familiar wrking envirnment. While there are many windws, pp-up displays, and messages within Cmpliance Guardian, they share similar features and are navigated in the same ways. Belw is a sample windw in Cmpliance Guardian. It features a familiar, dynamic ribbn, and a searchable, cntent list view. Figure 11: Navigating Cmpliance Guardian. 1. Ribbn Buttns Allws users t access the functinality f the active Cmpliance Guardian functins. 2. Manage clumns ( ) Allws users t manage which clumns are displayed in the list. Select the manage clumns ( ) buttn, and then select the checkbx next t the clumn name in the drp-dwn list. 3. Search Filter the cntent displayed by the keywrd yu designate; the keywrd must be cntained in a clumn value. At the tp f the viewing pane, enter the keywrd fr the permissin level yu want t display. Yu can select t Search all pages r Search current page. 64 Cmpliance Guardian Installatin and Administratin User Guide

65 *Nte: The search functin is nt case sensitive. 4. Filter the clumn ( ) Allws users t filter the infrmatin in the List View. Click the filter the clumn ( ) buttn next t the clumn and then select the checkbx next t the clumn name. 5. Hide the clumn ( ) Allws users t hide the selected clumn. 6. Change the number f items displayed per page, select the desired number frm 5, 8, 10, 15, 20, 25, 50, 100 in the Shw rws drp-dwn menu at the lwer-right crner. 7. Enter the page number in the G t f text bx at the lwer-right crner and press Enter t g t the specified page 8. Select the > buttn at the lwer-right crner t g t the next page; select the < buttn at the lwer-right crner t return t the previus page. Cmpliance Guardian Installatin and Administratin User Guide 65

66 Cntrl Panel The Cmpliance Guardian Cntrl Panel is the central interface fr managing Cmpliance Guardian and hw it interacts with yur SharePint envirnments. Cntrl Panel is als integrated int ther Cmpliance Guardian prducts, enabling yu t cnfigure relevant settings withut having t leave the interface f the mdule yu are using. Getting Started Refer t the fllwing sectins fr imprtant infrmatin n getting started with Cntrl Panel. Launching Cntrl Panel T launch Cntrl Panel and access its functinality, cmplete the fllwing steps: 1. Lg in t Cmpliance Guardian. If yu are already in the sftware, select the hme page buttn ( ) n the tp-left crner t g back t the hme page. 2. Frm the Cmpliance Guardian hme page, select Cntrl Panel t launch the Cntrl Panel. 3. Alternatively, yu can select Administratin n the tp-left crner, and select the Cntrl Panel tab n the appeared navigatin bar t launch Cntrl Panel. Figure 12: Cntrl Panel tab n the navigatin bar. 66 Cmpliance Guardian Installatin and Administratin User Guide

67 Figure 13: Cntrl Panel mdule launch windw. Understanding the Cntrl Panel Cntrl Panel has three key grups f cmpnents: System Settings View and manage yur Cmpliance Guardian settings, managers, agents, authenticatin, licenses, and prduct versin. All f these functins are perfrmed in Cntrl Panel s that yu can easily access them withut leaving the interface fr yur current task in Cmpliance Guardian. Applicatin Settings Cnfigure settings affect cmmn tasks perfrmed by all Cmpliance Guardian prducts. All f these settings are cnfigured in Cntrl Panel s that yu can easily access them withut leaving the interface fr yur current task in Cmpliance Guardian. Specific Prducts Settings Certain prducts in Cmpliance Guardian use preset cnfiguratins fr certain functinalities. While these settings may nt affect all Cmpliance Guardian prducts, all f these settings are cnfigured in Cntrl Panel because they can be leveraged by mre than ne prduct. Cmpliance Guardian Installatin and Administratin User Guide 67

68 Accessing the Cntrl Panel Since features in Cntrl Panel verlap with s many prducts, it is imprtant that it is easily accessible, but nt disruptive f yur current task. Fr this reasn, while there are many ways t access Cntrl Panel, the interface pens as a pp-up windw s that yu can remain n whichever page yu are n, and when yu are finished cnfiguring settings in Cntrl Panel, clsing it will return yu t the page yu were n. T access Cntrl Panel, select the Cmpliance Guardian tab, and then select Cntrl Panel. While in the interface f a certain prduct, if the prduct utilizes a feature in Cntrl Panel, selecting n that feature n the ribbn f the prduct page will bring up the Cntrl Panel pp-up windw with the apprpriate tab pen. Whenever yu are finished cnfiguring settings in Cntrl Panel, clse the windw t return t the previus screen yu were n. Mnitr The mnitr features in the Cntrl Panel f Cmpliance Guardian allw yu t view and manage Cmpliance Guardian Cntrl Service and Cmpliance Guardian Agents: Manager Mnitr Here yu can view details abut yur Cmpliance Guardian Cntrl Service. Agent Mnitr Here yu can view and cnfigure yur Cmpliance Guardian Agents currently installed n yur SharePint envirnment. This can be useful if there is a change in persnnel, and the SharePint accunt that the Agent uses t cmmunicate with SharePint needs t be changed. With Agent Mnitr, yu can als perfrm basic maintenance peratins n yur agents if an agent ever becmes unrespnsive r is having issues, r temprarily disable the Cmpliance Guardian Agent Service t perfrm server maintenance. Using the Manager Mnitr T access Manager Mnitr in the Cntrl Panel interface, select Manager Mnitr under the Mnitr heading. In Manager Mnitr, yu will see the Cmpliance Guardian Cntrl Service. Yu can select the Cntrl Service by checking the checkbx next t the service name, then select View Details n the ribbn t bring up the View Details page with infrmatin abut the selected Manager Service. When yu are finished viewing the infrmatin abut the Cntrl Service, select Clse n the ribbn t clse the Manager Mnitr tab and return t the Cntrl Panel main page. Using the Agent Mnitr T access Agent Mnitr, pen the Cntrl Panel interface, and then select Agent Mnitr under the Mnitr heading. In Agent Mnitr, yu will see a list f Cmpliance Guardian Agents which have been registered t the current Cmpliance Guardian Cntrl Service. 68 Cmpliance Guardian Installatin and Administratin User Guide

69 Once yur Cmpliance Guardian Agents are apprpriately displayed, yu can select an agent by checking the checkbx next t the Agent Name, and then select: Cnfigure Once yu select an agent, this buttn will becme available. Select Cnfigure n the ribbn t access the Agent Cnfiguratin interface. Here yu can cnfigure the SharePint Accunt fr the agent as well as the agent type. SharePint Accunt The SharePint Accunt is used by the Cmpliance Guardian Agent t prvide Cmpliance Guardian with access and cntrl t yur SharePint envirnment. The accunt cnfigured here must have the required permissins fr the Cmpliance Guardian prducts that are enabled. T cnfigure the SharePint accunt, enter the Username and Passwrd fr the desired accunt int the crrespnding text bx. Agent Type Cnfiguratin In rder t use a certain prduct, the crrespnding agent type must first be cnfigured. Befre selecting the prduct, the necessary agents fr that prduct must already be installed. T cnfigure the agent type fr the agent, check the checkbx next t the crrespnding prduct. Yu can navigate thrugh the different prduct suites that are enabled by selecting n the name f the suite. The cnfiguratin f the agent type is n yur lcal envirnment. Jb Restrictin Limit the maximum number f jbs that are allwed t run simultaneusly by this agent by enabling the Restrict the simultaneusly running jb cunt ptin and enter a psitive integer int the text bx. Once yu are finished cnfiguring the agent, select OK t save the cnfiguratins and return t the Agent Mnitr interface, r select Cancel t return t the Agent Mnitr interface withut saving any changes. Cnfiguratin File Uplad agent cnfiguratin files t the Manager Server and change them fr the specified agents. Select the desired Cmpliance Guardian Agents in Agent Mnitr and select Cnfiguratin File n the ribbn t change the cnfiguratin file fr them. In the pp-up windw, select OK t cnfirm the mdificatin actin and yu will be redirected t the cnfiguratin page. Refer t the instructins belw t change the cnfiguratin file. *Nte: Since mdifying the agent cnfiguratin files can be risky, it is nt recmmended fr end-users t d it. Agent Infrmatin In this field, yu can view the agents yu have selected previusly. Brwse Cnfiguratin File Uplad the cnfiguratin file t the Manager Server. Select Brwse t find the specified.cnfig file and select Open t uplad it. Yu are able t uplad multiple cnfiguratin files. Cmpliance Guardian Installatin and Administratin User Guide 69

70 *Nte: The name f the cnfiguratin file yu uplad must have the same name as the existing ne, and then yu are able t apply the cnfiguratin file t destinatin. Destinatin Path Enter the place where yu want t uplad the cnfiguratin file. Cmpliance Guardian supprts cnfiguratin file change in Agent\Bin and Agent\data paths. Cnflict Reslutin Select a reslutin when tw cnfiguratin files have the same name. Merge The cntent f the newly upladed cnfiguratin file will be merged int the ld ne. Replace The newly upladed cnfiguratin file will replace the ld ne. Select OK t change the cnfiguratin files as yu have cnfigured r select Cancel t exit the interface withut saving the cnfiguratin. If yu select OK, yu will be asked t restart the Agent Service. Select Aut t autmatically restart the Agent Service immediately r select Manual t manually restart the Agent Service later. View Details Select View Details n the ribbn t bring up the View Details page with infrmatin abut the selected Cmpliance Guardian Agent. Restart Select Restart n the ribbn t restart the selected Cmpliance Guardian Agent. This is useful in situatins where the agent is sluggish, r if a jb it is running hangs. Yu can restart the agent and try again. *Nte: Any jbs that are running when yu restart the agent will fail. Remve Select Remve n the ribbn t remve the selected Cmpliance Guardian Agent frm the Agent Mnitr. The remved agent will n lnger be used by the Cntrl Service. Yu can nly remve agents that have a dwn arrw ( ) in the Status clumn. Remving an agent des nt uninstall the agent. *Nte: When remving the last agent f ne farm in Agent Mnitr, the assciated farm and plans will als be deleted frm the Cmpliance Guardian databases. Deactivate Select Deactivate n the ribbn t deactivate the selected Cmpliance Guardian Agent. Once the agent is deactivated, it is marked as Inactive, and will nt be used by the current cntrl service. Hwever, the deactivated service will still run nrmally. This is useful when yu want t perfrm maintenance n a specified Cmpliance Guardian Agent. *Nte: Any jbs that are running when yu deactivate the agent will fail. Activate Select Activate n the ribbn t activate the selected Cmpliance Guardian Agent. Once the agent is activated, it is marked as Active, and will be used by the current cntrl service. 70 Cmpliance Guardian Installatin and Administratin User Guide

71 When yu are finished viewing and managing yur Cmpliance Guardian Agents, select Clse n the ribbn t clse the Agent Mnitr tab and return t the Cntrl Panel main page. System Optins System Optins allw yu t custmize the Cmpliance Guardian sftware interface itself. Within the System Optins tab, yu can access Cmpliance Guardian General Settings, Security Settings, and Advanced Settings: General Settings These settings affect Cmpliance Guardian s interface, which includes settings fr Appearance and SharePint Farm Settings. Yu can display Cmpliance Guardian in the language f yur preference, use date and time frmat that yu are cmfrtable with, insert a custm lg fr yur reprts and templates, and rename yur SharePint farms s that it is easier fr yu t recgnize them. Security Settings These settings affect access t Cmpliance Guardian, which includes settings fr System Security Plicy and System Passwrd Plicy. This way, yu have cntrl ver the users that are able t access Cmpliance Guardian. Cnfiguring General Settings T access General Settings fr Cmpliance Guardian, pen the Cntrl Panel interface, and then select General Settings under the System Optins heading. The fllwing settings can be cnfigured in this page: Language Preference Specify a language fr Cmpliance Guardian t be displayed in, r allw users t utilize a translatin engine t have Cmpliance Guardian displayed in the language f the user s brwser. Display fr all users Select this ptin t display Cmpliance Guardian in the language specified here. T change the display language, select the drp-dwn menu, and select yur desired language. Change t the end user brwser used language Select this ptin t allw Cmpliance Guardian t be displayed in the language used by the user s brwser. Then select a language fr Cmpliance Guardian t default t in the If the language des nt change successfully, please select t use a default language drp-dwn menu. This way, if Cmpliance Guardian des nt prperly display in the user s brwser language, Cmpliance Guardian will be displayed in the language specified here. Date and Time Frmat Set the system lcatin by selecting a lcatin frm the Lcale (Lcatin) drp-dwn menu. Set the frmat fr all date and time displayed in Cmpliance Guardian by selecting a date frmat frm the Date frmat drp-dwn menu, and selecting a time frmat frm the Time frmat drp-dwn menu. Custmize Lg Custmize the lg fr Cmpliance Guardian system reprts and e- mail templates. Select Brwse t find the desired lg file in the pp-up, then select the Cmpliance Guardian Installatin and Administratin User Guide 71

72 lg, and select Open t pen it. Select Preview t view the lg in the Shw Preview area. T hide the Shw Preview area, select Hide Preview. Select and drag the lg in the display field t change its placement. Select the zm in buttn ( ), the zm ut buttn ( ), r the reset buttn ( ) t reset the settings f the new lg. Select Restre t Default buttn t rll back t the default lg. Farm Name Mapping Custmize the display names fr yur farms in Cmpliance Guardian. T find a specific farm, enter the farm name in the search text bx, and select the search buttn ( ). Fr each farm, enter the desired display name in the crrespnding Display Name in Cmpliance Guardian text field. *Nte: The search functin is nt case sensitive. When yu are finished cnfiguring Cmpliance Guardian General Settings, select Save t save all changes, then Clse t exit the System Optins interface. If yu select Clse withut saving first, any changes yu have made will be lst. Cnfiguring Security Settings T access Security Settings fr Cmpliance Guardian, pen the Cntrl Panel interface, and then select General Settings under the System Optins heading. Select Security n the ribbn. There are tw tabs under Security Settings, System Security Plicy, and System Passwrd Plicy. System Security Plicy In the System Security Plicy tab, the fllwing ptins can be cnfigured: Maximum User Sessin Cnfigure the number f simultaneus lgns allwed fr Cmpliance Guardian. Fr any new sessins that surpass the designated number, the earliest sessin will be terminated. Sessin Timeut Cnfigure hw lng a user can be inactive befre being autmatically lgged ff. Enter an integer int the Lgn will expire in: text bx, and then select either Minute(s) r Hur(s) in the drp-dwn menu. Failed Lgn Limitatin Specify the maximum number f failed lgn attempts allwed in ne day. If a specific accunt fails t prvide the crrect lgin infrmatin in a single day, it will be lcked. T unlck the specified accunt, refer t 72 Cmpliance Guardian Installatin and Administratin User Guide

73 Accunt Manager. *Nte: The default admin accunt cannt be lcked. Inactive Perid Cnfigure hw lng a user can be inactive befre the accunt is autmatically disabled. Enter an integer int the Deactivate the accunt when the inactive perid reaches: text bx, then select either Day(s) r Mnth(s) in the drpdwn menu. Once deactivated, a Cmpliance Guardian administratr must activate the accunt befre the user can lg nt Cmpliance Guardian. Netwrk Security Cnfigure the IP addresses t have the desired level f access t Cmpliance Guardian. T access these settings, check the Enable netwrk security checkbx, and then select either: Trusted netwrk If selected, nly the IP addresses added t this field can access Cmpliance Guardian. T add an IP address as a trusted netwrk, enter the IP address in the Equals text bx, and then select Add. Repeat these steps t add additinal IP addresses. Restricted netwrk If selected, the IP addresses added t this field cannt access Cmpliance Guardian. T add an IP address as a restricted netwrk, enter the IP address in the Equals text bx, and then select Add. Repeat these steps t add additinal IP addresses. System Passwrd Plicy In the System Passwrd Plicy tab, the fllwing ptins can be cnfigured: Default Passwrd Settings Specify the rules t be applied n the passwrd after it has been saved. Select Accunt is inactive if yu wuld like t manually activate the accunt befre it can be used. *Nte: If n ptin is selected in this field, the passwrd des nt need t be mdified at first lgin, and it will never expire. Maximum and Minimum Passwrd Length Enter an integer fr the maximum and minimum number f characters allwed in a passwrd. Passwrd Rule Cnfigure the requirements fr the passwrd. Minimum number f alpha Enter a psitive integer. There must be at least the specified number f letters in the passwrd. Minimum number f numeric Enter a psitive integer. There must be at least the specified number f numbers in the passwrd. Minimum number f special characters Enter a psitive integer, there must be at least the specified number f special characters in the passwrd. The special characters #, $, %, ^, &, and *. Passwrd cannt cntain user ID Select this ptin and the passwrd cannt cntain the user s name. Cmpliance Guardian Installatin and Administratin User Guide 73

74 Passwrd cannt cntain space Select this ptin and the passwrd cannt cntain spaces. Passwrd Expiratin Warning Send ut warnings if the passwrd f a user will expire in the specified time perid. Set the perid by entering a psitive integer using the Day(s) r Mnth(s) ptin. Yu can chse the frms f the warning by selecting the Pp-up message r ntificatin. Viewing Security Infrmatin Cmpliance Guardian uses a passphrase t prtect the Cmpliance Guardian databases and secure the cmmunicatin. Befre cnnecting t the Cmpliance Guardian Manager when installing the Cmpliance Guardian Agents, the passphrase must be entered t verify the access. The default passphrase is generated autmatically at the end f the Manager s Installatin. T manage the passphrase, pen the System Optins tab, and then select Security Infrmatin n the ribbn t perfrm the fllwing actins: Back Up Select this buttn t back up the passphrase t the fllwing path: \AvePint\Cmpliance Guardian\Manager\KeysBak. It is strngly recmmended that yu back up the security keys and save the backup in a safe place. Manage Passphrase Select this buttn t view and mdify the passphrase. The Mdify ptin will be displayed. By default, the passwrd cannt be mdified. Yu can select this buttn t enable the mdificatin f the default passwrd. Enter a new passphrase in the crrespnding text bx and select OK t save it. *Nte: Only the users f Administratrs grup have the permissin t mdify the passphrase. Fr mre infrmatin abut adding users int Administratrs grup, refer t Managing Users. 74 Cmpliance Guardian Installatin and Administratin User Guide

75 Authenticatin Manager Authenticatin Manager allws yu t view and manage integrated authenticatin methds usable by Cmpliance Guardian. This means that Cmpliance Guardian can leverage yur pre-existing authenticatin methds, and custmize it fr access t Cmpliance Guardian. These authenticatin methds include: Windws Authenticatin Allws the users t lg nt Cmpliance Guardian using their Windws Authenticatin credentials. AD Integratin Allws the users t lg nt Cmpliance Guardian using their Active Directry authenticatin credentials. ADFS Integratin Allws the users t access Cmpliance Guardian as lng as they have lgged int the lcal machine using their ADFS credentials. Client Certificate Authenticatin Allws the users t access Cmpliance Guardian using Client Certificate Mapping Services. T access Authenticatin Manager fr Cmpliance Guardian, pen the Cntrl Panel interface, select Authenticatin Manager under the Authenticatin Manager heading. Select Clse n the ribbn t clse the Authenticatin Manager interface. Cnfiguring Windws Authenticatin T leverage Windws Authenticatin credentials t access Cmpliance Guardian, cmplete the fllwing steps: 1. In the Authenticatin Manager interface, select Windws Authenticatin n the ribbn. 2. Select the Authenticatin Type frm the drp-dwn menu: NTLM Negtiate (Kerbers) *Nte: Kerbers authenticatin methd must be previusly cnfigured in the perating system befre yu select the Negtiate (Kerbers) ptin when enabling the integratin with Windws Authenticatin. Otherwise, the NTLM authenticatin methd will be enabled. 3. Select OK t save any changes made and clse the Windws Authenticatin interface, r select Cancel t clse the Windws Authenticatin interface withut saving any changes made. Cnfiguring AD Integratin T leverage Active Directry authenticatin credentials t access Cmpliance Guardian, cnfigure yur Active Directries in the AD Integratin interface. Cmpliance Guardian Installatin and Administratin User Guide 75

76 T access yur Active Directry integratin cnfiguratins, pen the Authenticatin Manager interface, and then select AD Integratin n the ribbn. In the AD Integratin cnfiguratin interface, yu will see a list f previusly cnfigured Active Directries. Yu can custmize hw these Active Directries are displayed in the fllwing ways: Search Filter the Active Directries displayed by the keywrd yu designate; the keywrd must be cntained in a clumn value. At the tp f the viewing pane, enter the keywrd fr the Active Directry yu want t display. Yu can select t Search all pages r Search current page. Manage clumns (( ) Manage which clumns are displayed in the list s that nly the infrmatin yu want t see will be shwn. Select the manage clumns buttn ( ), and then check the checkbx next t the clumn name t have that clumn shwn in the list. Hide the clumn ( ) Hver ver a clumn name, and then select the hide the clumn buttn ( ) in the clumn name t hide the clumn. Filter the clumn ( ) Filter which item in the list is displayed. Unlike Search, yu can filter whichever item yu want, rather than search based n a keywrd. Hver ver a clumn name, and then select the filter the clumn buttn ( ) f the clumn yu want t filter, and then check the checkbx next t the item name t have that item shwn in the list. T remve all f the filters, select Clear Filter. T manage yur integrated Active Directries, yu can perfrm the fllwing actins: Add T add a new Active Directry, select Add n the ribbn, then enter the Dmain, Username and Passwrd in the crrespnding text bx. Select Validatin Test t see if the values yu entered are valid, and then select OK t save the cnfiguratins fr the new Active Directry and return t the AD Integratin interface, r select Cancel t return t the AD Integratin interface withut saving the cnfiguratins. Edit T make changes t a previusly cnfigured integrated Active Directry, select the Active Directry by checking the crrespnding checkbx, then select Edit n the ribbn. Make the necessary changes, and then select OK t save the changes and return t the AD Integratin interface, r select Cancel t return t the AD Integratin interface withut saving any changes. Delete T delete a previusly cnfigured Active Directry, select the Active Directry by checking the crrespnding checkbx, then select Delete n the ribbn. Yu will be presented with a pp-up windw ntifying yu that The user(s) assciated with the selected dmain(s) will be disabled. The user(s) can be enabled nly by adding the selected dmain(s) again. Are yu sure yu want t prceed? There is als an ptin t remve all f the users that are assciated with the selected Active Directries frm Cmpliance Guardian; t d s, check the Remve all users assciated with the selected dmain(s) checkbx. Select OK t cnfirm the deletin, r select Cancel t return t the AD Integratin interface withut deleting the selected Active Directries. Enable Select Enable t allw the use f credentials frm the crrespnding Active Directry t access Cmpliance Guardian. 76 Cmpliance Guardian Installatin and Administratin User Guide

77 Disable Select Disable t nt allw the use f credentials frm the crrespnding Active Directry t access Cmpliance Guardian. This ptin is useful during the maintenance f the Dmain Cntrller machine. Yu can disable the integratin with the dmain t be maintained and enable the integratin again after the maintenance. After ne Active Directry has been integrated with Cmpliance Guardian, it will be shwn in the Dmain text bx after yu select AD Integratin in the Lg n t drp-dwn list f the Cmpliance Guardian lgin page. If a dmain has father dmain, sub dmain r trust dmain, when a user frm these dmains has been added t Cmpliance Guardian, the crrespnding dmain will als be added int Cmpliance Guardian and yu will be able t view this dmain in Cmpliance Guardian lgin page. Cnfiguring ADFS Integratin T leverage Active Directry Federatin Services (ADFS) authenticatin credentials t access Cmpliance Guardian, cnfigure yur ADFS integratin in the ADFS Integratin interface. T access yur ADFS integratin cnfiguratins, in the Authenticatin Manager interface, select ADFS Integratin n the ribbn, then select ADFS Integratin in the drp-dwn menu. Yu will be brught t the ADFS Integratin Cnfigure Wizard. Cmplete the fllwing steps in the wizard t set up ADFS integratin: 1. ADFS Infrmatin Specify the fllwing general infrmatin f the ADFS yu want t integrate: ADFS Integratin Methd Select Manually t cnfigure the settings yurself, r select Autmatically t get the required infrmatin by using a federatin metadata trust XML file. Manual cnfiguratin Enter the URL f the security tken service (STS) in the ADFS Issuer text bx in the fllwing frmat: qualified dmain name/adfs/ls Autmatic cnfiguratin Enter the URL f the federatin metadata trust XML file in the Federatin Metadata Trust text bx in the fllwing frmat: qualified dmain name/federatinmetadata/ /federatinmetadata.xml Relying Party Identifier Enter Cmpliance Guardian s Relying Party Identifier, which must first be cnfigured in ADFS in the Relying Party Identifier text bx. When yu are finished cnfiguring the ADFS Infrmatin, select Next t cnfigure the Security Tken Settings. 2. Security Tken Settings Cnfigure the certificates used in the ADFS integratin: Tken-signing Chse Select. A new Select Certificate pp-up windw will appear fr yu t specify a tken-signing certificate t cmmunicate with ADFS. This certificate must be the same as the ne cnfigured in ADFS. Alternatively, yu may als select Find Certificate t search fr the desired certificate. Select a Find in: parameter frm the drp-dwn menu, enter the keywrds in the Cntains: text bx, select a Lk in field: Cmpliance Guardian Installatin and Administratin User Guide 77

78 parameter frm the drp-dwn menu, then select Find Nw t start the search. Select Stp t stp the search. Once yu have selected yur desired certificate, select OK t save and exit the Select Certificate interface, r select Cancel t exit the Select Certificate interface withut saving specifying a certificate. *Nte: The certificate specified here must be the same as the ne cnfigured in ADFS. Tken-decrypting (ptinal) Chse Select. A new Select Certificate pp-up windw will appear fr yu t specify a tken-decrypting certificate t prtect the cmmunicatin between Cmpliance Guardian and ADFS. This certificate must be the same as the ne cnfigured in ADFS. Alternatively, yu may als select Find Certificate t search fr the desired certificate. Select a Find in: parameter frm the drp-dwn menu, enter the keywrds in the Cntains: text bx, select a Lk in field: parameter frm the drp-dwn menu, then select Find Nw t start the search. Select Stp t stp the search. Once yu have selected yur desired certificate, select OK t save and exit the Select Certificate interface, r select Cancel t exit the Select Certificate interface withut saving specifying a certificate. When yu are finished cnfiguring the Security Tken Settings, select Next t cnfigure the Claim Cnfiguratin. 3. Claim Cnfiguratin Cnfigure the mappings between the Claim Name displayed in Cmpliance Guardian and the Claim Type displayed in ADFS. Yu can perfrm the fllwing actins t yur claims: Yu can change the rder f the claims in the Order clumn f the table. If a user can be identified using several claims, Cmpliance Guardian will use the Claim Name f the first claim listed here as the display name fr each respective user. Select t delete the selected claim. Select Autmatically t have the claim type be specified autmatically after yu select the claim name frm the Claim Name drp-dwn menu. Select Manu t add the claims manually. Select Aut t switch back t the default ptin. 4. Overview Review the settings yu have cnfigured in the previus steps. T make changes, select Edit in the crrespnding sectin, and yu will be brught back t that step s yu can make changes. 5. Finish Prvides yu with three ptins t imprt the relying party data fr Cmpliance Guardian in ADFS (using the Add Relying Party Trust Wizard). Optin 1 Select the link t imprt relying party data that is published nline frm the lcal netwrk Federatin metadata address. Optin 2 Select the link t dwnlad the Federatin metadata XML file, then uplad the dwnladed file t the ADFS server. Fllw the wizard t cnfigure ther settings. Optin 3 Enter the relying party data and the relying party identifier manually in the ADFS cnfiguratin wizard. 78 Cmpliance Guardian Installatin and Administratin User Guide

79 In this step, yu can als chse t exprt the current ADFS cnfiguratin infrmatin t a specified lcatin by selecting Exprt n the ribbn, then explre t the lcatin yu want t save the XML file t. Select Finish t save yur cnfiguratins, and return t the Authenticatin Manager interface, r select Cancel t return t the Authenticatin Manager interface withut saving any f the cnfiguratins made. Once yu have cnfigured an ADFS integratin fr Cmpliance Guardian, the Add Federatin Trust ptin will becme available. Add Federatin Trust allws yu t integrate anther trusted ADFS with the ADFS yu have already cnfigured fr Cmpliance Guardian. T add integratin with anther trusted ADFS, pen the Authenticatin Manager interface, select ADFS Integratin n the ribbn, and then select Add Federatin Trust frm the drp-dwn menu. In the Add Federatin Trust interface, enter the fllwing infrmatin: Name The name entered here will be displayed in the Server drp-dwn menu n the lgin page. Yu can select the crrespnding name t lg n Cmpliance Guardian using the trusted ADFS. URL The identifier f the trusted ADFS. Select Add t add the new recrd r select t delete a selected ADFS trust. Cnfiguring Client Certificate Authenticatin In the Authenticatin Manager interface, cnfigure Client Certificate Authenticatin in any f the fllwing ways: Select Enable in the Actin clumn f the Client Certificate Authenticatin rw t enable the Client Certificate Authenticatin. Select Disable t disable this authenticatin. Select Set as default t set this authenticatin as the default. Cmpliance Guardian Installatin and Administratin User Guide 79

80 Accunt Manager Accunt Manager allws yu t view and manage users and cnfigure user grups with custm permissin levels fr Cmpliance Guardian. This mdule allws yu t give specific peple, r grups f peple yur desired level f access t Cmpliance Guardian. In Accunt Manager yu can give specified permissins t Cmpliance Guardian users t limit which Cmpliance Guardian mdule a user is able t access and which farms specific Cmpliance Guardian users can access. A user can belng t multiple grups. *Nte: If yu wuld like t leverage authenticatin credentials frm Windws Authenticatin, AD r ADFS, yu must first cnfigure the relevant integratin settings in the 80 Cmpliance Guardian Installatin and Administratin User Guide

81 Authenticatin Manager. T access Accunt Manager fr Cmpliance Guardian, pen the Cntrl Panel interface, and then select Accunt Manager under the Accunt Manager heading. Select Clse n the ribbn t clse the Accunt Manager interface. Managing Permissin Levels The Permissin Level mdule allws yu t create pre-cnfigured permissins that can be applied t user grups r users t quickly and easily apply the same permissin cnfiguratin fr multiple users. T cnfigure permissin levels fr Cmpliance Guardian, pen the Accunt Manager interface, and then select Permissin Level n the ribbn. In the Permissin Level interface, previusly cnfigured Permissin Levels will be displayed. T manage yur permissin levels, yu can perfrm the fllwing actins: Add T create a new permissin level, select Add n the ribbn. After selecting t add the crrespnding permissin level, yu will be redirected t the cnfiguratin page t perfrm the fllwing actins: Name and Descriptin Enter a name fr the new system permissin level and an ptinal Descriptin fr future reference. Mdule Select the mdules yu want t grant permissin t fr all grups and users using this permissin level. Select Save t save the cnfiguratin. Select Cancel t return t the Permissin Level Interface withut saving changes. Edit T edit a previusly cnfigured permissin level, select the permissin level yu want t edit by checking the crrespnding checkbx, then select Edit n the ribbn. In the Edit Permissin Level interface, yu can mdify the Name and a Descriptin f this Permissin Level. In the Mdule sectin, yu can select the mdules yu want t allw this permissin level t access by checking the crrespnding checkbxes. Yu can select a prduct suite name t mdify the access t its mdules. *Nte: Unlicensed prducts have grayed ut tabs and cannt be cnfigured. Select OK t save the mdificatins fr the permissin level and return t the Permissin Level interface, r select Cancel t return t the Permissin Level interface withut saving the mdificatins. Delete T delete a previusly cnfigured permissin level, select the permissin level yu want t delete by checking the crrespnding checkbx, and then select Delete n the ribbn. A pp-up windw will appear t cnfirm this actin. Select OK t delete the selected permissin level and return t the Permissin Level interface, r select Cancel t return t the Permissin Level interface withut deleting the selected permissin level. Cmpliance Guardian Installatin and Administratin User Guide 81

82 When yu are finished managing yur permissin levels, select Cancel n the ribbn t return t the Accunt Manager interface. There fllwing permissin levels are cnfigured in advance: Real-Time Classificatin Scanner Enables the Real-Time Classificatin Scanner mdule. Scheduled Classificatin Scanner Enables the Scheduled Classificatin Scanner mdule. Cmpliance Reprt Enables the Cmpliance Reprt mdule. Cmpliance Scanner Enables the Cmpliance Scanner mdule. Actin Reprt Enables the Actin Reprt in Classificatin Reprt mdule. Human Auditr Enables the Human Auditr in Cmpliance Reprt mdule. Encryptin Enables the Encryptin in Classificatin Reprt > Incident Manager mdule. Quarantine Enables the Quarantine in Classificatin Reprt > Incident Manager mdule. Redactin Enables the Redactin in Classificatin Reprt > Incident Manager mdule. Yammer Enables the Yammer Reprt in Classificatin Reprt mdule. Managing User Grups User grups allw yu t apply the same permissin levels t all users within the same user grup. This way, yu can change the permissin levels f multiple users by editing yur user grup rather than individually cnfiguring permissin levels fr each user. Yu can als change the permissin levels f a user by changing the grup they belng t with pre-cnfigured permissin levels. T access yur user grup cnfiguratins, g the Accunt Manager interface and then select Grups n the ribbn. In the Grups cnfiguratin interface, yu will see a list f previusly cnfigured user grups. The Administratrs grup cmes pre-cnfigured and users f this grup have Full Cntrl permissins fr all mdules. T manage yur user grups, yu can perfrm the fllwing actins: Add Grup T add a new grup, select Add Grup n the ribbn. Yu will be directed t the cnfiguratin page accrdingly, and then yu can perfrm the fllwing actins: Grup Infrmatin Enter a Grup Name fr the new grup, then enter an ptinal Descriptin fr future reference. Grup Permissins In the Scpe sectin, select Glbal permissin t grant the users f this grup access t all farms with the permissin levels cnfigured here r select Permissin fr different farms t grant users f this system grup access t specific farms with the cnfigured system permissin levels. If Glbal permissin is selected, chse which r all f the Permissin Levels yu want t 82 Cmpliance Guardian Installatin and Administratin User Guide

83 assciate with this Grup. If Permissin fr different farms is selected, fr each farm, chse which r all f the Permissin Levels yu want t assciate with this grup. *Nte: At least ne permissin level must be assigned t the new grup. When yu are finished cnfiguring the settings fr the new grup, select OK t save and return t the Accunt Manager interface, r select Cancel t return t the Accunt Manager interface withut saving the cnfiguratins. Edit Grup T edit a grup, select the grup by checking the crrespnding checkbx, then select Edit Grup n the ribbn, r select the name f the desired grup. Yu will be brught t the Edit Grup interface. Here yu can change the descriptin fr this grup, as well as the permissin scpe and permissin levels. *Nte: If yu have a grup with Full Cntrl permissin cnfigured in Cmpliance Guardian, after upgrading t Cmpliance Guardian, this grup will maintain the Full Cntrl permissin but this will nt shw up n the interface by default. When yu edit this grup and change the permissin, it will pp up a warning message that the Full Cntrl permissin f this grup will be replaced by the newly granted permissins. Yu can select OK t cntinue the actin and save the change r select Cancel t cancel the peratin. In Cmpliance Guardian, nly users f Administratrs grup have Full Cntrl permissin. When yu have finished making changes t the cnfiguratins fr this grup, select OK t save and return t the Accunt Manager interface, r select Cancel t return t the Accunt Manager interface withut saving any changes. Shw Users T view and manage the users in a grup, select the grup by checking the crrespnding checkbx, then select Shw Users n the ribbn. Yu will be brught t the Shw Users interface. Here yu will see a list f all f the users that belng t this grup. Yu can custmize hw these users are displayed in the fllwing ways: Search Filter the users displayed by the keywrd yu designate; the keywrd must be cntained in a clumn value. At the tp f the viewing pane, enter the keywrd fr the user yu want t display. Yu can select t Search all pages r Search current page. Manage clumns ( ) Manage which clumns are displayed in the list s that nly the infrmatin yu want t see is shwn. Select the manage clumns buttn ( ), then check the checkbx next t the clumn name t have that clumn shwn in the list. Hide the clumn ( ) Hver ver a clumn name, and then select the hide the clumn buttn ( ) in the clumn name t hide the clumn. Filter the clumn ( ) Filter which item in the list is displayed. Unlike Search, yu can filter whichever item yu want, rather than search based n a keywrd. Hver ver a clumn name, and then select the filter the clumn buttn ( ) f Cmpliance Guardian Installatin and Administratin User Guide 83

84 the clumn yu want t filter, and then check the checkbx next t the item name t have that item shwn in the list. T remve all f the filters, select Clear Filter. Yu can perfrm the fllwing actins n the users f this grup: Add User t Grup T add users t this grup, select Add User t Grup n the ribbn. Yu will be brught t the Add User t Grup interface. Enter the username f the user yu want t add, and then select the check names buttn ( ) t verify that the username yu entered is valid. Alternatively, yu can select the brwse buttn ( ) t search fr the desired user. In the pp-up windw, enter the value t search fr in the Find text bx, and then select the search buttn ( ). Select the desired user, and then select Add. Select OK t add the users, r select Cancel t clse the windw withut adding the users. Remve User frm Grup T remve users frm this grup, select the desired users by checking the crrespnding checkbx, then select Remve User frm Grup n the ribbn. A cnfirmatin pp-up windw will appear t cnfirm the remve peratin. Select OK t delete the selected users, r select Cancel t return t the Shw Users interface withut deleting the users. When yu are finished, select Cancel t add the defined users t this grup and return t the Shw Users interface. There fllwing grups are cnfigured in advance: Administratrs The permissin scpe is Glbal permissin. The users in this grup have Full Cntrl f all Cmpliance Guardian mdules. Real-Time_Classificatin_Scanner The permissin scpe is Glbal permissin. The users in this grup can nly access the Real-Time Classificatin Scanner mdule. Scheduled_Classificatin_Scanner The permissin scpe is Glbal permissin. The users in this grup can nly access the Scheduled Classificatin Scanner mdule. Cmpliance_Reprt The permissin scpe is Glbal permissin. The users in this grup can nly access the Cmpliance Reprt mdule. Cmpliance_Scan The permissin scpe is Glbal permissin. The users in this grup can nly access the Cmpliance Scanner mdule. Actin Reprt The permissin scpe is Glbal permissin. The users in this grup have the permissin t use Classificatin Reprt > Actin Reprt. Human Auditr The permissin scpe is Glbal permissin. The users in this grup have the permissin t use Cmpliance Reprt > Human Auditr. Encryptin The permissin scpe is Glbal permissin. The users in this grup have the permissin t use Classificatin Reprt > Incident Manager > Encryptin. Redactin The permissin scpe is Glbal permissin. The users in this grup have the permissin t use Classificatin Reprt > Incident Manager > Redactin. 84 Cmpliance Guardian Installatin and Administratin User Guide

85 Managing Users Quarantine The permissin scpe is Glbal permissin. The users in this grup have the permissin t use Classificatin Reprt > Incident Manager > Quarantine. Yammer The permissin scpe is Glbal permissin. The users in this grup have the permissin t use Classificatin Reprt > Yammer Reprt. *Nte: If a dmain is integrated with Cmpliance Guardian and a user frm its parent dmain, subdmain r trust dmain is added in Cmpliance Guardian Accunt Manager, the crrespnding parent dmain, subdmain r trust dmain will be integrated int Cmpliance Guardian and added t the Lg n t drp-dwn list in Cmpliance Guardian lgin page. T view and manage users, g t the Accunt Manager interface, select Users n the ribbn. In the Users interface, yu will see a list f previusly added users. T manage users, yu can perfrm the fllwing actins: Add User T add a user fr Cmpliance Guardian, select Add User n the ribbn. Yu will be brught t the Add User interface. Select the User Type t cnfigure the methd fr authenticatin: Lcal User Select Lcal User t manually enter the authenticatin credentials fr this user. Cnfigure the fllwing settings t add a lcal user: Enter the Username and f the user yu are adding, as well as an ptinal Descriptin fr future reference. Enter the desired passwrd int the Passwrd and Cnfirm passwrd text bxes, and then cnfigure the Passwrd Settings. The passwrd entered here must meet the System Passwrd Plicy. Fr mre infrmatin, refer t System Passwrd Plicy. Yu can select t use the Default passwrd settings, r select Custmized t cnfigure the passwrd settings manually. Check the crrespnding checkbx next t the User must change passwrd at next lgn, User cannt change passwrd, Passwrd never expires, Accunt is inactive setting. Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup r manually cnfigure the user s permissin levels. Select the Add user t grup(s) drp-dwn menu, and then select the desired user grup frm the drp-dwn menu. The user will have all f the permissins f the specified grup. Active Directry User/Grup Select Active Directry User/Grup t utilize the user s active directry authenticatin credentials fr this new user. Cnfigure the fllwing settings t add an active directry user: Cmpliance Guardian Installatin and Administratin User Guide 85

86 Enter the name f the user/grup yu want t add int the AD User/Grup Name field, and then select the check names ( ) buttn t verify that the username yu entered is valid. Alternatively, yu can select the brwse ( ) buttn t search fr the desired user/grup. In the pp-up windw, enter the value t search fr in the Find text bx, then select the find names ( ) buttn. Select the desired user, then select Add. Select OK t add the users, r select Cancel t clse the windw withut adding the users. Enter an ptinal descriptin fr future reference. Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup r, manually cnfigure the user s permissin levels. Select the Add user t grup(s) ptin, and then select the desired user grup frm the drp-dwn menu. The user will have all f the permissins f the specified grup. Windws User/Grup Select Windws User/Grup t utilize the user s Windws authenticatin credentials fr this new user. Cnfigure the fllwing settings t add a Windws user: Enter the username f the user/grup yu want t add int the Windws User/Grup Name field, and then select the check names ( ) buttn t verify that the username yu entered is valid. The users/grups that are in the same dmain as the Cmpliance Guardian Cntrl server can be added t Cmpliance Guardian. Alternatively, yu can select the brwse ( ) buttn t search fr the desired user/grup; In the pp-up windw, enter the value t search fr in the Find text bx, and then select the find name ( ) buttn. Select the desired user, and then select Add. Select OK t add the users, r select Cancel t clse the windw withut adding the users. Enter an ptinal descriptin fr future reference. *Nte: In rder t lg n Cmpliance Guardian using the added user, the crrespnding user must have the permissin t access the machine where the Cmpliance Guardian Cntrl Service is installed. Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup r, manually cnfigure the user s permissin levels. Select the Add user t grup(s) ptin, and then select the desired user grup frm the drp-dwn menu. The user will have all f the permissins f the specified grup. ADFS Claim Select ADFS Claim t utilize the user s ADFS authenticatin credentials fr this new user. Cnfigure the fllwing settings t add an ADFS user: Select a Claim name frm the drp-dwn menu. Claims are cnfigured in Authenticatin Manager. Enter the username in the Claim value text bx. The value entered in the Claim value text bx will be displayed as the lgn name fr the user in Cmpliance Guardian. 86 Cmpliance Guardian Installatin and Administratin User Guide

87 Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup r, manually cnfigure the user s permissin levels. Select the Add user t grup(s) ptin, and then select the desired user grup frm the drp-dwn menu. The user then has all f the permissins f the specified grup. Client Certificate User Befre adding Client Certificate user t Cmpliance Guardian Manager, make sure the Client Certificate Authenticatin has been enabled in Authenticatin Manager. Select Client Certificate User in the User Type sectin t utilize the user s Client Certificate authenticatin credentials fr this new user. Cnfigure the fllwing settings t add a Windws user: User Infrmatin Enter the username f the user/grup yu want t add int the Windws User/Grup Name field, and then select the check names ( ) buttn t verify that the username yu entered is valid. The users/grups in the same dmain as the Cmpliance Guardian Cntrl server can be added t Cmpliance Guardian. Alternatively, select the brwse name ( ) buttn t search fr the desired user/grup; in the pp-up windw, enter the value t search fr in the Find text bx, and then select the find name ( ) buttn. Select the desired user, and then select Add. Select OK t add the users, r select Cancel t clse the windw withut adding the users. Enter an ptinal Descriptin fr future reference. *Nte: In rder t lg int Cmpliance Guardian Manager using the added user, the crrespnding user must have the permissin t access the machine where the Cmpliance Guardian Cntrl service is installed. Grup Set the permissins fr this user by adding the user t a previusly cnfigured Cmpliance Guardian user grup, the user will have all f the permissins f the specified grup. When yu are finished, select Save t add the user and return t the Users interface, r select Cancel t return t the Users interface withut saving the cnfiguratins fr this new user. Edit User T edit a user fr Cmpliance Guardian, select the user by checking the crrespnding checkbx, and then select Edit User n the ribbn, r select the username. Yu will be brught t the Edit User interface where yu can cnfigure the fllwing settings fr a user: Edit Infrmatin Edit the user infrmatin fr the current user. Enter the address f the current lgged-n user. Descriptin Enter the ptinal descriptin fr future reference. Passwrd Change the user passwrd and cnfigure the security settings fr the lgged-n user. Check the Change my passwrd checkbx, supply the New passwrd, and re-enter the new passwrd in the Cnfirm new passwrd field. Cmpliance Guardian Installatin and Administratin User Guide 87

88 My Settings Select the desired security settings by checking the crrespnding checkbxes. If desired, select a deactivatin methd fr the passwrd: Never The passwrd never expires. After day(s) Enter the number f days yu wish the passwrd t be valid fr befre it expires. On Select the calendar buttn ( ) t chse the date when yu wish the passwrd t expire. Grup Change the grup the lgged-n user belngs t. Select the desired grup frm the drp-dwn menu. The user will have all f the permissins f the specified grup. When yu are finished, select Save t save yur changes and return t the Users interface, r select Cancel t return t the Users interface withut saving any changes made. Delete User T delete previusly cnfigured users, select the users by checking the crrespnding checkbx, then select Delete User n the ribbn. A cnfirmatin windw will pp up fr this deletin. Select OK t delete the selected users, r select Cancel t return t the Accunt Manager interface withut deleting the selected users. Activate T activate the Inactive user, select the user by checking the crrespnding checkbx, then select Activate n the ribbn. *Nte: If a user fails t prvide the crrect credentials when attempting t lg int Cmpliance Guardian, they will receive the fllwing alert: Srry, the lgin ID r passwrd is incrrect. If the user receives this alert mre times than the number f Failed Lgin Attempts, the user s accunt will becme Inactive. Deactivate T deactivate the Active user, select the user by checking the crrespnding checkbx, then select Deactivate n the ribbn. In Cmpliance Guardian, sme users d nt have the permissin t navigate t the Accunt Manager. My Settings allws the user t edit his/her wn accunt infrmatin. When yu lg int Cmpliance Guardian GUI, the currently lgged-n user will be displayed at the tp right crner f the Cmpliance Guardian interface. Select the current username and a drp-dwn list will appear. Select My Settings and enter the My Settings interface where yu can view detailed infrmatin f the current lgged-n user and the Cmpliance Guardian grups it belngs t. Select Edit n the ribbn and yu can cnfigure the settings. Fr mre infrmatin abut hw t cnfigure the settings, refer t Managing Users. In additin, refer t the fllwing steps: 1. In the Passwrd field, if ne user des nt have the permissin t change the passwrd, the passwrd field will be grayed ut. Yu must supply the Old passwrd here. 88 Cmpliance Guardian Installatin and Administratin User Guide

89 2. In the Grup field, refer t the fllwing infrmatin: Only users f Administratrs grup have the permissin t change the Cmpliance Guardian grups it belngs t. If a user bth belngs t Administratrs grup and the ther grups, it als has the permissin t change the Cmpliance Guardian grups it belngs t. If the user mves itself ut f Administratrs grup, the actin will take effect the next time that user lgs in. If the user is admin (Cmpliance Guardian default user), it can view that it belngs t the Administratrs grup but is nt able t edit the Grup setting. Fr users wh d nt belng t the Administratrs grup, they can nly view the grup names they belng t and are nt able t edit the Grup setting. After yu have saved the mdificatins, select Cancel t exit the My Settings interface and return t the previus Cmpliance Guardian interface yu are in. Cmpliance Guardian Installatin and Administratin User Guide 89

90 License Manager License Manager prvides yu with infrmatin regarding yur Cmpliance Guardian licenses. Here yu are als able t imprt and exprt license files, generate license reprts, set up expiratin ntificatins, as well as mnitr the number f servers yu have used up in yur license. T access License Manager fr Cmpliance Guardian, pen the Cntrl Panel interface and select License Manager under the License Manager heading. Select Clse n the ribbn t clse the License Manager interface. Viewing License Infrmatin In the License Manager interface, the License Details sectin displays the fllwing infrmatin: License Type Whether yu have a Trial license r an Enterprise license. Server Hst/IP The hst/ip f the server used t install Cmpliance Guardian Cntrl Service. Maintenance Expiratin Details The start time and expiratin date f the Cmpliance Guardian maintenance service yu have purchased. License Details The detailed license infrmatin fr every SharePint versin in SharePint mde, File System mde, Website mde r scial netwrks by selecting the crrespnding tab under License Details. SharePint Select the SharePint tab under License Details t see every SharePint versin r remte farm (fr SharePint Online) license infrmatin specific t: Surce The SharePint versin. License Type The type f license purchased fr the prduct. Number f Servers The number f servers yu have bught. Registered Servers The number f servers yu have used. Expiratin Time The expiratin time f the license fr this SharePint. Status The current status f the SharePint which reflects prper licensing. Number f User Seats The number f user seats fr SharePint Online (displayed fr the remte farm). If the License Type is Trial, the fllwing tw clumns appear: Max Scanning Files The maximum number f files that can be scanned. Remaining Scanning Files The number f the files that can still be scanned. 90 Cmpliance Guardian Installatin and Administratin User Guide

91 *Nte: Yu are nly able t view the SharePint yu are licensed fr. File System Select the File System tab under License Details t see the file system license infrmatin specific t: License Type The type f license purchased fr the prduct. Number f Agents The number f agents yu have bught. Registered Agents The number f agents yu have used. Expiratin Time The expiratin time f the license fr the file system. Status The current status f the file system which reflects prper licensing. If the License Type is Trial, the fllwing tw clumns appear: Max Scanning Files The maximum number f files that can be scanned. Remaining Scanning Files The number f the files that can still be scanned. Website Select the Website tab under License Details t see Website license infrmatin specific t: License Type The type f license purchased fr the prduct. Expiratin Time The expiratin time f the license fr the website. Status The current status f the website which reflects prper licensing. Test Suite Grups Display the Check grups. Used Hst The number f hsts yu have used. Remaining Hst The number f hsts yu have nt used. Used Dmain The number f dmains yu have used. Remaining Dmain The number f dmains yu have nt used. If the License Type is Trial, the fllwing tw clumns appear: Max Scanning Files The maximum number f files that can be scanned. Remaining Scanning Files The number f the files that can still be scanned. Select Details t the right f Test Suite Grups t view details abut the used hsts, remaining hsts, used dmains, and remaining dmains. Select Clse t return t the License Manager interface. Cmpliance Guardian Installatin and Administratin User Guide 91

92 Scial Netwrk Select the Scial Netwrk tab under License Details t see the Yammer license infrmatin: Surce Yammer is displayed. License Type The type f license purchased. Number f Allwed Users The number f users wh can use Yammer in ne dmain. Expiratin Time The expiratin time f the license fr using Yammer. Status The current status f the Yammer license. Instant Message/Cmmunicatins Select the Instant Message/Cmmunicatins tab under License Details t see the Lync license infrmatin: Surce Instant Message/Cmmunicatins is displayed. License Type The type f license purchased. Number f Allwed Users The number f users wh can use the Lync functin. Expiratin Time The expiratin time f the license fr using the Lync functin. Status The current status f the Yammer license. Database Select the Database tab under License Details t see Database license infrmatin: License Type The type f license purchased fr the prduct. Expiratin Time The expiratin time f the license fr using the Database functin. Status The current status f the Yammer license. Imprting and Exprting the License File In License Manager, yu can imprt a license file t apply that new license. Since all f Cmpliance Guardian prducts are installed as a single platfrm, activating any prduct is as simple as applying the new license file. T imprt a license file, select Imprt n the ribbn. In the Imprt License interface, select Brwse. Find and chse the desired LIC file, then select Open. Yu will see a summary view f this license. Select Apply t apply this license, r select Cancel t return t the previus page withut applying this license. T exprt a license file, cmplete the fllwing steps: Select Exprt n the ribbn. Select t exprt the license file r license reprt. 92 Cmpliance Guardian Installatin and Administratin User Guide

93 Save the exprted file r reprt. *Nte: Cmpliance Guardian will autmatically lg yu ff in rder t use the new license upn lgging in again. Cnfiguring License Renewal Ntificatins Cmpliance Guardian can be cnfigured t ntify yu befre licenses r maintenance expires. Yu can set hw many days prir t expiratin and at what interval yu want t be ntified, as well as cnfigure the methd f ntificatin t use. T cnfigure License Renewal Ntificatins, select Settings n the ribbn. Yu will be brught t the License Renewal Ntificatin Settings interface. Here yu can cnfigure the fllwing settings fr Ntificatin Schedule: By expiratin date Cnfigure these settings fr ntificatins f license expiratin: Enter a psitive integer int the text bx and select Day, Week r Mnth frm the Remind me starting frm befre license expires fr any mdules drpdwn menu. Check the Interval checkbx t have the reminder repeat at a set interval. Enter a psitive integer int the text bx and select Day, Week r Mnth frm the drp-dwn menu. By maintenance expiratin date Cnfigure these settings fr ntificatins f maintenance expiratin: Enter a psitive integer int the text bx and select Day, Week r Mnth frm the Remind me starting frm befre license maintenance expires drpdwn menu. Check the Interval checkbx t have the reminder repeat at a set interval. Enter a psitive integer int the text bx and select Day, Week r Mnth frm the drp-dwn menu. By number f servers Cnfigure these settings fr ntificatins f the number f available servers left fr any farm. Enter a psitive integer int the text bx and Cmpliance Guardian will send yu a ntificatin when the number f servers left f any farm is less than the specified value. Check the Interval checkbx t repeat the reminder at a set interval. Enter a psitive integer int the text bx and select Day, Week, r Mnth frm the drp-dwn menu. Cnfigure the fllwing settings fr the Ntificatin Methd: *Nte: Yu must select at least ne f the ptins in rder fr License Renewal Ntificatins t wrk. Cmpliance Guardian Installatin and Administratin User Guide 93

94 Pp-up message bx when yu lgin Select this ptin t have a message bx pp up with a reminder fr expiring licenses r maintenance. ntificatin Select this ptin t be ntified f expiring licenses r maintenance by based n the Ntificatin Schedule yu cnfigured abve. A drp-dwn menu will appear where yu can either select a previusly cnfigured Ntificatin Prfile r yu can chse New Ntificatin Prfile t set up a new ntificatin prfile. Fr mre infrmatin n hw t cnfigure the ntificatin prfile, refer t User Ntificatin Settings. When yu are finished cnfiguring License Renewal Ntificatin Settings, select OK t save and return t the License Manager interface, r select Cancel t return t the License Manager interface withut saving the new cnfiguratins. Cnfiguring Server Usage In Server Usage, yu can register a new farm/agent r remve a previusly registered farm/agent. Select Server Usage n the ribbn r the server number/agent number in the Registered Servers/Registered Agents clumn f the License Details area t enter the Server Usage interface. Refer t the instructins belw t cnfigure the settings. Select a SharePint/File System tab, and then mdify its registered farms r agents. Yu can perfrm the fllwing actins: Register a farm/agent Select the farm r agent yu want t register in the Unregistered Farms/Unregistered Agents list and select Add>>. The farm r agent will be mved t the Registered Farms/Registered Agents list. Unregister a farm Select the farm r agent yu want t unregister in the Registered Farms/Registered Agents list and select <<Remve buttn. The farm r agent will be mved t the Unregistered Farms/Unregistered Agents list. *Nte: If the number f servers in the Registered Farms/Registered Agents list reaches the number f servers/agents fr which the license yu have purchased allws, Cmpliance Guardian will nt allw yu t register mre farms r agents and the exclamatin pint ( System name. ) will appear left f the SharePint/File Select OK t save the changes r select Cancel t cancel the peratin. Yu will then be redirected t the License Manager interface. Update Manager Cmpliance Guardian Update Manager prvides yu with infrmatin regarding Cmpliance Guardian versins. Yu can check whether yu are running the mst up t date versin f Cmpliance Guardian, dwnlad updates, view dwnlad and installatin histry, and cnfigure dwnlad and update 94 Cmpliance Guardian Installatin and Administratin User Guide

95 settings. Update Manager allws yu t update the current versin f Cmpliance Guardian within the Cmpliance Guardian GUI t reduce the time and risk f a manual update. Befre perfrming an update, if multiple Cmpliance Guardian Cntrl Services are installed in the Windws Netwrk Lad Balance envirnment, the Dwnlad Lcatin must be cnfigured befre yu can perfrm the update peratin successfully. T access Update Manager fr Cmpliance Guardian, navigate t the Cntrl Panel interface, and then select Update Manager under the Update Manager heading. Select Clse n the ribbn t clse the Update Manager interface. Cnfiguring Update Settings In Update Manager, yu can cnfigure settings fr custm lcatins t dwnlad updates, set Update Manager t dwnlad r check fr updates autmatically, and cnfigure a prxy server fr dwnlading Cmpliance Guardian updates. T cnfigure these settings, select Update Settings n the ribbn. Yu will be brught t the Update Settings interface where yu can cnfigure the fllwing settings: Dwnlad Lcatin Dwnlad Cmpliance Guardian updates t a net share path and stre them fr future use. T utilize this capability, check the Use the Net Share path as the update strage lcatin checkbx, and then enter the UNC path, Username, and Passwrd int the crrespnding text bxes. *Nte: The UNC path shuld be entered in the fllwing frmat: \\admin-pc\c$\data r \\admin-pc\c$\shared flder. Select Validatin Test t verify the access t the specified path. If yu are changing the dwnlad lcatin t a new ne, yu can perfrm the fllwing tw actins n the previusly dwnladed updates in the ld path: Mve the uninstalled update(s) t the new lcatin All f the uninstalled updates whse versins are higher than the current Cmpliance Guardian versin will be mved t the new lcatin. The riginal update files in the ld lcatin will be deleted. Delete the installed update(s) All f the dwnladed files f the installed updates will be deleted frm the ld path. Autmatic Update Cnfiguring Autmatic Update can save time and effrt fr Cmpliance Guardian administratrs. Chse frm the fllwing ptins: *Nte: Autmatic Update settings can nly be cnfigured if yu have purchased maintenance fr Cmpliance Guardian. Dwnlad the update fr me, but let me chse when t install it Cmpliance Guardian will dwnlad the available updates fr yu, and save them t the default installatin path r the custmized net share path. All f the updates will be ready fr installatin at yur wn discretin. Cmpliance Guardian Installatin and Administratin User Guide 95

96 Please ntify me f the new updates, but d nthing t the updates Cmpliance Guardian will ntify the cnfigured users f available updates but will nt dwnlad the updates autmatically. *Nte: The maintenance license must already have been applied in rder t select this ptin. Select an ntificatin prfile yu previusly cnfigured frm the drp-dwn list r select New Ntificatin t set up a new ntificatin. Fr mre infrmatin abut hw t cnfigure the ntificatin, refer t User Ntificatin Settings. Turn ff autmatic updates The autmatic updates functin will be turned ff and yu will nt be ntified abut the Cmpliance Guardian updates. Prxy Cnfigure the settings f the prxy server yu want t use t dwnlad Cmpliance Guardian updates. Enter the prxy prt t use when updating Cmpliance Guardian Cntrl Service in the Update Prt text bx. The default prt is Select the prxy prtcl yu want t use frm the Prxy Type drp-dwn menu: Checking fr Updates N Prxy (default) N prxy server will be used. HTTP Prxy Select this t use the HTTP prxy, then cnfigure the fllwing settings: Prxy hst Hst name r IP address f the prxy server. Prxy prt Prt used t access the prxy server. Username Username t lg n the prxy server. Passwrd Passwrd t access the prxy server. SOCKS5 Prxy Select this t use the SOCKS5 prxy, then cnfigure the fllwing settings: Prxy hst Hst name r IP address f the prxy server. Prxy prt Prt used t access the prxy server. Username Username t lg n the prxy server. Passwrd Passwrd t access the prxy server. T check fr the latest updates, select Check fr Updates. Yu can nly check fr updates after having purchased maintenance fr Cmpliance Guardian. If there are any new updates available, the fllwing infrmatin will be displayed in the area t the right: Update Name Name f the update. Prduct Name Cmpliance Guardian. Type Type f the update. 96 Cmpliance Guardian Installatin and Administratin User Guide

97 Size Size f the update. The unit f the size is megabyte. Status Installatin status f the update. Versin Versin f the update. Managing Updates T manage available updates, select Manage Updates n the ribbn. All available updates fund by using the Check fr Updates functin will be listed in this page. Yu can perfrm the fllwing actins n these updates: View Histry Select View Histry n the ribbn t view a list f previusly installed Cmpliance Guardian updates. Yu can custmize hw the list is displayed in the fllwing ways: Search Filter the updates displayed by the keywrd yu designate; the keywrd must be cntained in a clumn value. At the tp f the viewing pane, enter the keywrd fr the update yu want t display. Yu can select t Search all pages r Search current page. Manage clumns ( ) Manage which clumns are displayed in the list s that nly the infrmatin yu want t see is shwn. Select manage clumns buttn ( ), then check the checkbx next t the clumn name t have that clumn shwn in the list. Hide the clumn ( ) Hver ver a clumn name, and then select the hide the clumn buttn ( ) in the clumn name t hide the clumn. Filter the clumn ( ) Filter which item in the list is displayed. Unlike Search, yu can filter whichever item yu want, rather than search based n a keywrd. Hver ver a clumn name, and then select the filter the clumn buttn ( ) f the clumn yu want t filter, then check the checkbx next t the item name t have that item shwn in the list. T remve all f the filters, select Clear Filter. T see mre infrmatin abut an update, select the update by checking the crrespnding checkbx, and then select View Details n the ribbn. In the pp-up windw, yu can perfrm the fllwing actins: Uninstall Select Uninstall t uninstall the selected update. The fllwing ptins can be cnfigured in the pp-up windw: *Nte: Only htfixes and feature packs can be uninstalled. Service packs and cumulative updates cntain majr imprtant changes between different versins, s they cannt be uninstalled. In the Manager tab, all f the installed Manager services will be displayed. Select Uninstall the update frm all the managers belw when uninstalling updates frm the Cmpliance Guardian Manager Cmpliance Guardian Installatin and Administratin User Guide 97

98 services since all f the available manager services must be updated at the same time. In the Agent tab, select a farm t remve the update frm all Cmpliance Guardian Agents in that farm. Brwse Select Brwse n the ribbn t lk fr the updates n yur lcal server. Select the desired update, and then select Open t lad the update file int Cmpliance Guardian. The htfix will be stred in the UNC path yu specified in Update Settings. If there is n UNC path cnfigured, the htfix will be stred under the default path: \AvePint\Cmpliance Guardian\Manager\Wrk\patchFlder. Dwnlad Select Dwnlad t dwnlad the selected updates frm Cmpliance Guardian update server. Stp Select Stp t interrupt the selected dwnlading update. *Nte: The dwnlad prgress will be reset t 0%. Install Select Install t install the selected updates. The fllwing ptins can be cnfigured in the pp-up windw: In the Manager tab, all f the installed Manager services will be displayed. Select Install the update fr all the managers belw when installing updates fr the Cmpliance Guardian Manager services since all f the available manager services must be updated at the same time. In the Agent tab, select a farm t update all Cmpliance Guardian Agents in that farm. Delete Select Delete t delete the selected updates frm Cmpliance Guardian. The dwnladed/brwsed update files will be deleted at the same time. Reviewing the Installatin Histry f Updates T review the installatin histry f yur Cmpliance Guardian updates, select View Histry n the ribbn. Yu will see a list f all f the previusly installed Cmpliance Guardian updates. Yu can custmize hw the list is displayed in the fllwing ways: Search Filter the updates displayed by the keywrd yu designate; the keywrd must be cntained in a clumn value. At the tp f the viewing pane, enter the keywrd fr the update yu want t display. Yu can select t Search all pages r Search current page. Manage clumns ( ) Manage which clumns are displayed in the list s that nly the infrmatin yu want t see is shwn. Select manage clumns buttn ( ), then check the checkbx next t the clumn name t have that clumn shwn in the list. Hide the clumn ( ) Hver ver a clumn name, and then select the hide the clumn buttn ( ) in the clumn name t hide the clumn. 98 Filter the clumn ( ) Filter which item in the list is displayed. Unlike Search, yu can filter whichever item yu want, rather than search based n a keywrd. Hver ver a Cmpliance Guardian Installatin and Administratin User Guide

99 clumn name, and then select the filter the clumn buttn ( ) f the clumn yu want t filter, then check the checkbx next t the item name t have that item shwn in the list. T remve all f the filters, select Clear Filter. T see mre infrmatin abut an update, check the crrespnding checkbx next t the update, and then select View Details n the ribbn. In the pp-up windw, yu can select Uninstall if yu want t uninstall the selected update. The fllwing ptins can be cnfigured in the pp-up windw: *Nte: Only htfixes and feature packs can be uninstalled. Service packs (SP) and cumulated updates (CU) cntain majr imprtant changes between different versins and cannt be uninstalled. Agent Grups In the Manager tab, all f the installed Manager services will be displayed. Select Uninstall the update frm all the managers belw when uninstalling updates frm the Cmpliance Guardian Manager services since all f the available manager services must be updated at the same time. In the Agent tab, select a farm t remve the update frm all Cmpliance Guardian Agents in that farm. When yu are finished, select Clse t clse the pp-up windw, and then select Cancel t return t the Update Manager interface. Agent Grups allw yu t assign specific agents fr perfrming certain jbs. This way, yu can maintain balanced wrk lad fr different agents, and nt have certain agents perfrm slwer due t pr lad distributin. T access Agent Grups fr Cmpliance Guardian, pen the Cntrl Panel interface, and then select Agent Grups under the Agent Grups heading. Select Clse n the ribbn t clse the Agent Grup interface. If yu have several Agents enabled fr an agent type, they will be displayed in different clrs in the Available Agents table. Managing Agent Grups In the Agent Grups interface, yu will see a list f previusly cnfigured Agent Grups. The fllwing settings can be cnfigured in the Agent Grups interface: Create Select Create n the ribbn t create a new Agent Grup. In the Create interface, yu can cnfigure the fllwing settings: Agent Grup Name Enter a name fr the new Agent Grup, and then enter an ptinal descriptin fr future reference. Agent Grup Type Select ne f the three Agent Grup Types: SharePint Onpremises, File System, Website, and SharePint Sites. Cmpliance Guardian Installatin and Administratin User Guide 99

100 If SharePint is selected, yu must select a farm where yu want t create this new Agent Grup. Available Agents Available agents will be displayed in the lwer panel. Select the desired agent by checking the crrespnding checkbx, then select Add t add the agent t the Agent Grup. T remve an agent frm the Agent Grup, select the desired agent in the Agents in Grup clumn by checking the crrespnding checkbx, then select Remve. When yu are finished, select OK t save these cnfiguratins and return t the Agent Grups interface, r select Cancel t return t the Agent Grups interface withut saving this new Agent Grup. View Details Select an Agent Grup by checking the crrespnding checkbx, then select View Details n the ribbn t view detailed infrmatin abut the Agent Grup. In the View Details interface, select Edit n the ribbn t make changes t the cnfiguratins f this Agent Grup. Fllw the instructins in the next bullet pint t edit Agent Grups. Edit Select an Agent Grup by checking the crrespnding checkbx, then select Edit n the ribbn t make changes t the cnfiguratins. In the Edit Agent Grup interface, enter a new name fr the Agent Grup, and then enter a descriptin fr future reference. Select the desired agent by checking the crrespnding checkbx, and then select Add t add the agent t the Agent Grup. T remve an agent frm the Agent Grup, select the desired agent in the Agents in Grup clumn by checking the crrespnding checkbx, then select Remve. When yu are finished, select Save t save all changes made t the cnfiguratins f this Agent Grup, select Save As t save the new cnfiguratins as a new Agent Grup, r select Cancel t return t the Agent Grups interface withut saving any changes. Delete Select an Agent Grup by checking the crrespnding checkbx, then select Delete t delete the selected Agent Grup. A cnfirmatin windw will pp up t ask if yu are sure yu want t delete the selected Agent Grups. Select OK t delete the selected Agent Grups, r select Cancel t return t the Agent Grups interface withut deleting the selected Agent Grups. User Ntificatin Settings Certain Cmpliance Guardian prducts prvide reprts r ntificatins t prvide yu with infrmatin when a certain triggering event ccurs. Currently, Cmpliance Guardian ntificatins are prvided as a pp-up windw within Cmpliance Guardian r as s t designated recipients. We are wrking n prviding yu with additinal ntificatin ptins which will be cnfigurable in the Integratin Settings interface. Once the ntificatin integratin feature is activated, the Integratin Settings buttn n the ribbn will becme available. 100 Cmpliance Guardian Installatin and Administratin User Guide

101 T access User Ntificatin Settings fr Cmpliance Guardian, navigate t the Cntrl Panel interface, and then select User Ntificatin Settings under the User Ntificatin Settings heading. Select Clse n the ribbn t clse the User Ntificatin Settings interface. Cnfiguring Send Settings The utging server must be cnfigured befre Cmpliance Guardian can send ut ntificatins. T cnfigure the utging server, cmplete the fllwing steps: 1. Check the Enable Sending Servers Settings checkbx in rder t activate server settings. 2. Send server (SMTP) Enter the address f the utging server. 3. Secure passwrd authenticatin Check this checkbx if yu have this ptin enabled in yur accunt cnfiguratin. 4. Prt Enter the SMTP prt. The default SMTP prt is 25. Fr SSL authenticatin, the default prt is Sender Enter the address fr all Cmpliance Guardian s t be sent frm. 6. Username n SMTP Enter the sender s username n the SMTP server. 7. Passwrd n SMTP Enter the sender s passwrd t lg nt the SMTP server. 8. SSL authenticatin Cnfigure this ptin accrding t yur settings. 9. Select the Validatin Test buttn t verify the infrmatin entered. If the infrmatin yu entered is verified successfully, a test will be sent t the sender yu cnfigured. 10. Select Save t save yur cnfiguratins and select Clse t exit the interface. Cnfiguring Receive Settings In the Receive Settings interface, yu will see a list f previusly cnfigured ntificatin prfiles. Yu can custmize hw these ntificatin prfiles are displayed in the fllwing ways: Search Filter the ntificatin displayed by the keywrd yu designate; the keywrd must be cntained in a clumn value. At the tp f the viewing pane, enter the keywrd fr the ntificatin yu want t display. Yu can select t Search all pages r Search current page. Manage clumns ( ) Manage which clumns are displayed in the list s that nly the infrmatin yu want t see is shwn. Select manage clumns buttn ( ), then check the checkbx next t the clumn name t have that clumn shwn in the list. Hide the clumn ( ) Hver ver a clumn name, and then select the hide the clumn buttn ( ) in the clumn name t hide the clumn. Filter the clumn ( ) Filter which item in the list is displayed. Unlike Search, yu can filter whichever item yu want, rather than search based n a keywrd. Hver ver a clumn name, and then select the filter the clumn buttn ( ) f the clumn yu want Cmpliance Guardian Installatin and Administratin User Guide 101

102 t filter, then check the checkbx next t the item name t have that item shwn in the list. T remve all f the filters, select Clear Filter. Cnfiguring Receive Ntificatin The receive ntificatin prfile allws yu t specify address t receive reprts frm Cmpliance Guardian plans and services. T create a receive ntificatin prfile, select Create n the ribbn, and cmplete the fllwing settings: Type Select a type fr the prfile yu are abut t create: Alert An alert is sent t let yu knw that the file cannt be scanned, r peratin has been made accrding t the actin plicy. Ntificatin A ntificatin is sent t let yu knw the jb reprt infrmatin after the jb finished. If Alert is selected, cnfigure the fllwing settings: Name and Descriptin Enter a Name fr the Receive Ntificatin prfile and an ptinal Descriptin fr future reference. Ntificatin Address Cnfigure the recipients fr this alert. Address If the Address radi buttn is selected, select Add a Ntificatin Address, enter a recipient s address in the Recipient clumn, and then select a crrespnding template. Select Add a Ntificatin Address again t add anther recipient. Select the delete ( ) buttn t delete a recipient. SharePint Grup If the SharePint Grup buttn is selected, select Add a SharePint Grup, enter a SharePint grup name in the Recipient clumn, and then select a crrespnding template. Select Add a SharePint Grup again t add anther grup. Select the delete ( ) buttn t delete a grup. If Ntificatin is selected, cnfigure the fllwing settings: Name and Descriptin Enter a Name fr this Receive Ntificatin prfile and an ptinal Descriptin fr future reference. Ntificatin Address Cnfigure the recipients fr this ntificatin. Select Add a Ntificatin Address and then cnfigure the settings belw t add a recipient: (Only fr Ntificatin) Chse the detail level fr the ntificatin frm the drp-dwn menu in the Reprt clumn. Select either Summary Reprt Recipient r Detailed Reprt Recipient. Enter the ntificatin recipient s address in the Recipient clumn. Repeat the settings abve t add mre recipients. Reprt Setting (Only fr Ntificatin) Select the type f infrmatin t include fr the reprt levels, the recipients f the crrespnding reprt types must exist befre yu can 102 Cmpliance Guardian Installatin and Administratin User Guide

103 cnfigure the reprt levels. If Ntificatin was selected, yu can cnfigure the fllwing settings: Summary reprt level(s) Set when t send the summary reprt. By default, Success, Failure, and Warning are all selected. After the jb cmpleted, failed, r cmpleted with exceptin, a summary reprt will be sent t the recipient. Detailed reprt level(s) Set when t send the detailed reprt. By default, Success, Failure, and Warning are all selected. After the jb cmpleted, failed, r cmpleted with exceptin, a detailed reprt will be sent t the recipient. Send all lgs t recipient accrding t status Select what kind f lgs will be sent t recipient. Yu can select Success, Failure, r Warning. By default, Failure is selected. Message frmat Select the frmat which the message will be delivered in: HTML r Plain text. Select Save n the ribbn t save the settings r select Cancel t return t the Receive Settings interface withut saving the prfile. Managing Receive Ntificatin T see the cnfiguratins f a ntificatin prfile, select a ntificatin prfile, and then select View Details n the ribbn. Yu will see the cnfiguratin details f this ntificatin prfile. T change the cnfiguratins fr a ntificatin prfile, select the ntificatin prfile frm the list f previusly cnfigured ntificatin prfiles, and select Edit n the ribbn. Fr mre infrmatin abut editing cnfiguratins fr a ntificatin, refer t Cnfiguring Receive Ntificatin. T set a ntificatin prfile as the default ne, select the ntificatin prfile frm the list f previusly cnfigured ntificatin prfiles, and select Set as Default Prfile n the ribbn. The default ntificatin prfile will be selected by default when yu build up plans r cnfigure ntificatin settings fr the Cmpliance Guardian Manager r Agent services. T delete a ntificatin prfile which is n lnger needed, select the ntificatin prfile frm the list f previusly cnfigured ntificatin prfiles, and select Delete n the ribbn. Select OK t cnfirm the deletin r select Cancel t cancel the peratin. Cnfiguring Templates Template displays the templates that previusly cnfigured, and allws yu t cnfigure an template t be used when sending alert s. T create a new template, select Create n the ribbn, and then cmplete the fllwing steps: Template Name Enter a Name fr this Ntificatin prfile and an ptinal Descriptin fr future reference. Cmpliance Guardian Installatin and Administratin User Guide 103

104 Template Specify the Subject and Bdy f the template. There are three clumns that can be added t the subject: Item Name, Item URL and Scanned Time. There are eight clumns that can be added t the bdy: Jb Name, Plan Name, Jb Type, Item Name, Item URL, Scanned Time, Reasn and Quarantine Manager (this will be the Quarantine Manager URL in SharePint). The values f these clumns will be displayed in the is the clumns are added in the template. Alternatively, yu can custmize the subject and bdy f the template with the desired cntent. Select Save n the ribbn t save the settings, r select Cancel withut saving the template settings. Jb Pruning Jb pruning allws yu t set up pruning rules fr all jb recrds acrss yur farms. When a jb recrd is pruned, it will be deleted frm the Jb Mnitr and the Cmpliance Guardian Cntrl database. *Nte: It is highly recmmended that yu cnfigure a Jb Pruning plicy if yu are running scan jbs frequently t ensure yur databases are nt verladed with jb data. In Jb Pruning, yu can cnfigure Jb Pruning Rules fr Cmpliance Guardian mdules t retain the desired number f jbs, r jbs within a desired time frame. Once yu have cnfigured the Jb Pruning Rule fr a mdule, yu may cnfigure a schedule in the Settings tab t have Cmpliance Guardian prune jbs accrding t the Jb Pruning Rules at a specified time with a specified ntificatin, r manually run pruning jbs by selecting a mdule by checking the crrespnding checkbx, and select Prune Nw n the ribbn t prune jbs fr the selected mdule based n the Jb Pruning Rules yu have cnfigured fr each mdule. Jb Pruning has Jb Mnitr integrated within the interface. T see the prgress f yur pruning jbs, select Jb Mnitr n the ribbn. Fr mre infrmatin abut Jb Mnitr, refer t Jb Mnitr. T access Jb Pruning fr Cmpliance Guardian in the Cntrl Panel interface, select Jb Pruning under the Jb Pruning heading. Select Save n the ribbn t save any changes made in Jb Pruning. Select Clse n the ribbn t clse the Jb Pruning interface. Cnfiguring Pruning Rules In the Rules tab, select a Cmpliance Guardian mdule by checking the crrespnding checkbx, then select Cnfigure n the ribbn, r select the crrespnding Jb Pruning Rule fr a mdule. The Cnfigure interface will pen in a pp-up windw. The fllwing ptins can be cnfigured: N Pruning Select this ptin t nt prune the jb recrds f this mdule. When cnfiguring pruning rules, yu will be presented with the fllwing ptins: Keep the last jb(s) Select this ptin t keep nly the desired number f mst recent jbs fr this mdule. Set the number f jbs t keep by entering a 104 Cmpliance Guardian Installatin and Administratin User Guide

105 psitive integer int the text bx. Fr example, if yu enter 5 in the text bx, nly the 5 mst recent jbs fr this mdule will be kept. All ther jb recrds fr this mdule will be deleted. Keep the last Day(s)/Week(s)/Mnth(s) f jb(s) Select this ptin t keep nly the jbs within the desired time frame fr this mdule. Set the time frame fr the jbs yu want t keep by entering a psitive integer int the text bx, then select Day(s), Week(s), r Mnth(s) frm the drp-dwn menu. Fr example, if yu enter 7 in the text bx, and select Day(s), nly jbs perfrmed within the last 7 days by this mdule will be kept. All f the previus jb recrds f this mdule will be deleted. When yu are finished, select OK t save yur cnfiguratins and return t the Jb Pruning interface, r select Cancel t return t the Jb Pruning interface withut saving any changes. Cnfiguring Settings Once yu have cnfigured Jb Pruning Rules fr Cmpliance Guardian mdules, yu can set up a schedule fr Cmpliance Guardian t run pruning jbs, and ntify the designated users with reprts abut the pruning jbs. In the Settings tab f the Jb Pruning interface, cnfigure the fllwing settings: 1. Schedule Selectin Set up a schedule fr Cmpliance Guardian t run pruning jbs, r select t manually run pruning jbs. N Schedule Select this ptin if yu want t manually run pruning jbs. Cnfigure the schedule myself Select this ptin t have Cmpliance Guardian run pruning jbs at a designated time. If this is selected, the Schedule Settings cnfiguratin will appear. Here yu will see a list f all f yur previusly cnfigured schedules. T add a new schedule, select Add Schedule. T edit a previusly cnfigured schedule, select the text in the Summary clumn. T delete a schedule, select ( ). T preview the added schedules in a calendar, select Calendar View. Fr mre infrmatin abut adding r editing a schedule, refer t Cnfiguring a Schedule. 2. Ntificatin Select an ntificatin prfile yu have previusly cnfigured, r select New Ntificatin t set up a new ntificatin prfile. Fr mre infrmatin abut hw t cnfigure the ntificatin prfile, refer t User Ntificatin Settings. Cnfiguring a Schedule T add r edit a schedule, cmplete the fllwing steps: 1. Type Select the time unit f the time interval fr this schedule. By hur Cnfigure the schedule by hur. By day Cnfigure the schedule by day. By week Cnfigure the schedule by week. By mnth Cnfigure the schedule by mnth. Cmpliance Guardian Installatin and Administratin User Guide 105

106 2. Schedule Settings Cnfigure the frequency fr this schedule by entering a psitive integer in the text bx. If yu want t set up a mre specific schedule, check the Advanced checkbx, mre ptins will appear depending n the Type yu have selected in step 1: If yu selected By hur, select ne f the fllwing ptins and cnfigure its settings: Specify prductin time: Frm t Specify the prductin time, it will run the jb pruning in the specified prductin time frame. *Nte: All pruning jbs that started within this time frame will finish even if the end time is reached. Select time belw Specify the time yu want t run the jb pruning. T add several time pints, select Add. If yu select By week, cnfigure the fllwing settings: Run every week(s) Enter the frequency in terms f weeks in the text bx. On Specify the days f the week t run the jb pruning n. If yu select By mnth, select ne f the fllwing ptins and cnfigure its settings: On day f Select the day f the specific mnths t run the pruning jbs. Fr example, if yu select On day 3 f January and July, the pruning jbs will run n the third f January and July. Day f every mnth(s) Select the day f the mnth and frequency t run the pruning jbs n. Fr example, if yu select Day 3 f every 3 mnth(s), the pruning jbs will run every three mnths, n the third f the mnth. The f every mnth(s) Specify n which ccurrence f which days f the mnth, and the frequency t run the pruning jbs. Fr example, if yu select The First Mnday f every 3 mnth(s), the pruning jbs will run every three mnths, n the first Mnday f the mnth. The f Specify n which ccurrence f which days f which mnth t run the pruning jbs. Fr example, if yu select The First Mnday f January and July, the pruning jbs will run n the first Mnday f January and July. 3. Range f Recurrence Specify the Start time fr pruning jbs. Select ne f the fllwing ptins fr the end time and cnfigure its settings: N end date The pruning jbs will run n the cnfigured schedule until yu manually end it. End after ccurrence(s) The pruning jbs will stp running after the number f times yu specify here. End by The pruning jbs will end n the date and time yu specify here. 4. When yu are finished cnfiguring the new schedule yu want t add, select OK t save, r select Cancel t clse the Add Schedule interface withut saving. 106 Cmpliance Guardian Installatin and Administratin User Guide

107 Lg Manager Lg Manager allws yu t manage the lgs f all f the Cmpliance Guardian services. Lgs prvide the Cmpliance Guardian supprt staff with imprtant infrmatin fr quicker trubleshting. Lg Manager has Jb Mnitr integrated within the interface. T see the prgress f yur lg cllectin jbs, select Jb Mnitr n the ribbn. Fr mre infrmatin abut Jb Mnitr, refer t Jb Mnitr. *Nte: A Reprt Lcatin must be cnfigured in Jb Mnitr befre yu can use the Lg Manager when Cmpliance Guardian Cntrl Service High Availability is used. T access Lg Manager fr Cmpliance Guardian, g t the Cntrl Panel interface, and then select Lg Manager under the Lg Manager heading. Select Clse n the ribbn t clse the Lg Manager interface. Cnfiguring Lg Settings T cnfigure the lg settings, g t the Lg Manager interface, and then select Lg Settings n the ribbn. Yu can cnfigure the lg settings fr the fllwing services by selecting either the Cntrl Service r Agent tab. In each f the tabs, yu will see the name f the service. Fr each service, the fllwing ptins can be cnfigured: Lg Level Lgs culd be cnfigured t generate n each f the fllwing levels. Infrmatin (default) Lgs f this level recrd the basic infrmatin f Cmpliance Guardian, such as the jbs that yu have run, the peratins yu have perfrmed, and imprtant prcesses f jbs. Infrmatin level lgs als cntain all f the lgs frm warning and errr levels. Debug Lgs f this level recrd the detailed infrmatin related t the internal peratins such as the cmmunicatin between Cmpliance Guardian Manager and Cmpliance Guardian Agent, the peratins in the database, the utput message f the data. Lgs f this level are used fr finding ut all f the details f the jbs, and it is recmmended that the level is set t Debug befre trubleshting. Debug level lgs als cntain all f the lgs frm infrmatin, warning, and errr levels. Errr Lgs f this level recrd the errr messages fr jbs. Nt all f the errrs culd lead t the failure f the jbs, sme f the errrs have already been dealt with and the lgs will recrd the detailed infrmatin. Warning Lgs f this level recrd exceptins fr jbs. Warning level lgs als cntain all f the lgs frm errr level. Size f Each Lg The default size fr a lg is 5 MB. Yu can adjust the size accrding t yur requirements by entering a different number int the text bx. Cmpliance Guardian Installatin and Administratin User Guide 107

108 Ttal Lg Cunt The maximum number f all the lg files in the Lgs flder under the installatin flder f each Manager Service. Fr each Agent Server, the Ttal Lg Cunt is the maximum number f all f the lg files which can be generated by each.exe file. The Agent lgs are stred in the Lgs flder under the installatin flder f each Agent. When the number f lg files exceeds the threshld, the ldest lg files will be deleted. When yu are finished cnfiguring Lg Settings, select OK t save all changes and return t the Lg Manager interface, r select Cancel t return t the Lg Manager interface withut saving any changes. Cllecting Lgs In rder t cllect lgs, yu must first specify the Manager services r Agents that yu want t cllect the lgs frm in the Lg Cllectin sectin f the Lg Manager interface. Select Cllect n the ribbn t begin cllecting lgs fr the selected services r agents. T receive ntificatin cntaining the reprt, select a previusly cnfigured ntificatin prfile in the drp-dwn list r select New Ntificatin t set up a new ntificatin prfile. Fr mre infrmatin abut hw t cnfigure the ntificatin prfile, refer t User Ntificatin Settings. SharePint Sites Use SharePint Sites t map ut yur SharePint Online sites s that yu can manage the site cllectins within thse bjects with Cmpliance Guardian. *Nte: Cmpliance Guardian Manager requires internet access in rder fr yu t cnfigure SharePint Sites settings. T access SharePint Sites fr Cmpliance Guardian, in the Cntrl Panel interface, select SharePint Sites under the SharePint Sites heading. Select Clse n the ribbn t clse the SharePint Sites interface. Managing SharePint Online Site Cllectin URLs In Cmpliance Guardian s SharePint Sites interface, any SharePint Site Grups that yu have previusly cnfigured will be displayed in the main display pane alng with their assciated Agent grups, descriptins, and last mdified time. T create a new SharePint Sites Grup, select Create n the ribbn, and then cnfigure the fllwing settings: SharePint Sites Grup Enter a name fr this SharePint Sites Grup in the SharePint Sites grup name text bx, and then enter an ptinal descriptin fr future reference. Keep in mind that while yu are able t enter any name fr this site grup, we recmmend that yu use names that prvide sme infrmatin abut what type f SharePint sites shuld be assciated with this grup. 108 Cmpliance Guardian Installatin and Administratin User Guide

109 Agent Grup Specify an agent grup t perfrm Cmpliance Guardian jbs n this SharePint site. Fr detailed infrmatin n cnfiguring agent grups, refer t Agent Grups. Select OK t save these cnfiguratins and return t the SharePint Sites interface, r select Cancel t return t the SharePint Sites interface withut saving these cnfiguratins. T view infrmatin abut a previusly cnfigured SharePint Sites Grup, select the SharePint Sites Grup, and then select View Details n the ribbn. T mdify the descriptin fr a previusly cnfigured SharePint Sites Grup, select the SharePint Sites Grup, and then select Edit n the ribbn. T delete a previusly cnfigured SharePint Sites Grup, select the SharePint Sites Grup, and then select Delete n the ribbn. Managing Site Cllectins Fr each SharePint Sites Grup yu add t Cmpliance Guardian, yu must cnfigure each site cllectin in rder t manage it with Cmpliance Guardian. In rder t cnfigure site cllectins fr a SharePint Sites Grup, select the SharePint Sites Grup, and then select Manage Site Cllectin n the ribbn. In the Manage Site Cllectin interface fr a SharePint Sites Grup, yu will see a list f previusly cnfigured site cllectins. T view infrmatin abut a previusly cnfigured site cllectin, select the site cllectin, and then select View Details n the ribbn. T mdify t a previusly cnfigured site cllectin, select the site cllectin, and then select Edit n the ribbn. T delete a previusly cnfigured site cllectin, select the site cllectin, and then select Delete n the ribbn. Cnfiguring Site Cllectins T add a site cllectin, select Add n the ribbn f the Manage Site Cllectin interface. In the Add Site Cllectin interface r Edit Site Cllectin interface, cnfigure the fllwing settings: Site Cllectin URL Enter the URL f an existing site cllectin within this SharePint Sites Grup. Site Cllectin User Specify the user wh has access t this site cllectin. Username Enter the username t use in rder t manage this site cllectin. Passwrd Enter the passwrd fr the specified accunt. *Nte: T register a site cllectin, the specified user must have the Design permissin at a minimum. Hwever, the Design permissin is nt sufficient t use the registered Cmpliance Guardian Installatin and Administratin User Guide 109

110 site cllectin t run jbs. Cmpliance Guardian recmmends yu use the site administratr wh can access the site cllectin yu specified here s yu can nrmally use the registered SharePint site t run jbs. *Nte: Cmpliance Guardian des nt supprt t add subsites t the SharePint sites grup. If yu try t add a subsite t the SharePint sites grup, the fllwing tw scenaris may ccur: If the user specified in the Site Cllectin User sectin des nt have permissin t the site cllectin where the subsite yu are abut t add resides, a pp-up windw infrms yu the site failed t be added t the SharePint sites grup, and the current user des nt have sufficient permissin t the specified site cllectin. If the user specified in the Site Cllectin User sectin has permissin t the site cllectin where the subsite yu are abut t add resides, Cmpliance Guardian adds the site cllectin t the SharePint sites grup. Select OK t save these cnfiguratins and return t the Manage Site Cllectin interface, r select Cancel t return t the Manage Site Cllectin interface withut saving these cnfiguratins. After selecting OK, Cmpliance Guardian will verify the cnnectin between all f the Agents and the entered site cllectin. If any agent cannt cnnect t the entered site cllectin, a pp-up windw appears t infrm the end users that the Agent cannt cnnect t the entered site cllectin. The windw als displays an errr message and a suggestin n hw t slve the errr. When cnfiguring the site cllectin, the URL f the site cllectin will be tested by all f the agents in the SharePint Sites Grup f the SharePint Sites with this site cllectin. A green check ( f the agents cnnect t the site cllectin URL. A yellw check ( ) means all ) means sme f the agents cnnect t the site cllectin URL. A red X ( ) means nne f the agents cnnect t the site cllectin URL. By default, the status f the cnnectin between the agents and the site cllectin URL will be checked every 10 minutes. The checking frequency can be cnfigured thrugh the cnfiguratin file. Imprting Site Cllectins Yu can imprt the site cllectins in bulk using the prvided template. Select Add Site Cllectins n the ribbn in the Manage Site Cllectin interface t access the Add Site Cllectins interface. T add the site cllectins, cmplete the fllwing steps: Dwnlad Template Select Dwnlad Template n the ribbn r select the dwnlad link t dwnlad the cnfiguratin file template. Mdify the dwnladed template t add the site cllectins URLs yu are abut t add t the selected grup int the template. Save the mdificatins and clse the mdified template. SharePint Sites Grup Displays the name f the selected SharePint sites grup. 110 Uplad Cnfiguratin File Uplads the mdified cnfiguratin file template. Select Brwse next t the File path text bx t uplad the mdified template. Cmpliance Guardian Installatin and Administratin User Guide

111 Site Cllectin User Uses the user specified here t register all f the site cllectins yu are abut t add. Enter the Username and the crrespnding Passwrd t access t all f the site cllectins yu are abut t imprt. *Nte: T register SharePint sites in bulk, the specified user must have the Design permissin at a minimum t all f the SharePint sites yu are abut t add. But the Design permissin is nt sufficient t use the registered site cllectins t run jbs. Cmpliance Guardian recmmends yu use the site administratr wh can access all f the site cllectins yu are abut t add s that yu can nrmally use the registered SharePint sites t run jbs. *Nte: If any site cllectins fail t cnnect, a pp-up windw appears t let yu chse t add nly the successfully cnnected site cllectins, r add all site cllectins. Select OK t save the cnfiguratins and return t the Manage Site Cllectin interface, r select Cancel t return t the Manage Site Cllectin interface withut saving any changes. Scanning Site Cllectins Use Scan Mde t scan all f the SharePint Online site cllectins n a specified SharePint admin center site. Add the scanned site cllectins t the specific SharePint sites grup in bulk. Select Scan Mde n the ribbn in the Manage Site Cllectin interface t access the Scan Mde interface. T scan the SharePint Online site cllectins, cmplete the fllwing steps: Select Scan n the ribbn. A pp-up windw appears. Specify the Office 365 accunt infrmatin that will be used t scan all f the site cllectins in SharePint Online. Use an existing Office 365 accunt prfile Select an Office 365 accunt prfile frm the drp-dwn list. Once an Office 365 accunt prfile is selected, the fllwing fields appear: Office 365 User ID The user that will be used t scan the SharePint Online site cllectins. Passwrd Enter the crrespnding passwrd. SharePint Admin Center URL The URL f the SharePint admin center site. Enter new Office 365 accunt infrmatin Cnfigure the Office 365 accunt that will be used t scan the site cllectins. Office 365 User ID Enter the ID f the user that will be used t scan the SharePint Online site cllectins. Passwrd Enter the crrespnding passwrd. Cmpliance Guardian Installatin and Administratin User Guide 111

112 SharePint Admin Center URL The URL f the SharePint admin center site. Select the Save as a new Office 365 accunt prfile checkbx t save the entered infrmatin as a new Office 365 accunt prfile. Once this checkbx is selected, yu are required t enter the prfile name in the Prfile Name text bx. Select Cnnect t start t scan the site cllectins in the specified SharePint admin center. Or select Cancel t clse the pp-up windw withut saving any cnfiguratins. All f the scanned site cllectins are displayed in the Site Cllectin clumn. Select the site cllectins yu are abut t add t the specified SharePint sites grup. Select Add t add them t the grup. Yu can als select Remve t remve the selected site cllectins frm the SharePint sites grup. Select Save t save yur changes, r select Cancel t exit this page withut saving any changes. Retrieving Status f the Site Cllectins On the Manage Site Cllectin page, select the site cllectins yu want t retrieve the status. Then, select Retrieve Status n the ribbn t retrieve the status f the selected site cllectins. Activating App fr Real-Time Classificatin If yu want t scan SharePint Online site cllectins using the Real-Time Classificatin Scanner rule, yu must activate the app. Fr mre infrmatin n installing the Cmpliance Guardian App fr Real- Time Classificatin, refer t Installing Cmpliance Guardian App fr Real-Time Classificatin. Select the site cllectins, and then select Activate App fr Real-Time Classificatin n the ribbn. The Activate App fr Real-Time Classificatin interface appears. Get SharePint Online Tken Select Cnnect t the SharePint Online site t get the tken used t btain the trust f the Office 365. The Office 365 Lgin interface appears. Enter the username and passwrd. The Office 365 appears. Select the Trust it buttn. The status displayed n the Activate App fr Real-Time Classificatin interface is Activated. Alert Select a ntificatin prfile t send an alert that the tken will expire. Enter the value t define when t send the befre the tken expires. Select OK t save yur changes, r select Cancel t exit this interface. Then, the site cllectins are supprted scanning using the Real-Time Classificatin Scanner rule. Fr mre infrmatin n cnfiguring Real-Time Classificatin Scanner, refer t Real-Time Classificatin Scanner. Office 365 Accunt Prfile Manager Use Office 365 Accunt Prfile Manager t manage all f the Office 365 accunts which will be used t scan all f the site cllectins n the SharePint admin center site. 112 Cmpliance Guardian Installatin and Administratin User Guide

113 T access Office 365 Accunt Prfile Manager fr Cmpliance Guardian, in the Cntrl Panel interface, select Office 365 Accunt Prfile Manager under the SharePint Sites heading. Select Clse n the ribbn t clse the Office 365 Accunt Prfile Manager interface. Managing the Office 365 Accunt Prfiles In the Office 365 Accunt Prfile Manager interface, yu will see a list f previusly cnfigured Office 365 accunt prfiles. The fllwing settings can be cnfigured in the Office 365 Accunt Prfile Manager interface: Select Create n the ribbn t create a new Office 365 accunt prfile. Cnfigure the fllwing setting: Prfile Name Enter a name fr the Office 365 accunt prfile yu are abut t create. Office 365 Credentials Specify the Office 365 credentials fr the Office 365 accunt prfile yu are abut t create. Office 365 User ID Enter the user ID fr the Office 365 accunt prfile. SharePint admin center URL Enter the crrespnding passwrd fr the Office 365 accunt prfile. Select Save n the ribbn t save yur cnfiguratins and g back t the Office 365 Accunt Prfile Manager interface, r select Cancel n the ribbn t g back t the Office 365 Accunt Prfile Manager interface withut saving any cnfiguratins. Select Edit n the ribbn t edit the selected Office 365 accunt prfile. Prfile Name Enter a name fr the Office 365 accunt prfile yu are abut t create. Office 365 Credentials Specify the Office 365 credentials fr the Office 365 accunt prfile yu are abut t create. Office 365 User ID Enter the user ID fr the Office 365 accunt prfile. SharePint admin center URL Enter the crrespnding passwrd fr the Office 365 accunt prfile. Select Save n the ribbn t save yur cnfiguratins and g back t the Office 365 Accunt Prfile Manager interface, r select Cancel n the ribbn t g back t the Office 365 Accunt Prfile Manager interface withut saving any cnfiguratins. Select Delete n the ribbn t delete the selected Office 365 accunt prfiles. A prmpt message appears t infrm yu whether r nt yu want t delete the selected accunt prfiles, select OK t delete them r select Cancel t g back t the Office 365 Accunt Prfile Manager interface. Cmpliance Guardian Installatin and Administratin User Guide 113

114 Select Clse n the ribbn t exit the Office 365 Accunt Prfile Manager interface and g back t the Cntrl Panel interface. Prfile Manager Use Prfile Manager t manage the Cmpliance Guardian related prfile. Security Prfile Security prfile can prtect yur backup data using the security keys generated by the specified encryptin methd. In the Security Prfile pane, there is a default security prfile named Default Security Prfile. The default prfile is nt able t be edited r deleted and nly the users in the System grups and Administratrs grup are able t view it. Prfile Setting T create a new security prfile, select Create n the ribbn, and then cnfigure the fllwing settings: Name Enter a prfile name and an ptinal Descriptin. When cnfiguring encryptin ptins while creating plans fr different Cmpliance Guardian mdules, security prfile names are listed fr yu t select frm. Encryptin Methd Select encryptin methd and encryptin length t be used in the encryptin. Specify an encryptin methd Select an encryptin methd in the drp-dwn list frm AES, DES and Blwfish. *Nte: If yu are using an FIPS plicy in yur envirnment, yu can nly use AES as the encryptin methd. Encryptin Length (bit) Specify the length f the encryptin. Encryptin Key Select the way t generate an encryptin key. Autmatically generate an Encryptin Key Cmpliance Guardian will generate a randmized key fr yu. Generate Encryptin Key frm seed Select this ptin t have Cmpliance Guardian generate a key based n the seed yu enter. If yu chse this methd, enter a seed int the Seed text bx and then enter the same seed int the Cnfirm seed text bx. Select OK t save these cnfiguratins and return t the Security Prfile Interface, r select Cancel t return t the Security Prfile interface withut saving these cnfiguratins. The encryptin methd r length f a security prfile cannt be mdified nce the prfile has been created. In the Security Prfile interface, t mdify the descriptin and cnfiguratin fr a previusly cnfigured security prfile, select the prfile yu want t mdify, and then select Edit n the ribbn. T delete a 114 Cmpliance Guardian Installatin and Administratin User Guide

115 previusly cnfigured security prfile, select the prfile yu want t delete, and then select Delete n the ribbn. *Nte: If the security prfile yu want t delete is already in use, it is nt allwed t be deleted. Imprting and Exprting Security Prfiles Yu can create Security Prfiles and exprt them t be used later. T exprt the Security Prfile, select the prfiles yu want t exprt, and select Exprt n the ribbn. Yu will be asked t create a passwrd fr this security prfile. Select OK after entering the desired passwrd in bth the Passwrd and the Cnfirm passwrd text bxes. Then select OK n the ribbn t save the passwrd and exprt the prfiles t the desired lcatin. T imprt the security prfile, select Imprt n the ribbn. Enter the passwrd that was created when the prfile was exprted then select OK n the ribbn. The security prfile will appear in the list f Security Prfiles in the Security Prfile interface nce it has been imprted. T exit the Prfile Manager interface, select Clse n the ribbn and return t Cntrl Panel interface. Auditr Cmpliance Guardian Auditr mnitrs the activities in Cmpliance Guardian, such as creating, mdifying, r deleting a plan, exprting a reprt, r making changes n test suite, etc. It als allws yu t view and exprt the desired auditr data reprt by cnfiguring the pruning settings. T access Cmpliance Guardian Auditr fr Cmpliance Guardian in the Cntrl Panel interface, select Cmpliance Guardian Auditr under the Auditr heading. Select Clse n the ribbn t clse the Cmpliance Guardian Auditr interface. In the Cmpliance Guardian Auditr interface, yu will see all f the activities and the related infrmatin including the users f the activities, the grups t which the users belng, the time f the activities, the mdules in which the activities are perfrmed, and the statuses f the activities. Cnfiguring Pruning Settings There may be quite a number f activities that the users perfrmed in Cmpliance Guardian, fr the cnsideratin f perfrmance, yu can cnfigure the pruning settings and get yur desired auditr data displayed in Cmpliance Guardian Auditr. T cnfigure pruning settings, cmplete the fllwing steps: Select Pruning n the ribbn f the Cmpliance Guardian Auditr interface. The Cnfigure Pruning Settings interface appears. Cnfigure the fllwing settings: Pruning Rule Cnfigure the pruning rule. Cmpliance Guardian Installatin and Administratin User Guide 115

116 N pruning Select this checkbx, the auditr data will nt be pruned. Keep the last _ items Enter a value t specify the number f items that will be kept in the Cmpliance Guardian Auditr interface. Keep the items f the last _ days/weeks/mnths Enter a value and select a unit (Days, Weeks r Mnths) t specify a time, the activities during the specified time will be kept in the Cmpliance Guardian Auditr interface. Schedule Selectin Set up a schedule fr Cmpliance Guardian t run pruning jbs, r select t manually run pruning jbs. N Schedule Select this ptin if yu want t manually run pruning jbs. Cnfigure the schedule myself Select this ptin t have Cmpliance Guardian run pruning jbs at a designated time. If this is selected, the Schedule Settings cnfiguratin will appear. Here yu will see a list f all f yur previusly cnfigured schedules. T add a new schedule, select Add Schedule. T edit a previusly cnfigured schedule, select the text in the Summary clumn. T delete a schedule, select the delete ( ) buttn. T preview the added schedules in a calendar, select Calendar View. Fr mre infrmatin abut adding r editing a schedule, refer t Cnfiguring a Schedule. Select Prune Nw at the lwer-right crner r n the ribbn t prune the data accrding t the settings immediately, after the pruning jb finishes, the kept items will be displayed in the Cmpliance Guardian Auditr interface. Select Save t save the cnfigured pruning settings, but the data will nt be pruned. The next time yu navigate int this Cnfigure Pruning Settings interface, the cnfigured settings will be laded. Select Cancel t return t the Cmpliance Guardian Auditr interface withut saving any changes. Exprting Auditr Data Reprt The auditr data displayed in Cmpliance Guardian Auditr is supprted exprting t a datasheet fr yur cnveniently review. Select Exprt t Datasheet n the ribbn and then save the reprt t yur desired lcatin, and then review it in the datasheet. Self Checker Self Checker scans the farm accrding t rules yu select in the Self Checker prfiles t check the health f yur envirnment. *Nte: Only the users in the Cmpliance Guardian Administratrs grup can use Self Checker. Self Checker prvides rules in fur categries regarding the health f the Cmpliance Guardian mdules. 116 Cnnectin Checks the cnnectivity amng Cmpliance Guardian services. Cmpliance Guardian Installatin and Administratin User Guide

117 Permissin Verifies apprpriate permissins fr the Agent accunt and the Cmpliance Guardian applicatin pl accunt. Service Checks the status f Cmpliance Guardian services. Others Verifies that all f the requirements fr each mdule are met. T use Self Checker t check the health f the Cmpliance Guardian mdules, cmplete the fllwing prcedures: Create a Self Checker prfile t include the rules yu are abut t scan fr the Cmpliance Guardian mdules. Fr mre infrmatin, refer t Creating a Self Checker Prfile. Run the newly created prfile. After the jb is finished, check the status f the rules in the prfile. If the status is Warning r Errr, click the rule t view the prvided slutin. Fr mre infrmatin, refer t Managing Rules in a Self Checker Prfile. Slve the issue accrding t the prvided slutin. Yu can als re-scan the rules, after yu have slved the issue, t ensure that the prvided slutin slved the prblem. T access Self Checker in the Cntrl Panel interface, click Self Checker under the Self Checker heading. Click Clse n the ribbn t clse the Self Checker interface. Managing Self Checker Prfiles Use the Self Checker prfile t include the rules yu are abut t check fr yur Cmpliance Guardian mdules. In the Self Checker interface, click Prfile Manager n the ribbn. In the appeared interface, yu can see a list f previusly cnfigured prfiles and perfrm the fllwing actins t the prfiles: Create Creates a prfile. T d s, click Create n the ribbn. View Details Views the detailed infrmatin f the selected prfile. T d s, select a prfile by selecting the crrespnding checkbx, and then click View Details n the ribbn. Edit Edits the selected prfile. T d s, select a prfile by selecting the crrespnding checkbx, and then click Edit n the ribbn. Delete Deletes the selected prfiles. T d s, select ne r mre prfiles by selecting the crrespnding checkbxes, and then click Delete n the ribbn. Run Nw Run the selected prfile immediately. T d s, select a prfile by selecting the crrespnding checkbx, and then click Run Nw n the ribbn. Jb Mnitr View and manage the prfiles' jbs. T d s, click Jb Mnitr n the ribbn. Cmpliance Guardian Installatin and Administratin User Guide 117

118 A default prfile is created autmatically after the installatin r upgrade. This prfile will be run at midnight (00:00:00) every Mnday and includes all f the existing Agents, mdules and rules. Creating a Self Checker Prfile In the Prfile Manager interface, click Create n the ribbn t create a new Self Checker prfile. Cmplete the fllwing steps t create a new prfile: Prfile Name Enter a name fr yur prfile, and then enter an ptinal descriptin fr future reference. Click Next. Scan Filter Filters the mdules and the Agents whse health yu want t check. Mdule Filter Select ne r mre mdules yu are abut t check by selecting the crrespnding checkbxes. Agent Filter Select ne r mre available Agents yu are abut t check by selecting the crrespnding checkbxes and select the Include New checkbx t include newly registered r restarted Agent services when scanning all f the available rules. Click Next t prceed. Scan Rules Select the rules yu are abut t include in yur prfile by selecting the crrespnding checkbxes. When running the newly created prfile, Cmpliance Guardian checks all f the rules included in the prfile. Click Next t prceed. Scan Schedule Cnfigure the scan schedule and ntificatin settings fr yur prfile. Schedule Selectin Select ne f the fllwing ptins: N schedule Scans the rules included in the prfile nly when yu running the prfile. Cnfigure the schedule myself Scans the rules included in the prfile accrding t the custmized schedule settings. If yu select this checkbx, the Schedule Settings field will appear. Fr mre infrmatin, refer t Cnfiguring Scan Schedule Settings fr the Self Checker Prfile. Ntificatin Settings Select an existing ntificatin prfile frm the drp-dwn list, r click New Ntificatin Prfile t create a new ne. After selecting the ntificatin prfile, click View t view mre details f this prfile. Select when t receive the ntificatin by selecting the crrespnding checkbxes. Passed Yu will receive a ntificatin with a reprt that includes all f the rules that have a Passed status. Warning Yu will receive the reprt including all f the rules that are in Warning status thrugh the ntificatin Cmpliance Guardian Installatin and Administratin User Guide

119 Click Next t prceed. Errr Yu will receive a ntificatin with a reprt that includes all f the rules that have an Errr status. Skipped Yu will receive a ntificatin with a reprt that includes all f the rules that have a Skipped status. Stpped Yu will receive a ntificatin with a reprt that includes all f the rules that have a Stpped status. Overview View the detailed infrmatin f yur prfile. Click Finish t save the prfile, r click Finish and Run Nw t save and run the prfile. Cnfiguring Scan Schedule Settings fr the Self Checker Prfile In the appeared Schedule Settings field after selecting Cnfigure the schedule myself, click the Add Schedule link t add a new schedule fr the prfile. The Add Schedule interface appears. Cmplete the fllwing steps t cnfigure the scan settings: Type Select a type f recurring schedule fr the schedule yu are abut t add frm the fllwing fur ptins: By hur By day By week By mnth Schedule Settings Select hw frequently the recurring schedule is used: Every _ hurs Enter a psitive integer in the text bx. This ptin appeared when yu select By hur in the Type field. Select Advanced t cnfigure mre specific settings: Specify prductin time Select the start hur and the end hur in this field. Select time belw Select when yu will scan the rules. Click Add t add mre time pint. Every _ day(s) Enter a psitive integer in the text bx. This ptin nly appears when yu select By day in the Type field. Every _ week(s) Enter a psitive integer in the text bx. This ptin nly appears when yu select By week in the Type field. Select Advanced t cnfigure mre specific settings: Run every _ week(s) Enter a psitive integer in the text bx. On _ Select ne r mre ptins frm the drp-dwn list, and then click OK. Every _ mnth(s) Enter a psitive integer in the text bx. This ptin appears when yu select By mnth in the Type field. Select Advanced t cnfigure mre specific settings: Cmpliance Guardian Installatin and Administratin User Guide 119

120 On day _ f _ Enter a psitive integer in the text bx, and then select ne r mre mnth frm the drp-dwn list. Day_ f every _ mnth(s) Select a day frm the drp-dwn list, and then enter a psitive integer in the text bx. The f every _ mnth(s) Select an rdinal numeral frm the first drpdwn list, select ne r mre day frm the secnd drp-dwn list, and then enter a psitive integer in the text bx. The f _ Select an rdinal numeral frm the first drp-dwn list, select ne r mre days frm the secnd drp-dwn list, and then select ne r mre mnths frm the third drp-dwn list. Range f Recurrence Select when the recurring schedule will end: Start time Select a start time. N end date The schedule will nt end. End after _ ccurrences Enter a psitive integer in the text bx. The schedule will end after the entered number f ccurrences. End by _ Select the end date. The schedule will end n the selected end date. Click OK t save yur changes and return t Scan Schedule interface, r click Cancel t return t Scan Schedule interface withut saving any changes. Click Add Schedule t add mre schedules fr yur prfile. Click Calendar View t view the verall schedules. Managing Rules in a Self Checker Prfile In the Self Checker interface, yu can perfrm the fllwing actins: Prfile Manager Manages all f the Self Checker prfiles. Fr mre infrmatin, refer t Managing Self Checker Prfiles. Exprt Reprt Exprts a reprt fr all f the rules in the selected prfile. View Details Views the detailed infrmatin f the selected rule. Select a rule and then click View Details n the ribbn. Stp Scanning Stps scanning the selected rules. Select ne r mre rules and then click Stp Scanning n the ribbn. Rescan Rescans the selected rules. Select ne r mre rules and then click Rescan n the ribbn. Jb Mnitr Mnitrs all f the Self Checker jbs. 120 Cmpliance Guardian Installatin and Administratin User Guide

121 Exprting Self Checker Reprt T exprt a Self Checker reprt, which will allw yu t view detailed infrmatin abut the rules included in a specific prfile, cmplete the fllwing steps: In the Self Checker interface, select a prfile frm the Prfile Name drp-dwn list. Select a cllectin time frm the Cllectin Time drp-dwn list. By default, the latest cllectin time f the selected prfile is displayed. T exprt all f the scan results, click Exprt Reprt. T exprt particular scan results, select the checkbxes f the rules yu want t exprt and click Exprt Reprt. Click Exprt Reprt n the ribbn t exprt a Self Checker reprt. The Exprt Reprt interface appears. In the Scan Results Selectin field, chse t exprt all f the scan results r nly the selected scan results. Select a reprt frmat frm the Select a reprt frmat drp-dwn list in the Reprt Frmat field. Click OK. The reprt will be exprted t a lcatin yu specified. Slutin Manager Slutin Manager prvides an interface fr yu t manage all f the Cmpliance Guardian slutins. T access Slutin Manager fr Cmpliance Guardian, g t the Cntrl Panel interface, and then select Slutin Manager under the Slutin Manager heading. Select Clse n the ribbn t clse the Slutin Manager interface. *Nte: Be sure that yu have Full Cntrl f all znes f all Web applicatins via the User Plicy fr Web Applicatins in yur SharePint permissins. Managing Slutins When yu first access Slutin Manager, yu will see tw Cmpliance Guardian slutins. In rder t see sme f the infrmatin fr these slutins, r t perfrm certain actins t these slutins, yu must first select a farm. Farm Selectin Select a farm frm the Farm drp-dwn menu, the fllwing infrmatin f the farm will be displayed in a table: Number f Frnt-end Web Servers Number f the servers which have enabled the Micrsft SharePint Fundatin Web Applicatin service. Cmpliance Guardian Installatin and Administratin User Guide 121

122 Number f Available Agents Number f the Cmpliance Guardian Agents with an up ( ) and Active status. Deplyment Methd Currently the slutin can nly be lcally deplyed. In ther wrds, slutin files are deplyed nly t the Cmpliance Guardian Agent Server frm which the deplyment peratin was initiated. Viewing the Slutin's Infrmatin Yu can view the fllwing infrmatin f the slutins in the crrespnding table: Slutin Name f the Cmpliance Guardian slutin. Mdule Name f the mdule this slutin is intended fr. The fllwing infrmatin is nly available if yu have a farm selected: Versin Versin f the slutin. Status Deplyment status f the slutin file. N/A The slutin is nt installed. Nt Deplyed The slutin is installed but nt deplyed. Deplyed The slutin is deplyed t all f the Agent servers. Partially Deplyed The slutin is deplyed t sme f the Agent servers. Last Refreshed Time Last mdified time f the crrespnding slutin. Message Detailed infrmatin abut the slutin deplyment. Operatins n the Slutins Select a slutin frm the table by checking the crrespnding checkbx. Yu can perfrm the fllwing actins: Install Select Install n the ribbn t add a slutin package t the farm's slutin stre, which is in the farm's cnfiguratin database. Use this buttn when yu nly want t add the slutin t the specified farm and d nt want t deply it. Deply Select Deply n the ribbn t unpack the slutin package, and cpy its elements t their apprpriate places. This buttn can be used even when the slutin has nt been installed t the specified farm. In that case, the slutin will be installed t the specified farm first and then be deplyed. Retract Reverse the deplyment f the farm slutin's cmpnents. The slutin remains in the slutin stre and can be redeplyed later. Remve Deletes the slutin package frm the slutin stre. This buttn can be used even when the slutin has nt been retracted frm the specified farm. In that case, the slutin will be retracted frm the specified farm first and then remved. 122 Cmpliance Guardian Installatin and Administratin User Guide

123 After a slutin is installed, t view infrmatin abut it, select the slutin by checking the crrespnding checkbx, and then select Slutin Prperties n the ribbn. Yu will be brught t the Slutin Prperties page. By default, the Summary tab is pen, which shws an verall view f the specified slutin. Select the Details tab t view the slutin s deplyment status n each f the Web applicatins and ther detailed infrmatin. In the Details tab, yu can als select Web applicatins by checking the crrespnding checkbxes, and then select t Deply r Retract the slutin frm the selected Web applicatins. When yu are finished, select Cancel n the ribbn t return t the Slutin Manager interface. Managing Slutins T keep yur Cmpliance Guardian slutins up t date, Slutin Manager prvides yu tls t check fr slutin versin, upgrade existing slutins, and repair deplyed slutins. T perfrm any f these actins, select the slutin by checking the crrespnding checkbx, then select: Retrieve Versin n the ribbn t retrieve versin infrmatin abut the selected slutins. The infrmatin displayed in the Versin, Status, and Message clumns will be refreshed. Upgrade n the ribbn t upgrade the selected slutin t the latest versin. A slutin can be upgraded if the slutin versin is lwer than the current agent versin. Repair n the ribbn t repair the selected slutin. Yu can repair a slutin if it des nt have the same versin as the current agent versin. Slutin Descriptin Refer t the fllwing descriptins t get an verall view f all f the Cmpliance Guardian slutins. SP2007QuarantineManager.wsp/SP2010QuarantineManager.wsp/SP2013QuarantineManager.wsp This slutin is used fr the Real-Time Classificatin Scanner and Scheduled Classificatin Scanner. If yu deply this slutin, yu are able t use the Cmpliance Guardian Quarantine Manager in SharePint. SP2007AssistManager.wsp/SP2010AssistManager.wsp/SP2013AssistManager.wsp This slutin is nly used fr the Real-Time Classificatin Scanner mdule. After enabling this feature, yu can manually scan the dcument in the specified scpe defined in Cmpliance Guardian, and view the scanned results, r yu can directly mdify the tag values fr the scanned dcument withut mdifying the checks. SP2007InstallEventReceiver.wsp/SP2010InstallEventReceiver.wsp This slutin is nly used fr the Real-Time Classificatin Scanner mdule. If yu deply this slutin, the Cmpliance Guardian Newly Created Sites Real-Time Scan feature will be enabled n the Web applicatin autmatically. The newly created site s crrespnding Cmpliance Guardian Real-Time Scan feature will als be enabled, and then the newly created site will apply its parent's Real-Time Classificatin rule (if the parent has applied a rule). Cmpliance Guardian Installatin and Administratin User Guide 123

124 YammerCnnectr.wsp This slutin is used fr the Real-Time Classificatin Scanner mdule. After enabling this feature, and cnfiguring related settings in Real-Time Classificatin Scanner, Cmpliance Guardian will scan the cntent psted thrugh the SharePint Web part t Yammer. Database Manager Database Manager allws yu t create and cnfigure the databases fr a Cmpliance Scan jb and Classificatin Scan jb t use. A database plicy is cnfigured fr a Cmpliance Scan jb, yu can select a database, and set up a retentin plicy fr saving data in this database. In the Database Manager interface, yu will see the Reprt Database and Reprt Database Plicy tabs. Database Database Manager allws yu t stre the scanned results f Cmpliance and Classificatin Scanners and the archived Lync data. T access the Database settings fr Cmpliance Guardian in the Cntrl Panel interface, select Database Manager under the Cmmn Settings heading. Select Clse n the ribbn t clse the Database interface. Managing Database In Database Manager, yu can create a database, view details abut a database, edit a previusly cnfigured database, r delete a lcatin. Fr mre infrmatin abut creating r editing a database, refer t Cnfiguring Database. T view details abut a reprt database, select it frm the list f databases, select View Details n the ribbn, then select Database in the drp-dwn menu. Yu will see the settings fr this database. Select Edit n the ribbn t change the cnfiguratins fr this database. Fr mre infrmatin abut editing cnfiguratins fr a reprt database, refer t Cnfiguring Database. T delete a database frm Cmpliance Guardian, select it frm the list f databases, and select Delete n the ribbn, and then select Database frm the drp-dwn list. A cnfirmatin windw will appear and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected databases, r select Cancel t return withut deleting it. Cnfiguring Database T create a new database, select Create n the ribbn, and then select Database in the drp-dwn menu. T mdify a database, select the database, and select Edit n the ribbn, and then select 124 Cmpliance Guardian Installatin and Administratin User Guide

125 Database in the drp-dwn list menu. In the Create Database r Edit Database interface, cnfigure the fllwing settings: Cnfigure Database Specify a reprt database. Enter a new Database Server and a Database Name in the crrespnding fields. Authenticatin Select the authenticatin mde fr the reprt database. If Windws Authenticatin is selected, the applicatin pl accunt and the Cmpliance Guardian Agent Accunt must have the db_wner permissin fr the reprt database. If the reprt database des nt exist and need t be created, the applicatin pl accunt and the Cmpliance Guardian Agent Accunt must have the dbcreatr permissin fr the reprt database. Yu can als validate the database accunt by selecting Validatin Test. The Validatin Test nly runs if the applicatin pl accunt has enugh permissins t the reprt database. If SQL Authenticatin is selected, the necessary infrmatin must be specified in the Accunt and Passwrd fields. Yu can als validate the database accunt by selecting Validatin Test. Failver Database Server Specify a failver database server. In the event that the specified reprt database cllapses, the data stred in the reprt database can be transferred t this standby database. Alternatively, yu can cnfigure the authenticatin in Advanced settings by entering a cnnectin string instead f cnfiguring the settings. Select Advanced; the Cnnectin String sectin appears. Check the Edit Cnnectin String directly checkbx t activate this feature, and then enter the cnnectin string accrding t the example listed in the left pane. Select Save t finish and save the cnfiguratin, r select Cancel t return t the Database page withut saving any cnfiguratins. Database Plicy Database Plicy allws yu t apply reprt retentin rule t the specified database. A retentin rule defines hw t prune the reprts stred in the database. T access Database Plicy settings in the Cntrl Panel interface, select Database Manager under the Cmmn Settings heading. The Database tab is the default ne. Select the Database Plicy tab t launch the Database Plicy page. Select Clse n the ribbn t clse the Database Plicy interface. Managing Database Plicy In Database Plicy, yu can create, view details, edit, r delete a database plicy. Fr mre infrmatin abut creating r editing a database plicy, refer t Cnfiguring Database Plicy. Cmpliance Guardian Installatin and Administratin User Guide 125

126 T view details abut a database plicy, select it frm the list f database plicies, select View Details n the ribbn, then select Database Plicy in the drp-dwn menu. Yu will see the settings fr this database plicy. Select Edit n the ribbn t change the cnfiguratins fr this database plicy. Fr mre infrmatin abut editing cnfiguratins fr a database plicy, refer t Cnfiguring Database Plicy. T delete a database plicy frm Cmpliance Guardian, select it frm the list f database plicies, and select Delete n the ribbn, and then select Database Plicy in the drp-dwn list. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected database plicies, r select Cancel t return withut deleting it. Cnfiguring Database Plicy T create a new database plicy, select Create n the ribbn, and then select Database Plicy in the drp-dwn menu. T mdify a database plicy, select the plicy, and select Edit n the ribbn, and then select Database Plicy in the drp-dwn list. In the Create Database Plicy r Edit Database Plicy interface, cnfigure the fllwing settings: Database Plicy Name Specify a name fr the database plicy. Enter a Reprt Database Plicy Name and a Descriptin in the crrespnding fields. The descriptin is ptinal. Database Select an existing database r create a new ne. Reprt Retentin Rule Check the Enable reprt retentin checkbx t activate this feature, and then enter an integer in the right pane t define hw t prune the reprts in the specified database. Select Save t finish and save the cnfiguratin, r select Cancel t return t the Database Plicy page withut saving any cnfiguratins. Test Suite Manager Test Suite Manager allws yu t manage test suites and create checks and test suites. T access the Test Suite Manager in the Cntrl Panel interface, select Test Suite Manager under the Cmmn Settings heading. Select Clse n the ribbn t clse the Test Suite Manager interface. Backgrund Infrmatin In rder t prvide a flexible and custmizable cmpliance slutin, AvePint develped the AvePint Testing Language (ATL) t prvide rganizatins with the ability t rapidly respnd t new cmpliance threats and requirements. ATL is an XML structured language that is used t validate and classify cntent related t cmpliance t standards r guidelines, including but nt limited t security, privacy, accessibility, and cntent classificatin. Because it is pen and mdifiable, ATL allws fr cverage t specifically match an rganizatin s needs. ATL uses test definitin files (checks) t match yur 126 Cmpliance Guardian Installatin and Administratin User Guide

127 envirnment and standards, test yur framewrk and repair issues, validate that yur cntent cmplies with rganizatinal standards, and identify all cntent that requires user review and distribute a list f items t the apprpriate parties. A check is an XML file that defines the lgic that Cmpliance Guardian uses t check files. Checks identify the purpse fr the check (the type f check t run, such as a pattern f characters), the cnditin fr the check (such as scial security number pattern), and the pssible result f the check (true r false). Users can change the values in the checks t determine the check cnditins, but the elements specific frmat defined by Cmpliance Guardian in the checks must stay the same. A test suite is a lgical gruping f test definitin files, r a set f checks, that define hw t present the scanned data. Test suites allw yu t build scan plans fr yur specific regulatins and requirements. These cllectins are the basis f Cmpliance Guardian scans. A test suite cntains ne r mre checks and a cnfiguratin file that is used t define hw t cmbine these checks and set risk levels fr scan results. Managing Test Suites In the Test Suite Manager interface, yu will see a list f the cnfigured test suites (including the built-in test suites). *Nte: Yu can view the versin f a test suite. When a test suite is upladed t Cmpliance Guardian r created thrugh Cmpliance Guardian, Cmpliance Guardian will autmatically assign a versin fr this test suite. If a test suite is updated via Test Suite Manager, Cmpliance Guardian will als autmatically update its versin when it is saved. In the Test Suite Manager interface, yu can create, uplad, dwnlad, view details abut, edit, r delete checks and test suites. Review the fllwing sectins fr infrmatin abut each f these available actins. Creating a New Check r Test Suite Review the fllwing tw prcedures fr infrmatin abut creating either a new check r test suite. Creating Checks T create a new check, select Create n the ribbn f the Test Suite Manager interface. When the drpdwn menu appears, select Check frm the drp-dwn menu. T create a new check, cmplete the fllwing steps: 1. In the Check Template screen, select the desired check template in the check template list by selecting the radi buttn befre the check template. 2. Select Next n the ribbn r n the lwer-right crner f the screen. The Reprt Text screen appears. Cmpliance Guardian Installatin and Administratin User Guide 127

128 3. Cnfigure the fllwing settings in the Reprt Text screen: Name and Descriptin Enter a name fr the check. The descriptin is ptinal. URL Enter a hyperlink t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. This field is ptinal. True Result and Message Select the returning status and message fr this check when the checking result is True. The checking lgic determines whether a check result is false r true. False Result and Message Select the returning status and message fr this check when the checking result is False. The checking lgic determines whether a check result is false r true. 4. Select Next n the ribbn r n the lwer-right crner f the screen. The check attributes cnfiguratin screen appears. 5. Cnfigure the attributes fr the check. The attributes that are required t be cnfigured fr each type f check are different. Fr mre infrmatin abut cnfiguring attributes fr each type f check, refer t Cnfiguring Check Type Attributes in Appendix B. 6. Select Save n the ribbn r n the lwer-right crner f the screen t save the check. If yu want t preview the check befre saving it, select Preview n the ribbn r n the lwerright crner f the screen. A pp-up windw appears. Enter the file name in the pp-up windw, and select Save. The check will be saved. Yu can view the cnfiguratin infrmatin n the check, and then save the check in Cmpliance Guardian after yu have previewed the check and cnfirmed the check infrmatin. Creating Test Suites T create a new test suite, select Create n the ribbn f the Test Suite Manager interface. When the drp-dwn menu appears, select Test Suite frm the drp-dwn menu. T create a new test suite, cmplete the fllwing steps: In the Test Suite Type screen, select the test suite type: Test Suite fr Cmpliance Reprting Fund in Cmpliance Manager. This type f test suite is used t identify and reprt any instances f nn-cmpliance t defined rules and then identify the assciated risks. Test Suite fr Classificatin and Tagging Fund in Classificatin Manager. This type f test suite is used fr cntent classificatin with a variety f related actins such as embedding metadata, quarantining dcuments, and reacting cntent. Test Suite fr Redactin Fund in Classificatin Manager. This type f test suite is used fr redacting the specified cntent in a file. 2. After selecting the test suite type, select Next n the ribbn r n the lwer-right crner f the screen. The Test Suite fr Cmpliance Reprting, Test Suite fr Classificatin and Tagging, r Test Suite fr Redactin screen appears. Cmpliance Guardian Installatin and Administratin User Guide

129 3. Cnfigure the fllwing settings: Name and Descriptin Enter a name fr the test suite. The descriptin is ptinal. Check Accessibility (nly appears when Test Suite fr Cmpliance Reprting type is selected) Select whether r nt t check the file accessibility. If Yes is selected, the file will be scanned keeping its frmatting. If N is selected, the file will be scanned, stripping ut its frmatting. If the file that will be scanned is the unsupprted type in Cmpliance Guardian, the functin will nt be used n matter the Yes ptin r the N ptin is selected. DepthScan (nly appears when Test Suite fr Cmpliance Reprting type r Test Suite fr Classificatin and Tagging type is selected) Select an ptin fr DepthScan. Hybrid Cmpliance Guardian scans the files with the supprted file types. If the files that will be scanned are the unsupprted types in Cmpliance Guardian, IFilter will be used fr the scan. True Cmpliance Guardian scans the files. If the files that will be scanned are the unsupprted types in Cmpliance Guardian, the exceptin message will be thrwn and displayed in Cmpliance Guardian Reprt. False IFilter is used fr the scan. Fr mre infrmatin n the supprted file types in Cmpliance Guardian, refer t Appendix C: Supprted File Types in Cmpliance Guardian. 4. Select Next n the ribbn r n the lwer-right crner f the screen. The File Bdy Cnfiguratin screen appears. 5. Cnfigure the attributes fr the test suite. Fr mre infrmatin abut cnfiguring the file attributes, refer t Cnfiguring Test Suite File Attributes in Appendix B. 6. Select Save n the ribbn r n the lwer-right crner f the screen t save the test suite. If yu want t preview the Test Suite fr Cmpliance Reprting, Test Suite fr Classificatin and Tagging, r Test Suite fr Redactin file befre saving it, select Preview n the ribbn r n the lwer-right crner f the screen, a pp-up windw appears. Enter the file name in the ppup windw, and select Save t save the file. Yu can view cnfiguratin infrmatin n the file, and then save the test suite in Cmpliance Guardian after yu have previewed the file and cnfirmed the file infrmatin. Uplading Checks and Test Suites Select Uplad n the ribbn. A windw will pp up, and then yu can select the desired test suite r check. The upladed test suite will display in the test suite list in the Test Suite Manager interface; the upladed check will be laded when yu create a test suite. Yu can uplad multiple test suites r checks at ne time. Befre uplading the test suites r checks, yu must zip the test suites t ne file, r zip the checks t ne file first, and then select the ZIP file t uplad them t Cmpliance Guardian. Cmpliance Guardian Installatin and Administratin User Guide 129

130 Dwnlading a Test Suite Select a test suite frm the list f previusly cnfigured test suites, and then select Dwnlad n the ribbn. Viewing Details abut a Test Suite Select a test suite frm the list f previusly cnfigured test suites, and then select View Details n the ribbn. Editing a Previusly Cnfigured Check r Test Suite In the Test Suite Manager interface, select the test suite that yu want t edit, and then select Edit n the ribbn. A drp-dwn menu appears. Chse ne f the fllwing ptins: Checks in Test Suite Edit the test suite by enabling r disabling checks and remving checks. Yu can als edit the checks in the test suite. Fr mre infrmatin, refer t Editing Checks in Test Suite. Test Suite Edit the selected test suites file. Fr mre infrmatin, refer t Editing Test Suite. Editing Checks in Test Suite If selecting Checks in Test Suite frm the Edit drp-dwn menu, yu will be brught t the Edit interface where yu can cnfigure the fllwing settings: Name and Descriptin Edit the test suite s name and descriptin. Check Selectin All the checks that are included in the selected test suite will be laded here. Refer t the descriptin field fr an verview f each check. Perfrm the fllwing actins as needed: In the Status clumn, yu can select the dwn arrw ( ), and then select Enable r Disable t enable r disable a check. If yu disable a check, the check will nt be used in the test suite. *Nte: The Status clumn nly appears if yu are editing a Test Suite fr Cmpliance Reprting. T delete ne r mre checks frm the test suite, select the checkbxes befre the checks, and select Delete n the ribbn. T edit a single check, select the checkbx t the left f the check, and then select Edit n the ribbn f this interface. Refer t Editing a Check. Yu can als perfrm the fllwing additinal actins when selecting the checks in the Check Selectin sectin: 130 Cmpliance Guardian Installatin and Administratin User Guide

131 Srt Select the header rw f each clumn t srt all f the values in the specified clumn accrding t the ascending/descending rder. T change the number f checks displayed per page, select the desired number frm 5, 8, 10, 15 (default value), 20, 25, 50, 100 in the Shw rws drp-dwn menu at the lwer-right crner. T g t the specified page, enter the page number in the G t f text bx at the lwer-right crner and press Enter. T g t the next page, select the > buttn at the lwer-right crner; t return t the previus page, select the < buttn at the lwer-right crner. Select Save t save the changes, r select Clse t exit the interface withut saving any changes. Editing a Check After selecting a check and selecting Edit n the ribbn, yu will be brught t the check Edit interface. Cmplete the fllwing steps as needed: 1. Edit the fllwing settings in the Reprt Text screen: Name and Descriptin Enter a name fr the check. The descriptin is ptinal. URL Enter a hyperlink t prvide additinal infrmatin abut this check, including any fficial rules r articles f law that specify hw the check will test files. This field is ptinal. True Result and Message Select the returning status and message fr this check when the checking result is True. The checking lgic determines whether a check result is false r true. False Result and Message Select the returning status and message fr this check when the checking result is False. The checking lgic determines whether a check result is false r true. 2. Select Next n the ribbn r n the lwer-right crner f the screen. The check attributes cnfiguratin screen appears. 3. Cnfigure the attributes fr the check. The attributes that are required t be cnfigured fr each type f check are different. Fr mre infrmatin abut cnfiguring attributes fr each type f check, refer t Cnfiguring Check Type Attributes in Appendix B. 4. Select Save n the ribbn r n the lwer-right crner f the screen t save the check. Alternatively, select Save As and enter a check name t save it as anther check. If yu want t preview the check befre saving it, select Preview n the ribbn r n the lwerright crner f the screen. A pp-up windw appears. Enter the file name in the pp-up windw, and select Save. The check will be saved. Yu can view the cnfiguratin infrmatin n the check, and then save the check in Cmpliance Guardian after yu have previewed the check and cnfirmed the check infrmatin. Cmpliance Guardian Installatin and Administratin User Guide 131

132 Editing Test Suite If selecting Test Suite frm the Edit drp-dwn menu, yu will be brught t the Test Suite Manager Edit interface where yu can edit the fllwing settings: 1. Edit the Name and Descriptin in the Test Suite fr Cmpliance Reprting Test Suite fr Classificatin and Tagging r Test Suite fr Redactin screen. The descriptin is ptinal. If yu re editing a test suite fr Cmpliance Reprting, yu need t cnfigure the Check Accessibility setting. Select whether r nt t check the file accessibility. 2. Select Next n the ribbn r n the lwer-right crner f the screen. The File Bdy Cnfiguratin screen appears. 3. Cnfigure the attributes fr the test suite file. Fr mre infrmatin abut cnfiguring the file attributes, refer t Cnfiguring Test Suite File Attributes in Appendix B. 4. Select Save n the ribbn r n the lwer-right crner f the screen t save the test suite. Alternatively, select Save As and enter a test suite name t save it as anther test suite. If yu want t preview the Test Suite fr Cmpliance Reprting Test Suite fr Classificatin and Tagging r Test Suite fr Redactin file befre saving it, select Preview n the ribbn r n the lwer-right crner f the screen. A pp-up windw appears. Enter the file name in the pp-up windw, and select Save t save the file. Yu can view cnfiguratin infrmatin n the file, and then save the test suite in Cmpliance Guardian after yu have previewed the file and cnfirmed the file infrmatin. Deleting a Test Suite Select a test suite frm the list f previusly cnfigured checks r test suites, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete, r select Cancel t return withut deleting it. Risk Frmula Risk Frmula prvides the user with a methd t measure level f risk in prprtin t the risk type. It allws users t grw risk at a specified factr, prviding an accurate lk at risk by ccurrence. Managing Risk Frmulas Select Risk Frmula n the ribbn f the Test Suite Manager interface, yu will be brught t the Risk Frmula interface. In the Risk Frmula interface, yu will see a list f the created Frmula. There are three default Frmulas: Weighted, Stepped, and Raw. In the Risk Frmula interface, yu can create, view details abut, edit, r delete the created Frmulas. T view details abut a Frmula, select the Frmula, and select View Details n the ribbn. 132 Cmpliance Guardian Installatin and Administratin User Guide

133 T edit a previusly created Frmula, select the Frmula, and select Edit n the ribbn. T delete a previusly created Frmula, select the Frmula, and select Delete n the ribbn. T create a new Frmula, select Create n the ribbn, yu will be brught t the Create Risk Frmula interface, cnfigure the fllwing settings: Name and Descriptin Enter a name fr the new frmula. The descriptin is ptinal. Frmula Define a new frmula. Detailed Infrmatin n the Frmula There are three default risk frmulas: Weighted, Stepped, and Raw. The frmula fr Weighted is: r1+r2*r3*(n-1). The frmula fr Stepped is: r1+r2*(n-1). The frmula fr Raw is: r1*n. User can als create a new risk frmula. Refer t the fllwing sectin fr the intrductin abut r1, r2 and r3: r1 Item Initial Risk value, this is the value assigned n the initial ccurrence f the cmpliance failure (related t the check being tested fr) in the dcument r stream. Allwed Values fr r1 are r2 Item Additinal Risk Level factr (Step) that the risk level grws at fr every additinal failure at the check level (fr the same type) fund in the dcument r stream. This number is ptinal where the integer -1 means ignre the value (allwing t use the third value). If the value is -1 then the factr will be 1. Allwed Values are -1 t 10. r3 Item risk in relatin t ther checks. This Item is ptinal. If this number is missing then it is assumed that its value is 1. Allwed Values are In additin, the r3 value allws us t define imprtance f an item in a check against ther checks allwing us t lk at a dcument with 100 images with missing alternative text quite differently than a dcument that has 100 scial security numbers. In additin, if we cnsidered alt text errrs and SSN numbers as errrs that shuld grw risk at the same value fr every new ccurrence we culd then define imprtance at a higher level fr a specified test suite. These tw additinal risk factrs allw us t mre accurately shw risk against checks r test suites and based n imprtance f repetitive failure in a dcument. Cmpliance Guardian Installatin and Administratin User Guide 133

134 Viewing a Test Suite's r Check's Versin Histry Cmpliance Guardian supprts yu viewing the versin histry f a check r a test suite. In the Test Suite Manager interface, the latest versin f a test suite is displayed in the Versin clumn. T view the detailed versin histry f a test suite as well as the versin histry f the checks in a test suite, select the test suite, and then select Versin Histry n the ribbn. The Versin Histry interface appears. Select Clse n the ribbn t return t the Test Suite Manager interface. Viewing a Test Suite's Histry Versin Select a test suite versin that yu want t view, and select the dwn arrw ( ) after the crrespnding test suite. A drp-dwn list appears. Select View Test Suite frm the drp-dwn list. Then, save the test suite versin fr yur reference. Alternatively, yu can select the test suite versin, and select View n the ribbn. A drp-dwn list appears. Select Test Suite frm the appeared drp-dwn list. Then, save the test suite versin fr yur reference. Deleting a Test Suite's Histry Versin Select ne r mre test suite versins, and select Delete n the ribbn. The selected test suite versins are deleted frm the Versin Histry interface. Viewing a Check's Histry Versin Refer t the fllwing steps t g t the View Checks interface which displays all f the checks f a selected test suite: Select a test suite versin, and then select the dwn arrw ( ) after the test suite. A drp-dwn list appears. Or yu can select View n the ribbn. A drp-dwn list appears. Select View Checks in Test Suite in the appeared drp-dwn list. The View Checks interface appears. Or yu can select Checks in Test Suite in the drp-dwn list appeared n the ribbn. The View Checks interface als appears. In the View Checks interface, select the radi buttn befre a check, and then select All Versins. The View Versins interface appears. Yu can als select the check in the View Checks interface t g t the All Versins interface. In the All Versins interface, all f the versins f a check are displayed. T review a check versin, select the dwn arrw ( ) after the check versin, and then select View frm the appeared drp-dwn list. Then yu can save the check versin fr yur reference. Alternatively, yu can select a check versin, select View n the ribbn, and then save the check versin fr yur reference. T delete a check versin, select the dwn arrw ( ) after the check versin, and then select Delete frm the appeared drp-dwn list. Alternatively, yu can select a check versin and then select Delete n the ribbn. 134 Cmpliance Guardian Installatin and Administratin User Guide

135 *Nte: The latest versin f a check cannt be deleted. Reprt Cnfiguratin Reprt Cnfiguratin allws yu t cnfigure the reprt settings. T access Reprt Cnfiguratin settings fr Cmpliance Guardian in the Cntrl Panel interface, select Reprt Cnfiguratin under the Cmmn Settings heading. Select Clse n the ribbn t clse the Reprt Cnfiguratin interface. Managing Reprt Settings In Reprt Cnfiguratin, yu can specify a default reprt lcatin, specify the maximum number f files t display in the reprt interface, cnnect t DcAve Auditr Database, cnfigure the authenticatin and advanced settings. Fr mre infrmatin abut cnfiguring the reprt settings, refer t Cnfiguring Reprt Settings. Cnfiguring Reprt Settings In the Reprt Cnfiguratin interface, cnfigure the fllwing settings: 1. Default Reprt Lcatin Specify a Reprt Lcatin as the default lcatin fr string reprts, and then cnfigure the pruning rule. The fllwing ptins can be cnfigured: N Pruning Select this ptin t chse nt t prune the reprts in the reprt lcatin. Depending n the reprt lcatin yu are cnfiguring pruning rule fr, yu will be presented with different ptins: Keep the last reprt(s) Select this ptin t keep nly the desired number f mst recent reprts in this reprt lcatin. Set the number f reprts t keep by entering a psitive integer int the text bx. Fr example, if yu enter 5 in the text bx, nly the 5 mst recent reprts in this reprt lcatin will be kept. All ther reprts will be deleted. Keep the last Minute(s)/Hur(s)/Day(s)/Week(s)/Mnth(s) f reprt(s) Select this ptin t keep nly the reprts within the desired time frame in this reprt lcatin. Set the time frame fr the reprts yu want t keep by entering a psitive integer int the text bx, then select Minute(s), Hur(s), Day(s), Week(s) r Mnth(s) frm the drp-dwn menu. Fr example, if yu enter 7 in the text bx, and select Day(s), nly reprts generated within the last 7 days in this reprt lcatin will be kept. All f the previus reprts will be deleted. 2. Maximum Number f Files Set the maximum number f files t display in the reprt interface by entering a psitive integer int the text bx. Fr example, if yu enter 500 in the text bx, nly 500 reprts will be stred in the reprt lcatin. 3. Cnnect t DcAve Auditr Database Specify a Database Server where the DcAve Auditr database resides and a Database Name in the crrespnding fields t cnnect t the specified Cmpliance Guardian Installatin and Administratin User Guide 135

136 DcAve Auditr database. The DcAve Auditr infrmatin will be used with the risk analysis frm Cmpliance Guardian t generate the Risk Reprt exprt. *Nte: Since any changes t the database server r database name may lead t lss, it is strngly recmmended nt t change them nce cnfigured. 4. Authenticatin Select the authenticatin mde fr the reprt database. The necessary infrmatin must be specified in the Accunt and Passwrd fields. Yu can als validate the database accunt by selecting Validatin Test. Alternatively, yu can cnfigure the reprt settings in the Advanced settings by entering a cnnectin string instead f cnfiguring the settings. Select Advanced, and the Cnnectin String sectin will appear. Check the Edit Cnnectin String directly checkbx t activate this feature, and then enter the cnnectin string accrding t the example listed in the left pane. 5. Select OK t save the cnfiguratins and return t the Cntrl Panel interface, r select Back t return t the Cntrl Panel interface withut saving any changes. Allwed Lcatin Allwed Lcatin allws yu t cnfigure a destinatin lcatin where the scanned file is mved. T access Allwed Lcatin settings fr Cmpliance Guardian in the Cntrl Panel interface, select Allwed Lcatin under the Cmmn Settings heading. Select Clse n the ribbn t clse the Allwed Lcatin interface. Cnfiguring Allwed Lcatin In Allwed Lcatin, yu can create a new allwed lcatin, edit a previusly cnfigured allwed lcatin, r view the infrmatin f the previusly cnfigured allwed lcatins. T create a new allwed lcatin, select a scpe (yu can cnfigure an allwed lcatin either in the site level r the list level). Select Cnfigure and the Cnfigure windw appears. Expand the farm tree r My Registered Sites and then select a library r flder where the file is mved. Then, select OK t save the settings. Yu can cnfigure t mve a file between sites in the same farm, mve a file frm a SharePint 2010 farm t a SharePint 2010 farm, mve a file frm SharePint 2013 farm t a SharePint 2013 farm, r mve a file between SharePint 2013 On-Premises and SharePint Online. Inheritance Status Fr site level, there are tw types f inheritance status: N/A and Nt Inherit. Fr list level, there are three types f inheritance status: N/A, Nt Inherit, and Inherit. When there is n allwed lcatin cnfigured fr a site, the site inheritance status is N/A. The inheritance statuses f the lists that inherit the site are N/A; the inheritance statuses f the lists that d n inherit the site are Nt Inherit. 136 Cmpliance Guardian Installatin and Administratin User Guide

137 When there is an allwed lcatin that has been cnfigured fr the site, the site inheritance status is Nt Inherit. The inheritance statuses f the lists that inherit the site are Inherit; the inheritance statuses f the lists that d nt inherit the site are Nt Inherit. Inherit r Nt Inherit After cnfiguring an allwed lcatin in a site, the lists under this site autmatically inherit the destinatin flder that is cnfigured fr the site. If yu cnfigure an allwed lcatin in the lists that are under this site, these lists are regarded as stpping inheriting frm the site. If files are mved after scanning accrding t the actin plicy, the files in these lists will be mved t the list destinatin flders; the files in this site except this list will be mved t the site destinatin flder. If sme lists have cnfigured allwed lcatins, and the site des nt cnfigure ne. The files in these lists that are mved accrding t the actin plicy will be mved t the list destinatin flders; the files in the site but nt in these lists will nt be mved even if they shuld be. The files in sites r lists that d nt cnfigure allwed lcatins will nt be mved. Helpful Ntes Review the fllwing helpful ntes n cnfiguring the Allwed lcatin: By default, the Allwed Lcatin cnfigured fr the site level is inherited by the list levels. Yu can cnfigure a new destinatin flder in list level t break the inheritance frm the site level. Nt Inherit lgically separates the destinatin flder in list level frm the site level. When cnfiguring destinatin flders fr the first time, yu can cnfigure destinatin flders directly at either the site level r the list level. After ne destinatin flder has been cnfigured fr a list level, yu can still cnfigure destinatin flders directly t the site levels. The inherited destinatin flder cannt be remved; it can nly be edited. The target library where the allwed lcatin is must cntain a cntent type that matches with the surce file s cntent type, and the matched cntent type must cntain all the surce s files clumns. Exprt Lcatin Exprt Lcatin allws yu t exprt SharePint data t a specified lcatin. T access Exprt Lcatin settings fr Cmpliance Guardian in the Cntrl Panel interface, select Exprt Lcatin under the Exprt Lcatin heading. Select Clse n the ribbn t clse the Exprt Lcatin interface. Cmpliance Guardian Installatin and Administratin User Guide 137

138 Managing Exprt Lcatins In Exprt Lcatin, yu can create a new exprt lcatin, view details abut an exprt lcatin, edit a previusly cnfigured exprt lcatin, r delete a previusly cnfigured exprt lcatin. Fr mre infrmatin abut creating r editing an exprt lcatin, refer t Cnfiguring Exprt Lcatins. T view details abut an exprt lcatin, select it frm the list f previusly cnfigured exprt lcatins, then select View Details n the ribbn. Yu will see the previusly cnfigured settings fr this exprt lcatin. Select Edit n the ribbn t change the cnfiguratins fr this exprt lcatin. Fr mre infrmatin abut editing cnfiguratins fr an exprt lcatin, refer t Cnfiguring Exprt Lcatins. T delete an exprt lcatin frm Cmpliance Guardian, select it frm the list f previusly cnfigured exprt lcatins, and then select Delete n the ribbn. A cnfirmatin windw will appear and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected exprt lcatins, r select Cancel t return withut deleting it. Cnfiguring Exprt Lcatins T create a new exprt lcatin, select Create n the ribbn. T mdify a previusly cnfigured exprt lcatin, select the exprt lcatin, and then select Edit n the ribbn. In the Create Exprt Lcatin r Edit Exprt Lcatin interface, cnfigure the fllwing settings: 1. Name and Descriptin Enter a Name fr this exprt lcatin, and then enter an ptinal Descriptin fr this exprt lcatin fr future reference. 2. Path The exprt lcatin can be a file share, strage area netwrk (SAN), r netwrk-attached strage (NAS). Enter the UNC Path in the fllwing frmat: \\admin-pc\c$\data r \\admin-pc\shared flder. *Nte: The path yu specified must already exist. Enter the Username and Passwrd in the crrespnding text bxes, and then select Validatin Test. Cmpliance Guardian will test the path and user infrmatin t make sure they are valid. 3. Select OK t save the cnfiguratins and return t the Exprt Lcatin interface, r select Back t return t the Exprt Lcatin interface withut saving any changes. Filter Plicy Filter Plicy allws yu t set up filter rules s yu can cntrl what bjects and data appear s that yu can target cntent mre precisely. By setting up and saving filter plicies, yu can apply the same filter plicies t different plans withut having t recreate them each time. 138 Cmpliance Guardian Installatin and Administratin User Guide

139 T access Filter Plicy fr Cmpliance Guardian in the Cntrl Panel interface, select Filter Plicy under the Filter Plicy heading. Select Clse n the ribbn t clse the Filter Plicy interface. Managing Filter Plicies In Filter Plicy, yu can create a new filter plicy, view details abut a filter plicy, edit a previusly cnfigured filter plicy, r delete a previusly cnfigured filter plicy. Fr mre infrmatin abut creating a filter plicy, refer t Cnfiguring Filter Plicies. Fr mre infrmatin abut editing cnfiguratins fr filter plicy, refer t Editing Filter Plicies. T view a filter plicy fr Cmpliance Guardian, select it frm the list f previusly cnfigured filter plicies, and then select View Details n the ribbn. T delete a filter plicy fr Cmpliance Guardian, select it frm the list f previusly cnfigured filter plicies, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected filter plicy, r select Cancel t return withut deleting it. *Nte: There are three default filter plicies (Cmmn File Types and Items is used fr Cmpliance Guardian Scanner fr SharePint and Classificatin Scanner fr SharePint; File System Cmmn File Types is used fr Cmpliance Guardian Scanner fr File System and Classificatin Scanner fr File Systems; Cmmn Website Cntent is used fr Cmpliance Guardian Scanner fr Website) cnfigured in advance. The default filter plicies will be selected if n ther filter plicies are cnfigured. Cnfiguring Filter Plicies T create a new filter plicy, select Create n the ribbn. In the Create Filter Plicy interface, cnfigure the fllwing settings: Name Enter a Name fr the filter plicy. Descriptin Enter an ptinal Descriptin fr future reference. Type Select a filter plicy type. There are three kinds f filter plicy types: SharePint, File System, Website, and Lync: SharePint This type f filter plicy is used in Cmpliance Guardian Scanner fr SharePint and Classificatin Scanner fr SharePint. If this type is selected, then select specific bjects r data within each SharePint level (frm site cllectin dwn t attachment). Each level has a unique set f rules that can be applied t enhance cnfiguratins. File System This type f filter plicy is used in Cmpliance Guardian Scanner fr File System and Classificatin Scanner fr File System. If this type is selected, then select the level. Each level has a unique set f rules that can be applied t enhance cnfiguratins. Website This type f filter plicy is used in Cmpliance Guardian Scanner fr Website. Lync This type f filter plicy is used in Cmpliance Guardian Scanner fr Lync. Cmpliance Guardian Installatin and Administratin User Guide 139

140 After selecting the filter plicy type, cnfigure the fllwing settings: a. Select a criterin, and then select Add a Filter Level Grup t add a new rule f the specified level. Select the delete buttn ( ) t delete the rule that is n lnger needed. Rule Select the new rule yu want t create frm the drp-dwn list. Cnditin Select the cnditin fr the rule. Value Enter a value yu want the rule t use in the text bx. *Nte: The File Cntent criterin fr the SharePint type filter plicy and File System type filter plicy is nly fr the HTML file, yu can specify which lines r clumns are excluded in this scan by using the filter plicy. b. T add mre filters t the filter plicy, repeat the previus step. *Nte: Depending n the filters yu enter, yu can change the lgical relatinships between the filter rules. There are currently tw lgical relatinships: And and Or. By default, the lgic is set t And. T change the lgical relatinship, select the lgical relatinship link. The And lgical relatinship means that the cntent which meets all f the rules will be filtered and included in the result. The Or lgic means that the cntent which meets any ne f the rules will be filtered and included in the result. Yu can view the lgical relatinship f the filter rules in the Basic Filter Cnditin area. Fr example, if the lgical relatinship is ((1 And 2) Or 3) in the Basic Filter Cnditin area, the cntents that meet bth the filter rule 1 and filter rule 2, r meet the filter rule 3, will be filtered ut. Select Save t save the cnfiguratins and return t the Filter Plicy interface, r select Cancel t return t the Filter Plicy interface withut saving any changes. Editing Filter Plicies T mdify a previusly cnfigured filter plicy, select the filter plicy, and then select Edit n the ribbn. In the Edit Filter Plicy interface, edit the related settings accrding t yur wn requirement. Fr mre infrmatin abut hw t cnfigure settings fr filter plicies, refer t Cnfiguring Filter Plicies. After finishing editing settings f the selected filter plicy, select Save t save the cnfiguratins and return t the Filter Plicy interface. Alternatively, select Save As and enter a filter plicy name t save it as a new filter plicy. Select Cancel t return t the Filter Plicy interface withut saving any changes. 140 Cmpliance Guardian Installatin and Administratin User Guide

141 Website Scanner Settings Cnfigure the Authenticatin Prfile and the User Agent Prfile fr using Cmpliance Guardian Scanner fr Website. Cnfiguring Authenticatin Prfile An authenticatin prfile is used t cnnect t the website. T cnfigure authenticatin prfiles in the Cntrl Panel interface, select Authenticatin Prfile under the Website Scanner Settings heading. Select Clse n the ribbn t clse the Authenticatin Prfile interface. Managing Authenticatin Prfile In the Authenticatin Prfile interface, yu will see a list f previusly cnfigured Authenticatin prfiles. In the Authenticatin Prfile interface, yu can create a new authenticatin prfile, view details abut an authenticatin prfile, edit a previusly cnfigured authenticatin prfile, r delete a previusly cnfigured authenticatin prfile. Fr mre infrmatin abut creating r editing an authenticatin prfile, refer t Creating and Editing Authenticatin Prfile. Select Edit n the ribbn t change the cnfiguratins fr the selected authenticatin prfile. Fr mre infrmatin abut editing cnfiguratins fr the authenticatin prfile, refer t Creating and Editing Authenticatin Prfile. T view an Authenticatin prfile, select it frm the list f previusly cnfigured prfiles, and then select View Details n the ribbn. T delete an authenticatin prfile, select it frm the list f previusly cnfigured prfiles, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected authenticatin prfile, r select Cancel t return withut deleting it. Creating and Editing Authenticatin Prfile T create a new authenticatin prfile, select Create in the Manage grup f the Authenticatin Prfile page. T mdify an authenticatin prfile, select the authenticatin prfile, and then select Edit n the ribbn. In the Create Authenticatin Prfile r Edit Authenticatin Prfile interface, cnfigure the fllwing settings: Name and Descriptin Enter a name and an ptinal descriptin fr the prfile. Authenticatin Methd Select an authenticatin methd: Username and Passwrd Only r Certificate. Username and Passwrd If this methd is selected, then enter the specified username and passwrd t access the website. Cmpliance Guardian supprts Basic, Digest, NTLM, Negtiatin Authenticatins. Cmpliance Guardian Installatin and Administratin User Guide 141

142 *Nte: If yu cnfigure the authenticatin prfile fr scanning Gmail cntent, yu must select Username and Passwrd Only. Fr details abut creating a plan t scan Gmail cntent, refer t Scanning Gmail. Certificate If this methd is selected, uplad a certificate, and then enter the username and passwrd t access the website. Frm-based Authenticatin This methd is used fr scanning the website that can be lgged in after submitting the frm. Yu are required t enter the fllwing infrmatin after selecting Frm-Based Authenticatin: Lgin URL Enter the frm URL. Username Class r ID Enter the lgin username class r ID. Username Enter the lgin username. Passwrd Class r ID Enter the lgin passwrd class r ID. Passwrd Enter the lgin passwrd. Lgin Buttn Class r ID Enter the lgin buttn class r ID. Select Save t save the cnfiguratins and return t the Authenticatin Prfile interface. At any time, select Cancel t return t the Authenticatin Prfile interface withut saving any changes. Cnfiguring User Agent Prfile A user agent prfile is used fr the backend web server when scanning the website. T cnfigure user agent prfiles in the Cntrl Panel interface, select User Agent Prfile under the Website Scanner Settings heading. Select Clse n the ribbn t clse the User Agent Prfile interface. Managing User Agent Prfile In the User Agent Prfile interface, yu will see a list f previusly cnfigured User Agent prfiles. In the User Agent Prfile interface, yu can create a new user agent prfile, view details abut a user agent prfile, edit a previusly cnfigured user agent prfile, r delete a previusly cnfigured user agent prfile. Fr mre infrmatin abut creating r editing a user agent prfile, refer t Creating and Editing User Agent Prfile. Select Edit n the ribbn t change the cnfiguratins fr the selected user agent prfile. Fr mre infrmatin abut editing cnfiguratins fr the user agent prfile, refer t Creating and Editing User Agent Prfile. T view a user agent prfile, select it frm the list f previusly cnfigured prfiles, and then select View Details n the ribbn. T delete a user agent prfile, select it frm the list f previusly cnfigured prfiles, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected user agent prfile, r select Cancel t return withut deleting it. 142 Cmpliance Guardian Installatin and Administratin User Guide

143 Creating and Editing User Agent Prfile T create a new user agent prfile, select Create in the Manage grup f the User Agent Prfile page. T mdify a previusly cnfigured user agent prfile, select the user agent prfile, and then select Edit n the ribbn. In the Create User Agent Prfile r Edit User Agent Prfile interface, cnfigure the fllwing settings: Name and Descriptin Enter a name and an ptinal descriptin fr the prfile. User Agent String Specify the user agent string. Cmpliance Guardian Installatin and Administratin User Guide 143

144 Cmpliance Manager Cmpliance Manager enables yu t retrieve cmpliance infrmatin abut all f the files in the specified scpe thrugh perfrming Cmpliance Scanner jbs. It displays the scan results thrugh different kinds f Cmpliance Reprts s users can easily view the cmpliance status f the files in the specified scpes. *Nte: Cmpliance Guardian supprts scanning Micrsft Office files that are in a 2003 r earlier frmat using ifilter in this versin. If yu are using an earlier versin f Cmpliance Guardian r if yu updated t Cmpliance Guardian 3 SP 3 frm an earlier versin, yu must dwnlad a cmpatibility pack t scan the Micrsft Office files (can keep the file s accessibility attributes). If yu prefer t scan these files thrugh installing the cmpatibility pack but nt thrugh ifilter, yu can install the pack and then add the fllwing nde under the OfficeFileMapping nde in the cnfiguratin file CntentCmplianceCnfig.xml (yu can find the file under the path \Cmpliance Guardian\Agent\Bin): <NeedCnvert> <Extensin>.xls</Extensin> </NeedCnvert> Figure 14: NeedCnvert nde. The value in the Extensin attribute is the extensin f the file that yu want t scan thrugh the cmpatibility pack. 144 Cmpliance Guardian Installatin and Administratin User Guide

145 Pre-Cnfiguratins Make sure the settings in the fllwing sectins have been cnfigured prir t creating a Cmpliance Scanner plan. Cnfiguring Scan Plicies A scan plicy defines the cmpliance rules t be used when scanning the cntents in the specified scpe. T cnfigure the scan plicies, select Scan Plicy n the ribbn f the Cmpliance Scanner > Create > SharePint/File System/Website page t enter the Scan Plicy interface. Managing Scan Plicies In the Scan Plicy interface, yu will see a list f previusly cnfigured scan plicies. In the Scan Plicy interface, yu can create a new scan plicy, view details abut a scan plicy, edit a previusly cnfigured scan plicy, delete a previusly cnfigured scan plicy, r exprt the check infrmatin fr the test suites included in the selected scan plicy. Fr mre infrmatin abut creating r editing a scan plicy, refer t Creating r Editing Scan Plicies. Select Edit n the ribbn t change the cnfiguratins fr the selected scan plicy. Fr mre infrmatin abut editing cnfiguratins fr the scan plicy, refer t Creating r Editing Scan Plicies. Select Exprt n the ribbn t exprt the check infrmatin fr the test suites in the selected scan plicy. T view a scan plicy, select it frm the list f previusly cnfigured scan plicies, and then select View Details n the ribbn. T delete a scan plicy, select it frm the list f previusly cnfigured scan plicies, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected scan plicy, r select Cancel t return withut deleting it. Creating r Editing Scan Plicies T create a new scan plicy, select Create in the Manage grup f the Scan Plicy page. T mdify a previusly cnfigured scan plicy, select the scan plicy, and then select Edit n the ribbn. In the Create Scan Plicy r Edit Scan Plicy interface, cnfigure the fllwing settings: Name and Descriptin Enter a name fr this scan plicy. Yu can als enter an ptinal descriptin t distinguish this scan plicy frm the thers. Select the Test Suites Specify the test suites that yu want t include in this scan plicy. There are sme predefined test suites in this page, yu can refer t the descriptin f each test suite fr the intrductin f its usage. T add mre desired test suites, select Test Suite Manager in the Settings grup n the ribbn. Fr mre infrmatin n cnfiguring test suites, refer t Test Suite Manager. Cmpliance Guardian Installatin and Administratin User Guide 145

146 After selecting sme test suites, if yu want t clear the selectin status, select the Clear Selectin link and then specify yur desired test suites again. Yu can als perfrm the fllwing actins when selecting the test suites: Srt Select the header rw f each clumn t srt all f the values in the specified clumn accrding t the ascending/descending rder. Search Filter the test suites and display them by the keywrd yu designate; the keywrd must be cntained in a clumn value. At the tp right crner f the test suite viewing pane, enter the keywrd fr the test suites yu want t display. Yu can select t Search all pages r Search current page. Manage clumns ( ) Yu can manage which clumns are displayed in the list s that nly the infrmatin yu want t see will be shwn. Select the manage clumns buttn ( ), then check the checkbx next t the clumn name t have that clumn shwn in the list. Hide the clumn ( ) Hver ver a clumn name, and then select the hide clumn buttn ( ) in the clumn name t hide the clumn. T change the number f test suites displayed per page, select the desired number frm 5, 8, 10, 15 (default value), 20, 25, 50, 100 in the Shw rws drp-dwn menu at the lwer-right crner. T g t the specified page, enter the page number in the G t f text bx at the lwer-right crner and press Enter. T g t the next page, select the > buttn at the lwer-right crner; t return t the previus page, select the < buttn at the lwer-right crner. After yu are satisfied with the cnfiguratin f the scan plicy, select OK t save this scan plicy. If yu d nt want t save the current cnfiguratin, select Cancel t cancel the cnfiguratin. Cnfiguring Filter Plicies Fr mre infrmatin, refer t Filter Plicy. Cnfiguring Database Plicies Fr mre infrmatin, refer t Database Manager. Cnfiguring the Accunt Manager Fr mre infrmatin, refer t 146 Cmpliance Guardian Installatin and Administratin User Guide

147 Accunt Manager. Cnfiguring Cnnectins fr File System A cnnectin is used in the Cmpliance Guardian Scanner File System Mde. Cnfigure a cnnectin with the file system, then the files in the cnnected file system are supprted t be scanned in Cmpliance Guardian. Navigate t Cmpliance Scanner > Create > File System, and select Cnfigure Cnnectin n the ribbn t enter the Cnfigure Cnnectin interface. Managing Cnnectins In the Cnfigure Cnnectin interface, yu will see a list f previusly cnfigured cnnectins. In the Cnfigure Cnnectin interface, yu can create a new cnnectin, view details abut a cnnectin, edit a previusly cnfigured cnnectin, r delete a previusly cnfigured cnnectin. Fr infrmatin abut creating r editing a cnnectin, review Creating and Editing Cnnectins. Select Edit n the ribbn t change the cnfiguratins fr the selected cnnectin. Fr infrmatin abut editing cnfiguratins fr the cnnectin, review Creating and Editing Cnnectins. T view a cnnectin, select it frm the list f previusly cnfigured cnnectins, and then select View Details n the ribbn. T delete a cnnectin, select it frm the list f previusly cnfigured cnnectins, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected cnnectin, r select Cancel t return withut deleting it. Creating and Editing Cnnectins T create a new cnnectin, select Create in the Manage grup n the Cnfigure Cnnectin page. T mdify a previusly cnfigured cnnectin, select the cnnectin, and then select Edit n the ribbn. In the Create Cnnectin r Edit Cnnectin interface, cnfigure the fllwing settings: Name and Descriptin Enter a name fr this cnnectin. Yu can als enter an ptinal descriptin t distinguish this cnnectin frm the thers. Type Select the file system type fr the cnnectin. Cnnectin Cnfigure the fllwing settings: Agent Grup Select the agent grup that will perfrm the Cmpliance Scanner File System jb. UNC Path Specify a path in the frmat \\admin-pc\c$\data r \\admin- PC\shared flder. The files in the specified lcatin are supprted t be scanned. Username Specify a username that can access the specified lcatin. Cmpliance Guardian Installatin and Administratin User Guide 147

148 Passwrd Specify a passwrd. *Nte: The specified user must have the fllwing permissins: If the path is specified in the frmat \\admin-pc\c$\data: The specified user must have the lcal administratr permissin t the cnnected server. If the path is specified in the frmat \\admin-pc\shared flder: The specified user must have the Lg n as a batch jb permissin t the cnnected server, r the user must be the member f the Backup Operatrs grup f the cnnected server. The specified user must have the Read and Change permissins t the shared flder. After yu are satisfied with the cnfiguratin f the cnnectin, select OK t save this cnnectin. If yu d nt want t save the current cnfiguratin, select Cancel t cancel the cnfiguratin. Cnfiguring Cnnectins fr Database A database cnnectin is used in the Cmpliance Guardian Scanner Database Mde. Cnfigure a cnnectin with the database, then the cntent in the cnnected database is supprted t be scanned in Cmpliance Guardian. Navigate t Cmpliance Scanner > Create > Database, and select Cnfigure Database Cnnectin n the ribbn t enter the Cnfigure Database Cnnectin interface. Managing Cnnectins In the Cnfigure Database Cnnectin interface, yu will see a list f previusly cnfigured cnnectins. In the Cnfigure Database Cnnectin interface, yu can create a new cnnectin, view details abut a cnnectin, edit a previusly cnfigured cnnectin, r delete a previusly cnfigured cnnectin. Fr infrmatin abut creating r editing a cnnectin, review Creating and Editing Database Cnnectins. Select Edit n the ribbn t change the cnfiguratins fr the selected cnnectin. Fr infrmatin abut editing cnfiguratins fr the cnnectin, review Creating and Editing Database Cnnectins. T view a cnnectin, select it frm the list f previusly cnfigured cnnectins, and then select View Details n the ribbn. T delete a cnnectin, select it frm the list f previusly cnfigured cnnectins, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected cnnectin, r select Cancel t return withut deleting it. 148 Cmpliance Guardian Installatin and Administratin User Guide

149 Creating and Editing Database Cnnectins T create a new cnnectin, select Create in the Manage grup n the Cnfigure Database Cnnectin page. T mdify a previusly cnfigured cnnectin, select the cnnectin, and then select Edit n the ribbn. In the Create Cnnectin r Edit Cnnectin interface, cnfigure the fllwing settings: Name and Descriptin Enter a name fr this cnnectin. Yu can als enter an ptinal descriptin t distinguish this cnnectin frm the thers. Type Select the database type fr the cnnectin. The fllwings are the Oracle database versins that are supprted scanning in Cmpliance Guardian: Oracle Database 9i Oracle Database 10g Oracle Database 11g Oracle Database 12c The fllwings are the SQL Server versins that are supprted scanning in Cmpliance Guardian: Micrsft SQL Server 2005 Micrsft SQL Server 2008 Micrsft SQL Server 2008 R2 Micrsft SQL Server 2012 Micrsft SQL Server 2012 R2 Micrsft SQL Server 2014 Scanned Database Enter the IP r hst name f the database server, r IP\Instance name. Then, enter the database name in which the data will be scanned. Authenticatin Specify the authenticatin mde, database credentials and an ptinal failver database server fr cnnecting the database. Select the Windws Authenticatin r SQL Authenticatin mde fr the database and specify the database credential fr the selected authenticatin mde. After this, yu can validate the specified accunt by clicking Validatin Test. Windws Authenticatin Use this methd if yu want the user s identity t be cnfirmed by Windws. SQL Authenticatin SQL Server will cnfirm the user s identity accrding t the user s accunt and passwrd. Cmpliance Guardian Installatin and Administratin User Guide 149

150 Failver database server Optinally select this checkbx and specify a failver database server. In the event that the specified database cllapses, the data stred in the database can be transferred t this standby database. Agent Grup Select a prductin Agent grup frm the drp-dwn list t execute the jbs. An Agent grup can utilize multiple Agents fr lading balancing and perfrmance imprvement. After yu are satisfied with the cnfiguratin f the cnnectin, select OK t save this cnnectin. If yu d nt want t save the current cnfiguratin, select Cancel t cancel the cnfiguratin. Cmpliance Scanner Cmpliance Scanner enables yu t perfrm a scan jb using the defined scan plicy and generate the cmpliance scan results f all f the scanned files. The users in the specified Reprt Grup can then view the cmpliance scan results in the Cmpliance Reprt mdule. Refer t the fllwing sectins fr imprtant infrmatin n getting started with Cmpliance Scanner. Launching Cmpliance Scanner T launch Cmpliance Scanner, cmplete the fllwing steps: 1. Lg in t Cmpliance Guardian. If yu are already in the sftware, select the hme page buttn ( ) g t the hme page. Frm the hme page, all f the prducts are displayed. 2. Select Cmpliance Scanner t launch its interface. 3. Alternatively, yu can select Administratin n the tp-left crner, and select the Cmpliance Scanner tab n the appeared navigatin bar t launch Cmpliance Scanner. 150 Cmpliance Guardian Installatin and Administratin User Guide

151 Figure 15: Cmpliance Guardian mdule launch windw. Cmpliance Guardian Installatin and Administratin User Guide 151

152 Hme Page Overview The Cmpliance Scanner hme page displays a list f all f yur previusly created Cmpliance Guardian Scanner plans. Yu can als select Create t select the Cmpliance Guardian Mde: SharePint, File System, Website, r Database and then create a plan. Figure 16: Cmpliance Scanner hme page. Selecting Mde Select Create n the ribbn. A drp-dwn list appears. Select the crrespnding mde frm the drpdwn list: SharePint, File System, Lync, Website, r Database. Then yu can enter the crrespnding mde, and cnfigure a plan t scan bjects in SharePint, a file system, r a website. Managing Cmpliance Guardian Scanner Plans The Cmpliance Scanner hme page displays a list f all f yur previusly created Cmpliance Guardian Scanner plans. Als it displays the scan plicy that is selected in the plan. Yu can als see the plan type in the Scpe Type clumn. Yu may perfrm any f the fllwing actins n a selected plan: 152 Cmpliance Guardian Installatin and Administratin User Guide

153 View Details Select View Details n the ribbn t see the details f the selected plan. Here yu can als select Edit n the ribbn t make changes t the plan s settings. Yu will be brught t the Edit page where yu can change the settings fr this plan. After editing the settings, select Save n the ribbn t save the plan. T save a changed plan as a new ne, select Save As n the ribbn. At any time, select Cancel n the ribbn t return t the Plan Manager withut saving any f yur changes. Edit Select Edit n the ribbn t make changes t the selected plan s settings. Yu will be brught t the Edit page where yu can change the settings fr this plan. Select Save n the ribbn t save the plan. T save a changed plan as a new ne, select Save As n the ribbn. At any time, select Cancel n the ribbn t return t the Plan Manager withut saving any f yur changes. *Nte: If yu change the scan plicy when editing a Cmpliance Scanner plan, r change the database plicy when editing a Cmpliance Scanner plan, after yu save the changes, the next time the plan will mandatrily run a full jb althugh yu select t run an incremental jb, thus t guarantee that the jb can perfrm crrectly, as well as guarantee the jb data is generated crrectly. Delete Select Delete n the ribbn t delete the selected plan. A warning message will appear t cnfirm the deletin. Select OK t delete the selected plan, r select Cancel t return t Plan Manager withut deleting the selected plan. Run Nw Select Run Nw n the ribbn t execute the plan immediately. After yu select Run Nw, a pp-up windw appears, yu can select t run a full jb r an incremental jb. If Incremental Scan is selected, the Reference Time ptin is enabled. Reference Time Chse whether t scan cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Mnth(s), Day(s), Hur(s), r Minute(s) frm the drp-dwn list. *Nte: It is recmmended that yu specify a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. Yu can see the review details abut the plan s executin in Jb Mnitr. Cmpliance Guardian Scanner fr SharePint The SharePint Mde allws yu t define a SharePint scpe and then perfrm a scan jb using the defined scan plicy t generate the cmpliance scan results f all f the files within that SharePint scpe. The users in the specified Reprt Grup can then view the cmpliance scan results in the Cmpliance Reprt mdule. *Nte: The psts and replies in SharePint 2013 Newsfeed and the ntes in Nte Bard in SharePint are als supprted t be scanned. Cmpliance Guardian Installatin and Administratin User Guide 153

154 Launching Cmpliance Guardian Scanner SharePint Mde On the Cmpliance Guardian Scanner Hme interface, select Create n the ribbn, a drp-dwn list appears. Select SharePint frm the drp-dwn list, and yu will be brught t the Cmpliance Guardian Scanner SharePint Mde. Selecting the Scan Scpe After launching the Cmpliance Scanner SharePint mde, the Scpe panel n the left f the screen displays the rt nde f the farm. T select the scan scpe, cmplete the fllwing steps: 1. Select the farm nde t expand the tree. The tree can be laded dwn t the list level. 2. Select the scpe where yu want t perfrm the scan jb n the tree. Scanning User Prfiles Cmpliance Guardian supprts scanning user prperties and scial ntes in user prfiles. Cmpliance Guardian accesses the user prfiles thrugh the persnal site. Select the related persnal site nde in the farm tree t scan user prperties in the crrespnding user prfile. Hwever, if the persnal site is nt created, yu cannt scan the crrespnding user prfile since there is n persnal site nde in the tree. Cmpliance Guardian Cmpliance Scanner prvides a methd t scan the user prfile when the persnal site is nt created. The User Prfile Services nde is laded n the farm tree by changing the UserPrfile Used="false" (change the value false t true) nde in the CmplianceSetting.cnfig file. Refer t Cnfiguring t Scan User Prfiles fr details, and then select the crrespnding User Prfile Service nde, and cnfigure the related plan settings t scan the user prperties and ntes. 154 Cmpliance Guardian Installatin and Administratin User Guide

155 Figure 17: User Prfile Service nde in Cmpliance Scanner. Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr SharePint Use the Plan Builder t set up a Cmpliance Scanner plan. T use Plan Builder, cmplete the fllwing steps: 1. After selecting the scpe fr the cmpliance scan, select Plan Builder n the ribbn f Cmpliance Scanner page. 2. Frm the drp-dwn menu, select Wizard Mde fr step-by-step guidance during cnfiguratin, r select Frm Mde (recmmended fr advanced users nly) t set up a plan quickly. Refer t the fllwing sectin that is applicable t yur chice fr infrmatin abut perfrming a Cmpliance Scanner plan. Perfrming a Cmpliance Scanner Plan in Wizard Mde Wizard Mde prvides yu with step-by-step guidance n hw t cnfigure a new plan. T cnfigure a plan using Wizard Mde, cmplete the fllwing steps: *Nte: An asterisk (*) in the user interface indicates a mandatry field r step. 1. Enter a Plan Name and an ptinal Descriptin if desired. Select Next. The Reprt Settings page appears. Cmpliance Guardian Installatin and Administratin User Guide 155

156 2. Cnfigure the reprt settings: Database Plicy Select a database plicy frm the drp-dwn list t stre the result data f the Cmpliance Scanner jb. If yu want t set up a new database plicy, select the New Database Plicy link in the drp-dwn list. Refer t Cnfiguring Database Plicy fr mre infrmatin. Reprt Grup Select a Cmpliance Guardian grup frm the drp-dwn list. Once a grup is specified as the Reprt Grup, all f the users in the specified grup will be able t view and dwnlad the reprts in the Cmpliance Reprt mdule. Multiple grups can be specified here; chse Select All t select all f the listed grups. Select Next. The Scan Settings page appears. 3. Cnfigure the scan settings: Scan Plicy Select a scan plicy frm the drp-dwn list and it will be used t scan the cntents in the specified scpe. Only ne scan plicy can be selected here. Cntent Optin Specify the cntents that will be scanned within the specified scpe. Include user cntent This checkbx is selected by default, and nly the dcuments and items that are created by the end users will be scanned in the specified scpe. Include system cntent Select this checkbx t als scan the system built-in cntents in the specified scpe. Scan File/Item Versins Specify the methd f scanning file/item versins: Scan the current versin Only the current versins f the files/items defined in the jb scpe are supprted t be scanned. Scan all versins The files/items and all their previus versins defined in the jb scpe are supprted t be scanned. If this ptin is selected, the scan result f each file/item versin will be reprted in the Cmpliance Guardian reprt separately. Filter Plicy Specify a filter plicy t filter the cntents that will be scanned. By default, the default filter plicy is used, and all f the types f dcuments/items supprted by Cmpliance Guardian are included in this default filter plicy. If yu want t set up a new filter plicy, select the New Filter Plicy link in the drp-dwn list. Refer t Cnfiguring Filter Plicies fr mre infrmatin. Alert Specify whether t send ut an alert when an unsupprted type f embedded file is fund. An embedded file is ne file that is inserted t anther file. If the type f the embedded file is supprted by Cmpliance Scanner, it can be scanned as usual. Hwever, if the type f the embedded file is nt supprted by Cmpliance Scanner, it cannt be scanned. If yu chse t send ut alert s when unsupprted embedded files are fund, cnfigure the recipients by selecting the crrespnding checkbxes. Yu must select a 156 Cmpliance Guardian Installatin and Administratin User Guide

157 default template befre select the recipients. Select the New Ntificatin Template link t create a new template. Creatr template Select this checkbx t send an alert t the creatr f the specified file where unsupprted embedded files are fund. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. Mdifier template Select this checkbx t send an alert t the last mdifier f the specified file where unsupprted embedded files are fund. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. User in the selected ntificatin prfile Select this checkbx t send an alert t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the appeared drp-dwn list. Yu can als select the New Ntificatin Prfile link t create a new ntificatin prfile. Fr mre infrmatin, refer t User Ntificatin Settings. *Nte: Even thugh there may be mre than ne embedded file in ne file, the alert e- mail will nly be sent when the first unsupprted embedded file is fund. The rest f the cntent in the file where the embedded file resides will be skipped and will nt be scanned. After cnfiguring the recipients, chse ne template frm the template drpdwn list; yu can als select the New template link t create a new template. Fr mre infrmatin, refer t Cnfiguring Templates. Select Next. The Schedule page appears. 4. Cnfigure the schedule settings: N schedule Select this ptin t run the plan immediately and save the plan in Plan Manager. Cnfigure the schedule myself Select this ptin t cnfigure a custmized schedule, and run the Cmpliance Scanner jb by schedule. Select Add Schedule t set up a schedule. The Add Schedule windw appears. In the Optins sectin, select a scan type frm the drp-dwn list. Fr mre infrmatin, refer t Scan Schedule. Select Next. The Advanced page appears. 5. Cnfigure the advanced settings: Agent Grup Select the agent grup that will perfrm the Cmpliance Scanner jb. Ntificatin Cnfigure the ntificatin settings. Cmpliance Guardian Installatin and Administratin User Guide 157

158 Scan Result Select this checkbx t cnfigure t send an t the specified users. The cntains the scan result including the failed files and/r passed files. Scpe Level Select a scpe level. The scan result will be reprted based n each level in the . Reprt Level Select t have the failed files and passed files included in the . Receiver Cnfigure the receiver. Select Address, and then select Add a Ntificatin Address. Enter the address t which the will be sent, and select a crrespnding template; Select SharePint Grup, and then select Add a SharePint Grup. Enter the SharePint grup whse users will receive the , and then enter the crrespnding template. Nte that the SharePint grup must exist in the selected SharePint scpe. Select Add a Ntificatin Address r Add a SharePint Grup again t add mre addresses r grups. Select the delete ( an address r grup. ) buttn t delete Jb Reprt Select this checkbx t cnfigure t send an with the jb infrmatin. Then, Select a previusly-cnfigured ntificatin prfile frm the Select a prfile with address nly drp-dwn list, r chse t create a new e- mail ntificatin prfile by selecting the New Ntificatin Prfile link. Select View t view the detailed cnfiguratin f the selected ntificatin prfile. Fr mre infrmatin n cnfiguring the ntificatin prfiles, refer t Cnfiguring Receive Settings. User Prfiles Filter This ptin appears nly when yu select the User Prfile Service nde in the tree. Cnfigure this ptin if yu want t filter the user prfiles. Select dwnlad a template t dwnlad the template file which is used fr filtering user prfiles. Edit the file accrding t yur wn requirement and then select Uplad t uplad the cnfigured file. Refer t Editing Template File fr Filtering User Prfiles fr details abut editing the template file. Select Next. The Overview page appears. 6. Review and edit the plan cnfiguratins. T make changes, select the Edit buttn next t the name f the each cnfiguratin field t jump t the crrespnding setting page and edit the cnfiguratin. 7. Once yu are satisfied with the plan settings, chse ne finishing ptin at the lwer-right sectin f the screen. Select Finish t save the cnfiguratin f the plan withut running it r Finish and Run Nw t save the cnfiguratin and then run the saved plan immediately. Scan Schedule Cnfigure the fllwing settings t build a new Cmpliance Scanner schedule in the Add Schedule ppup windw: 158 Cmpliance Guardian Installatin and Administratin User Guide

159 Optins Select a scan type frm the drp-dwn list. Full Scan Run a full scan f all f the dcuments and items in the specified scpe. Unlike incremental scan, all full scans are independent f ne anther and d nt have any dependencies n the ther s scan results. Hwever, because each f the full scans is cmprehensive, full scan jbs take the lngest t cmplete f the tw available ptins. Incremental Scan Run a fractinal scan. It scans nly the updated dcuments and items since the last successful full scan r incremental scan. This kind f scan requires less strage than a full scan and it reduces the executin time f the scan jb. Hwever, it is imprtant t nte that fr each incremental scan, the latest full scan jb in the full scan cycle must be available. If the incremental scan is based n a frmer incremental scan jb, the frmer incremental scan must als be available. If selecting Incremental Scan, the Reference Time ptin is available fr cnfiguratin. Reference Time Chse whether t scan cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Minute(s), Hur(s), Day(s), r Mnth(s) frm the drp-dwn list. *Nte: It is recmmended that yu specify a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. Schedule Settings Set up the frequency fr the scheduled Cmpliance Scanner jb. Select ne time unit frm Minute(s), Hur(s), Day(s), Week(s), and Mnth(s), and then enter an integer int the text bx. The scheduled Cmpliance Scanner jb will be run accrding t the interval cnfigured here. Range f Recurrence Select the start time and end time fr the schedule. Start time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. *Nte: The start time cannt be earlier than the current time. N end date Select this ptin t repeat running the plan until being stpped manually. End after specified ccurrence(s) Select this ptin t stp the plan autmatically after the specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f scheduled Cmpliance Scanner plans. Cmpliance Guardian Installatin and Administratin User Guide 159

160 Perfrming a Cmpliance Scanner Plan in Frm Mde Frm Mde is recmmended fr users wh are familiar with building Cmpliance Scanner plans. T build a Cmpliance Scanner plan in Frm Mde, select the scan scpe, and then select Plan Builder > Frm Mde. Refer t Perfrming a Cmpliance Scanner Plan in Wizard Mde fr detailed infrmatin regarding each ptin. *Nte: If this is yur first time building a plan, r if yu think yu wuld benefit frm descriptins f each plan cmpnent, it is recmmended that yu use the Wizard Mde. Editing Template File fr Filtering User Prfiles The fllwing is the template file used fr filtering the user prfiles. Figure 18: Filtering user prfiles template file. T edit the template file, cmplete the fllwing steps: Open the template file using Ntepad. Edit r bth f the fllwing ndes as necessary: Edit the value f the <includelist> nde. Specify the username in the frmat dmain\username. The related user prfile will be scanned. Yu can enter multiple usernames, use the semicln (;) as the separatr. Edit the value f the <excludelist> nde. Specify the username in the frmat dmain\username. The related user prfile will be scanned. Yu can enter multiple usernames, use the semicln (;) as the separatr. Save the file. Cmpliance Guardian Scanner fr File System The File System Mde allws yu t cnfigure a cnnectin with a lcatin and then perfrm a scan jb using the defined scan plicy t generate the cmpliance scan results f all f the files within that specified lcatin. The users in the specified Reprt Grup can then view the cmpliance scan results in the Cmpliance Reprt mdule. 160 Cmpliance Guardian Installatin and Administratin User Guide

161 Launching Cmpliance Guardian Scanner File System Mde On the Cmpliance Guardian Scanner Hme interface, select Create n the ribbn. A drp-dwn list appears. Select File System frm the drp-dwn list, and yu will be brught t the Cmpliance Guardian Scanner File System Mde. Selecting the Scan Scpe After launching the Cmpliance Scanner File System mde, the Scpe panel n the left f the screen displays all f the pre-cnfigured cnnectins. Select ne r mre cnnectins. The files in the cnnected lcatins will be scanned. Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr File System Use the Plan Builder t set up a Cmpliance Scanner plan. T use Plan Builder, cmplete the fllwing steps: 1. After selecting the cnnectins fr the cmpliance scan, select Plan Builder n the ribbn f Cmpliance Scanner page. 2. Frm the drp-dwn menu, select Wizard Mde fr step-by-step guidance during cnfiguratin, r select Frm Mde (recmmended fr advanced users nly) t set up a plan quickly. Refer t the sectin belw that is applicable t yur chice fr infrmatin abut perfrming a Cmpliance Scanner plan. Perfrming a Cmpliance Scanner Plan in Wizard Mde Wizard Mde prvides yu with step-by-step guidance n hw t cnfigure a new plan. T cnfigure a plan using Wizard Mde, cmplete the fllwing steps: *Nte: An asterisk (*) in the user interface indicates a mandatry field r step. 1. Enter a Plan Name and an ptinal Descriptin if desired. Select Next. The Reprt Settings page appears. 2. Cnfigure the reprt settings: Database Plicy Select a database plicy frm the drp-dwn list t stre the result data f the Cmpliance Scanner jb. If yu want t set up a new database plicy, select the New Database Plicy link in the drp-dwn list. Refer t Cnfiguring Database Plicy fr mre infrmatin. Reprt Grup Select a Cmpliance Guardian grup frm the drp-dwn list. Once a grup is specified as the Reprt Grup, all f the users in the specified grup will be able t view and dwnlad the reprts in the Cmpliance Reprt mdule. Multiple grups can be specified here; chse Select All t select all f the listed grups. Cmpliance Guardian Installatin and Administratin User Guide 161

162 162 Select Next. The Scan Settings page appears. 3. Cnfigure the scan files settings: Scan Plicy Select a scan plicy frm the drp-dwn list and it will be used t scan the cntents in the specified scpe. Only ne scan plicy can be selected here. Scan Hidden Files Optin Select whether r nt t scan the hidden files in the specified file system. Filter Plicy Specify a filter plicy t filter the cntents that will be scanned. By default, the default filter plicy is used, and all f the types f dcuments/items supprted by Cmpliance Guardian are included in this default filter plicy. If yu want t set up a new filter plicy, select the New Filter Plicy link in the drp-dwn list. Refer t Cnfiguring Filter Plicies fr mre infrmatin. Alert If yu want Cmpliance Guardian t send an when an errr ccurs during the file scan, then select an prfile t specify the users wh will receive the e- mail, and select an template. Yu can als select the New Template link t create a new template. Refer t Cnfiguring Templates fr mre infrmatin. *Nte: Even thugh there may be mre than ne errr when scanning a file, the alert e- mail will nly be sent when the first errr ccurs. Select Next. The Schedule page appears. 4. Cnfigure the schedule settings: N schedule Select this ptin t run the plan immediately and save the plan in Plan Manager. Cnfigure the schedule myself Select this ptin t cnfigure a custmized schedule, and run the Cmpliance Scanner jb by schedule. Select Add Schedule t set up a schedule. The Add Schedule windw appears. In the Optins sectin, select a scan type frm the drp-dwn list. Fr mre infrmatin, review t Scan Schedule. Select Next. The Advanced page appears. 5. Cnfigure the advanced settings: Ntificatin Cnfigure the ntificatin settings. Select a previusly-cnfigured ntificatin prfile frm the Select a prfile with address nly drp-dwn list, r chse t create a new ntificatin prfile by selecting the New Ntificatin Prfile link. Select View t view the detailed cnfiguratin f the selected ntificatin prfile. Fr mre infrmatin n cnfiguring the ntificatin prfiles, refer t Cnfiguring Receive Settings. Select Next. The Overview page appears. 6. Review and edit the plan cnfiguratins. T make changes, select the Edit buttn next t the name f the each cnfiguratin field t jump t the crrespnding setting page and edit the cnfiguratin. Cmpliance Guardian Installatin and Administratin User Guide

163 7. Once yu are satisfied with the plan settings, chse ne finishing ptin at the lwer-right sectin f the screen. Select Finish t save the cnfiguratin f the plan withut running it r Finish and Run Nw t save the cnfiguratin and then run the saved plan immediately. Scan Schedule Cnfigure the fllwing settings t build a new Cmpliance Scanner schedule in the Add Schedule ppup windw. Optins Select a scan type frm the drp-dwn list. Full Scan Run a full scan f all f the dcuments and items in the specified scpe. Unlike incremental scan, all full scans are independent f ne anther and d nt have any dependencies n the ther s scan results. Hwever, because each f the full scans is cmprehensive, full scan jbs take the lngest t cmplete f the tw available ptins. Incremental Scan Run a fractinal scan. It scans nly the updated dcuments and items since the last successful full scan r incremental scan. This kind f scan requires less strage than a full scan and it reduces the executin time f the scan jb. Hwever, it is imprtant t nte that fr each incremental scan, the latest full scan jb in the full scan cycle must be available. If the incremental scan is based n a frmer incremental scan jb, the frmer incremental scan must als be available. If selecting Incremental Scan, the Reference Time ptin is available fr cnfiguratin. Reference Time Chse whether t scan cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Minute(s), Hur(s), Day(s), r Mnth(s) frm the drp-dwn list. *Nte: It is recmmended that yu specify a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. Schedule Settings Set up the frequency fr the scheduled Cmpliance Scanner jb. Select ne time unit frm Minute(s), Hur(s), Day(s), Week(s), and Mnth(s), and then enter an integer int the text bx. The scheduled Cmpliance Scanner jb will be run accrding t the interval cnfigured here. Range f Recurrence Select the start time and end time fr the schedule. Start time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. *Nte: The start time cannt be earlier than the current time. Cmpliance Guardian Installatin and Administratin User Guide 163

164 N end date Select this ptin t repeat running the plan until being stpped manually. End after specified ccurrence(s) Select this ptin t stp the plan autmatically after the specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f scheduled Cmpliance Scanner plans. Perfrming a Cmpliance Scanner Plan in Frm Mde Frm Mde is recmmended fr users wh are familiar with building Cmpliance Scanner plans. T build a Cmpliance Scanner plan in Frm Mde, select the scan scpe, and then select Plan Builder > Frm Mde. Refer t Perfrming a Cmpliance Scanner Plan in Wizard Mde fr detailed infrmatin regarding each ptin. *Nte: If this is yur first time building a plan, r if yu think yu wuld benefit frm descriptins f each plan cmpnent, it is recmmended that yu use the Wizard Mde. Cmpliance Guardian Scanner fr Website The Website Mde allws yu t perfrm a scan jb using the defined scan plicy t generate the cmpliance scan results f all f the scanned websites. The users in the specified Reprt Grup can then view the cmpliance scan results in the Cmpliance Reprt mdule. Launching Cmpliance Guardian Scanner in Website Mde On the Cmpliance Guardian Scanner Hme interface, select Create n the ribbn, and a drp-dwn list appears. Select Website frm the drp-dwn list, and yu will be brught t the Cmpliance Guardian Scanner Website Create Plan interface. Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr Website In the Create Plan interface, cnfigure the fllwing settings fr creating a Cmpliance Guardian Website Scanner plan. In the What d yu want t scan? field: Start Frm Enter a URL, Cmpliance Guardian will scan the bjects frm this URL. Optinally, yu can select t use the Cmpliance Guardian Transactin Capture tl t save a transactin file, and select the Use Cmpliance Guardian Transactin Capture. Exprt the fllwing transactin file fr the scan radi buttn in this interface t imprt a transactin file, then the recrded URLs in the transactin file will be the start URLs. Fr mre infrmatin n the Cmpliance Guardian Transactin Capture tl, refer t Using Cmpliance Guardian Transactin Capture. 164 Cmpliance Guardian Installatin and Administratin User Guide

165 Maximum Depth It s used t specify the depth level needed t crawl. Fr example: If yu enter 1, Cmpliance Guardian will nly crawl the start URL specified and scan the bjects in the URL. If yu enter 3, Cmpliance Guardian will crawl the start URL specified, the linked pages n the start URL page, and the linked pages frm the pages ne level deeper. If yu want t scan all the pages f an entire website, yu can enter 0. Maximum Pages Specify the maximum pages allwed t crawl in a single jb. -1 means unlimited. If yu enter 100, Cmpliance Guardian will stp the jb after it scans 100 pages in the website. Filter Plicy Specify a defined filter plicy t limit the scpe f the scan jb. Filter plicies are defined in Cntrl Panel. *Nte: The filter plicy still takes effect n scanning the recrded results in the transactin file. Fllw Rbt Exclusin Prtcl Select whether r nt t fllw Rbt Exclusin Prtcl. By default, the checkbx is selected, which means that Cmpliance Guardian will nt crawl any link that is frbidden t access in Rbt.txt. Allw crawling redirectins--maximum Redirectins allwed [] Select whether r nt t allw crawling redirectins. If yu want t allw crawling redirectins, specify the maximum redirectins allwed fr ne page. By default, the checkbx is selected, and the default maximum allwed redirectins are 10. In the What plicy d yu want t use fr scanning this website? field: Select a Predefined Scan Plicy Specify a scan plicy fr scanning the defined site. Select View beside the drp-dwn list t view details f the scan plicy, r select New Scan Plicy frm the drp-dwn list. Fr infrmatin n creating a scan plicy, refer t Creating r Editing Scan Plicies. In the Hw d yu want t scan this website? field: User Agent Select the saved user agent prfile t specify the user agent fr the backend web server when scanning the website. A pre-defined user agent prfile can be used directly. Select New User Agent t create a new user agent prfile. Authenticatin Methd Select the Authenticatin Prfile used t cnnect t the website. Maximum Cncurrent Threads Allw user t specify the maximum cncurrent threads that can be used during the crawling jb fr the scan. If yu select Breadth-first in Crawl Mde, the default value f Maximum Cncurrent Threads is 2; if yu select Depth-first in Crawl Mde, the default value f Maximum Cncurrent Threads is 1. Time Out f One Scan Specify the maximum time f ne entire scan jb. The default value is 24 hurs. Time Out f Link Specify the maximum time f waiting fr a respnse frm a link befre skipping it during a crawl. The default value is 100 secnds. Cmpliance Guardian Installatin and Administratin User Guide 165

166 *Nte: By default, the crawl mde is Depth First. If yu want t change the crawl mde, yu can g t the machines with Cmpliance Guardian Manager installed and pen the \Cmpliance Guardian\Manager\Cntrl\Cnfig directry t find the CmplianceSetting.cnfig file. In the cnfiguratin file, find the DepthFirst="true" nde. True means Depth First (scans child ndes frm the current nde first). False means Breadth First (scans sibling ndes frm the current nde, and the scan will nly cntinue t a lwer level after the scan finishes n all the pages f ne level). Enable headless brwser Select whether r nt t crawl the data that are laded dynamically using JavaScript. If yu select Yes, then specify the delayed time t wait fr lading data in a webpage. In the Where d yu want t utput the reprt data and wh d yu want t share the reprts with? field: Select a Predefined Database Plicy Select a database plicy t stre the scan jb data. Database plicy als includes the retentin settings fr the scan data. Reprt Grup Select a Cmpliance Guardian reprt grup frm the drp-dwn list. Once a grup is specified as the Reprt Grup, all f the users in the specified grup will be able t view and dwnlad the reprts in the Cmpliance Reprt mdule. Multiple grups can be specified here; chse Select All t select all f the listed grups. In the Hw d yu want t execute the scan? field: Set a start time and/r intervals t return the scan autmatically Optinally, select this checkbx and then chse a scheduling ptin: N schedule Select this ptin t cnfigure the jb t nt run n a schedule (the jb must be manually initiated). Cnfigure the schedule myself Cnfigure a custmized schedule, and run the plan by schedule. Select Add Schedule and the Add Schedule windw pps up. Cnfigure the fllwing settings fr the schedule: Optins Select the type f the scan fr this plan: Full Scan r Incremental Scan. Full Scan scans all f the cntent in the scpe defined in the plan, while Incremental Scan nly scans the cntent that has been mdified since the last incremental r full scan jb. If selecting Incremental Scan, the Reference Time ptin is enabled. Reference Time Chse whether t scan cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Minute(s), Hur(s), r Day(s) frm the drp-dwn list. 166 Cmpliance Guardian Installatin and Administratin User Guide

167 *Nte: It is recmmended specifying a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. Schedule Settings Specify the frequency t run the rerunning schedule. Enter an integer int the text bx and select Minute(s), Hur(s), Day(s), Week(s), r Mnth(s) frm the drp-dwn list. Range f Recurrence Specify when t start and end the running recurring schedule. Start time Set up the time t start the plan and Time Zne can be changed under the Start time. *Nte: The start time cannt be earlier than the current time. N end date Select this ptin t repeat running the plan until being stpped manually. End after specified ccurrence(s) Select this ptin t stp the plan after specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f plans. Select OK t save the settings. After cnfiguring the schedule fr this replicatin jb, select Calendar View t view the jb in a calendar view. Select an agent grup t s that the system will pick a free agent t execute the scan jb Select an agent grup, r select New Agent Grup t create an agent grup. In the What d yu want t name the plan and d yu want t be ntified by ? field: Scanning Gmail Plan Name Enter a name fr the plan. Descriptin Enter an ptinal descriptin fr this plan. Then select whether r nt t receive the jb reprt after a scan jb finishes. If yu want t receive the jb reprt, select the checkbx befre me the jb reprt and scan results, and then select a ntificatin prfile. Select New Ntificatin Prfile t create t new ntificatin prfile. Cmpliance Guardian supprts scanning the cntent in Gmail thrugh Cmpliance Guardian Scanner fr Website. Yu must cnfigure the fllwing settings fr creating a plan t scan the cntent in Gmail: Start Frm Enter the fllwing URLs t scan the cntent in Gmail. Cmpliance Guardian Installatin and Administratin User Guide 167

168 Enter this URL t scan all f the e- mail cntent in Gmail. Enter this URL t scan all f the sent cntent in Gmail. Enter this URL t scan all f the cntent in Inbx f Gmail. Enter this URL t scan all f the drafts in Gmail. Enter this URL t scan all f the junk s in Gmail. Enter this URL t scan all f the deleted s in Gmail. Scan Plicy Specify a scan plicy fr scanning the defined URL. Select View beside the drp-dwn list t view details f the scan plicy, r select New Scan Plicy frm the drp-dwn list. The fllwing type f checks are nt supprted fr scanning Gmail: LinkValidatin FilePrperty FindFile Ckie SSL Maximum Pages Specify the maximum numbers allwed t crawl in a single jb. -1 means unlimited. If yu enter 100, Cmpliance Guardian will stp the jb after it scans 100 s and the related index pages. User Agent Select the saved user agent prfile t specify the user agent fr the backend web server when scanning Gmail cntent. Cmpliance Guardian recmmends yu t use the default user agent prfile Cmpliance Scanner fr Website. Enable headless brwser Yu must select the Yes radi buttn t scan Gmail cntent. Fr ther settings in creating a plan, refer t Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr Website fr mre details. Select Save t save the plan, select Save and Run Nw t run the plan immediately, r yu can select Cancel t exit the Create Plan interface withut any changes. 168 Cmpliance Guardian Installatin and Administratin User Guide

169 Cmpliance Guardian Scanner fr Lync The Lync Mde allws yu t cnfigure an archiving plan that is used t archive the Lync cntent frm a Lync server. Yu can then scan that cntent using a defined scan plicy. The feature als allws yu t search the archived cntent. Launching Cmpliance Guardian Scanner Lync Mde Frm the Cmpliance Guardian Scanner interface, select Create n the ribbn. Select Lync frm the drp-dwn list. Yu will be redirected t the Cmpliance Guardian Scanner Lync Mde. Cnfiguring Archiving Plans In the Cmpliance Guardian Scanner Lync mde r in the Cmpliance Guardian Scanner hme page, select Cnfigure Archiving n the ribbn, the Cnfigure Archiving interface appears. Yu can perfrm the fllwing actins t the plan: Create Create a new archiving plan. Fr detailed infrmatin n creating a plan, refer t Creating and Editing an Archiving Plan. View Details View detailed settings f the selected archiving plan. Edit Edit the settings f the selected archiving plan. Fr detailed infrmatin n editing a plan, refer t Creating and Editing an Archiving Plan. Delete Delete the selected archiving plans. Enable Enable the selected archiving plans. Disable Disable the selected archiving plans. Run Nw Run the selected archiving plans immediately. Yu can select Jb Mnitr n the ribbn t view the jb details. Select Jb Mnitr t view the jb infrmatin. Select Clse t clse the interface. Creating and Editing an Archiving Plan Refer t the fllwing steps t create r edit an archiving plan: Select Create > Lync in the Manage grup n the Cnfigure Archiving interface. T mdify an existing plan, select the plan, and then select Edit n the ribbn. In the Create r Edit interface, select the Lync server in the left pane. Then expand the Lync server t the pl nde. Select a pl yu want t archive. Cnfigure the fllwing settings in the right pane: Plan Name Enter a Plan Name and an ptinal Descriptin. Cmpliance Guardian Installatin and Administratin User Guide 169

170 Archiving Data Strage Select the exprt lcatin t stre the archived file with the archived Lync cntent. Yu can select the Enable Archived Data Retentin checkbx and then enter a number and select a unit in Keep the latest _ Mnths/Weeks/Days archived data t define the range in which the archived data will be kept. Then select an archiving database t stre the archived data recrds used t lcate the data under the exprt lcatin. Full Text Index Select the checkbx t enable full text index fr users searching the Lync cntent. Search Grup Select a Cmpliance Guardian grup frm the drp-dwn list. Once a grup is designated as the Search Grup, all f the users in the grup will be able t use the Search functin t search the desired archived cntent. Multiple grups can be used here; chse Select All t select all f the listed grups. *Nte: Users wh are nt part f the search grup cannt search archived cntent. Select Advanced t cnfigure the advanced settings: Ntificatin Select a ntificatin prfile frm the Select a prfile with address nly drp-dwn list, r chse t create a new ntificatin prfile by selecting the New Ntificatin Prfile link. Select View t view the detailed cnfiguratin f the selected ntificatin prfile. Agent Grup Select the agent grup that will perfrm the jb. Security Prfile Select a security prfile fr encrypting the archived cntent. Select New Security Prfile t create a new security prfile. Fr mre infrmatin, refer t Security Prfile. Data Cmpressin Select the checkbx t enable data cmpressin, then chse a cmpressin level using the slider. A lw cmpressin level results in a faster cmpressin rate but a larger data set, while a high cmpressin level results in a slwer cmpressin rate but a smaller, better quality data set. Schedule Cnfigure a schedule. N schedule Select this ptin t cnfigure the jb and run manually. Cnfigure the schedule myself Select this ptin t cnfigure a custmized schedule. Select Add Schedule t set up a schedule. The Add Schedule windw appears. In the Optins sectin, select a scan type frm the drp-dwn list. Fr mre infrmatin, refer t Scan Schedule. Select Save t save the archiving plan; select Save and Run Nw t save the plan and run immediately; select Cancel t exit the interface withut saving any changes. If yu edit a plan, select Save As t save the updated plan. Searching Lync Cntent Cmpliance Guardian allws yu t scan Lync cntent archived in the archiving plans. 170 Cmpliance Guardian Installatin and Administratin User Guide

171 Select the Search buttn n the ribbn f the Cmpliance Scanner hme page t g t the Search interface. Refer t the fllwing steps t search the Lync cntent: Select the archiving plans yu want t search in the left pane. Enter the keywrd in the search bx f the right pane, and then select Search. Yu can als use the Advanced search by selecting Advanced. The Cnfigure Advanced Search Settings windw appears. Select Add a Criterin t add a new rule f the selected categry level. Cnfigure the fllwing fields fr the rule: Rule Select the new rule yu want t create frm the drp-dwn list. Cnditin Select the cnditin fr the rule. Value Specify a value yu want the rule t use in the text bx. Select the delete ( ) buttn t delete a rule that is n lnger needed. The filter rule cntains the fllwing rule levels: Initiatr Filter accrding t the initiatr f the Lync cnversatin. If yu select Initiatr as the rule, after yu select the value link, a windw appears. Yu can add criterin t specify a rule, cnditin, and value t filter the desired users. Then, select Save t save yur cnfiguratin. Participants Filter accrding t the participants f the Lync cnversatin. If yu select Participants as the rule, after yu select the value link, a windw appears. Yu can add criterin t specify a rule, cnditin and value t filter the desired users. Then, select Save t save yur cnfiguratin. Subject Filter accrding t the subject f the Lync cnversatin. Start Time Filter accrding t the start time f the Lync cnversatin. End Time Filter accrding t the end time f the Lync cnversatin. Cnversatin Type Filter accrding t the Lync cnversatin type. Mdes Filter accrding t the Lync cnversatin mde. Attachment Name Filter accrding t the name f the attachment sent in a Lync cnversatin. Attachment Size Filter accrding t the size f the attachment sent in a Lync cnversatin. Attachment Initiatr Filter accrding t the attachment initiatr. If yu select Attachment Initiatr as the rule, after yu select the value link, a windw appears. Yu can add criterin t specify a rule, cnditin and value t filter the desired users. Then, select Save t save yur cnfiguratin. Cmpliance Guardian Installatin and Administratin User Guide 171

172 Select Add a Criterin again t add mre rules. *Nte: Depending n the rules yu enter, yu can change the rder f the rules by selecting the dwn arrw ( ) befre the Rule value, and then select the rder f the rule frm the drpdwn list t determine the pririty f the rule. Yu can als change the lgical relatinships between the rules. There are currently tw lgical relatinships: And and Or. The lgic is set t And. T change the lgical relatinship, selecting the dwn arrw ( ) after the And/Or value. The And lgical relatinship means that the cntent which meets all f the rules will be filtered and included in the result. The Or lgic means that the cntent which meets any ne f the rules will be filtered and included in the result. Select Search in the Cnfigure Advanced Search Settings windw t search the desired Lync cntent. The results f the search will be displayed in the right pane f the Search interface. Select Current Page will display all the available cnversatins. Select All will display all the searched cnversatins and Clear All will clear the results. Select a cnversatin, t view mre details n the cnversatin. The View Details windw appears. Yu can exprt the cnversatin t an EDRM file, a Cncrdance file r an HTML file. Exprting Lync Data The Lync cntent that has been searched can be exprted t an EDRM file, a Cncrdance file, r an HTML file int anther lcatin. Fr mre infrmatin n cnfiguring the exprt lcatin, refer t Cnfiguring Exprt Settings. Refer t the fllwing steps t exprt the Lync data: Select the searched Lync cnversatins that yu want t exprt, the Exprt buttn is enabled n the ribbn. Select Exprt, then select Exprt t EDRM, Exprt t Cncrdance, r Exprt t HTML. A windw appears. Enter a request name and then select OK. Fr mre infrmatin n the exprt requests, refer t Exprt Requests. Cnfiguring Exprt Settings Select Cnfigure Exprt Settings n the ribbn t cnfigure the lcatin where the searched Lync cntent will be stred, and t cnfigure the pruning rules in the lcatin. Reprt Lcatin Select a lcatin t stre the exprted Lync cntent frm the drpdwn list. Yu can select New Exprt Lcatin t create a new exprt lcatin. Pruning Rules Cnfigure the pruning rules. 172 Cmpliance Guardian Installatin and Administratin User Guide

173 N Pruning Select this radi buttn, all f the exprted Lync cntent files will nt be pruned. Keep the latest _ reprts Select this radi buttn and enter the number f reprts that yu want t keep in the lcatin, the ther files will be pruned. Keep the latest _ Days/Weeks/Mnths f reprts Select this radi buttn and then enter a time range, the files exprted during the entered time range will be kept. Select Save t save the settings in the Cnfigure Exprt Settings windw, r select Cancel t exit the windw withut saving any changes. Exprt Requests Select Exprt Requests n the ribbn. All f the exprt requests are displayed in the Exprt Requests windw. The fllwing infrmatin is displayed: Request ID The ID f the request. Request Name The name f yur reprt dwnlading request. Categry The type f exprted file. Prgress The prgress f the exprting prcess. Status The status f yur exprt request. Start Time The start time f the reprt exprting prcess. Finish Time The finish time f the reprt exprting prcess. The fllwing actins can be perfrmed in the Exprt Requests page: Dwnlad Select ne request, and then select Dwnlad t dwnlad the file. Delete Select ne r several requests, and then select Delete t delete the requests frm the requests list. Stp Select ne request, and then select Stp t stp the reprt generating prcess. Restart Select ne request, and then select Restart t restart the reprt generating prcess. Selecting the Scan Scpe After launching the Cmpliance Scanner Lync mde, the Scpe panel n the left f the screen displays all f the archiving plans. Select ne r mre plans. The data archived in the archiving plan will be scanned. Cmpliance Guardian Installatin and Administratin User Guide 173

174 Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr Lync Use the Plan Builder t set up a Cmpliance Scanner plan. T use Plan Builder, cmplete the fllwing steps: 1. After selecting the archiving plans, select Plan Builder n the ribbn f the Cmpliance Scanner page. 2. Frm the drp-dwn menu, select Wizard Mde fr step-by-step guidance during cnfiguratin, r select Frm Mde (recmmended fr advanced users nly) t set up a plan quickly. Refer t the sectin belw that is applicable t yur chice fr infrmatin abut perfrming a Cmpliance Scanner plan. Perfrming a Cmpliance Scanner Plan in Wizard Mde T cnfigure a plan using Wizard Mde, cmplete the fllwing steps: *Nte: An asterisk (*) in the user interface indicates a mandatry field r step. 1. Enter a Plan Name and an ptinal Descriptin. Select Next. The Reprt Settings page appears. 2. Cnfigure the reprt settings: Database Plicy Select a database plicy frm the drp-dwn list t stre the results f a Cmpliance Scanner jb. If yu want t set up a new database plicy, select the New Database Plicy link in the drp-dwn list. Reprt Grup Select a Cmpliance Guardian grup frm the drp-dwn list. Once a grup is selected, all f the users in the grup will be able t view and dwnlad the reprts in the Cmpliance Reprt mdule. Multiple grups can be selected. Chse Select All t select all f the listed grups. Select Next. The Scan Settings page appears. 3. Cnfigure the scan settings: Scan Plicy Select a scan plicy frm the drp-dwn list. Filter Plicy Select a filter plicy. If yu want t set up a new filter plicy, select the New Filter Plicy link in the drp-dwn list. Refer t Cnfiguring Filter Plicies fr mre infrmatin. Alert If yu want Cmpliance Guardian t send an alert when an errr ccurs during a scan, select an prfile t determine the users wh will receive the e- mail, and select an template. Yu can als select the New Template link t create a new template. Select Next. The Schedule page appears. 4. Cnfigure the schedule settings: 174 Cmpliance Guardian Installatin and Administratin User Guide

175 N schedule Select this ptin t run the plan immediately and save the plan in Plan Manager. Cnfigure the schedule myself Select this ptin t cnfigure a custmized schedule. Select Add Schedule t set up a schedule. The Add Schedule windw appears. In the Optins sectin, select a scan type frm the drp-dwn list. Fr mre infrmatin, review t Scan Schedule. Select Next. The Advanced page appears. 5. Cnfigure the advanced settings: Agent Grup Select the agent grup that will perfrm the jb. Ntificatin Cnfigure the ntificatin settings. Select a ntificatin prfile frm the Select a prfile with address nly drp-dwn list, r chse t create a new e- mail ntificatin prfile by selecting the New Ntificatin Prfile link. Select View t view the detailed cnfiguratin f the selected ntificatin prfile. Fr mre infrmatin n cnfiguring the ntificatin prfiles, refer t Cnfiguring Receive Settings. Select Next. The Overview page appears. 6. Review and edit the plan cnfiguratins. T make changes, select the Edit buttn next t the name f the setting yu wish t edit. Select Finish t save the cnfiguratin f the plan withut running it r Finish and Run Nw t save the cnfiguratin and then run the saved plan immediately. Perfrming a Cmpliance Scanner Plan in Frm Mde Frm Mde is recmmended fr users wh are familiar with building Cmpliance Scanner plans. T build a Cmpliance Scanner plan in Frm Mde, select the scan scpe, and then select Plan Builder > Frm Mde. Refer t Perfrming a Cmpliance Scanner Plan in Wizard Mde fr detailed infrmatin regarding each ptin. *Nte: If this is yur first time building a plan, r if yu think yu wuld benefit frm descriptins f each plan cmpnent, it is recmmended that yu use the Wizard Mde. Cmpliance Guardian Installatin and Administratin User Guide 175

176 Cmpliance Guardian Scanner fr Database The Database Mde allws yu t cnfigure a cnnectin with a database and then perfrm a scan jb using the defined scan plicy t generate the cmpliance scan results f the scanned cntent in the database. The users in the specified Reprt Grup can then view the cmpliance scan results in the Cmpliance Reprt mdule. Launching Cmpliance Guardian Scanner in Database Mde On the Cmpliance Guardian Scanner Hme interface, select Create n the ribbn, and a drp-dwn list appears. Select Database frm the drp-dwn list, and yu will be brught t the Cmpliance Guardian Scanner Website Create Plan interface. Selecting the Scan Scpe After launching the Cmpliance Scanner Database mde, the Scpe panel n the left f the screen displays all f the cnnectins. Select the database cnnectin, the tables in the cnnected database will lad. Select the tables r select the database cnnectins, the cntent in the tables will be scanned. Using Plan Builder t Perfrm a Cmpliance Guardian Scanner Plan fr Database Use the Plan Builder t set up a Cmpliance Scanner plan. T use Plan Builder, cmplete the fllwing steps: 1. After selecting the scpe fr the cmpliance scan, select Plan Builder n the ribbn f Cmpliance Scanner page. 2. Frm the drp-dwn menu, select Wizard Mde fr step-by-step guidance during cnfiguratin, r select Frm Mde (recmmended fr advanced users nly) t set up a plan quickly. Refer t the fllwing sectin that is applicable t yur chice fr infrmatin abut perfrming a Cmpliance Scanner plan. Perfrming a Cmpliance Scanner Plan in Wizard Mde Wizard Mde prvides yu with step-by-step guidance n hw t cnfigure a new plan. T cnfigure a plan using Wizard Mde, cmplete the fllwing steps: *Nte: An asterisk (*) in the user interface indicates a mandatry field r step. 1. Enter a Plan Name and an ptinal Descriptin if desired. Select Next. The Reprt Settings page appears. 2. Cnfigure the reprt settings: 176 Database Plicy Select a database plicy frm the drp-dwn list t stre the result data f the Cmpliance Scanner jb. If yu want t set up a new database plicy, select Cmpliance Guardian Installatin and Administratin User Guide

177 the New Database Plicy link in the drp-dwn list. Refer t Cnfiguring Database Plicy fr mre infrmatin. Reprt Grup Select a Cmpliance Guardian grup frm the drp-dwn list. Once a grup is specified as the Reprt Grup, all f the users in the specified grup will be able t view and dwnlad the reprts in the Cmpliance Reprt mdule. Multiple grups can be specified here; chse Select All t select all f the listed grups. Select Next. The Scan Settings page appears. 3. Cnfigure the scan settings: Scan Plicy Select a scan plicy frm the drp-dwn list and it will be used t scan the cntents in the specified scpe. Only ne scan plicy can be selected here. Maximum Scanned Rws Enter the maximum number f table rws that will be scanned. Alert If yu want Cmpliance Guardian t send an when an errr ccurs during the scan, then select an prfile t specify the users wh will receive the , and select an template. Yu can als select the New Template link t create a new template. Refer t Cnfiguring Templates fr mre infrmatin. *Nte: Even thugh there may be mre than ne errr when scanning a rw in a database table, the alert will nly be sent when the first errr ccurs. Select Next. The Schedule page appears. 4. Cnfigure the schedule settings: N schedule Select this ptin t run the plan immediately and save the plan in Plan Manager. Cnfigure the schedule myself Select this ptin t cnfigure a custmized schedule, and run the Cmpliance Scanner jb by schedule. Select Add Schedule t set up a schedule. The Add Schedule windw appears. In the Optins sectin, select a scan type frm the drp-dwn list. Fr mre infrmatin, refer t Scan Schedule. Full Scan Run a full scan f all f the cntent in the selected table. Unlike incremental scan, all full scans are independent f ne anther and d nt have any dependencies n the ther s scan results. Hwever, because each f the full scans are cmprehensive, full scan jbs take the lngest t cmplete f the tw available ptins. Incremental Scan Run a fractinal scan. It scans nly the updated cntent since the last successful full scan r incremental scan. This kind f scan requires less strage than a full scan and it reduces the executin time f the scan jb. Hwever, it is imprtant t nte that fr each incremental scan, the latest full scan jb in the full scan cycle must be available. If the incremental scan is based n a frmer incremental scan jb, the frmer incremental scan must als be available. Cmpliance Guardian Installatin and Administratin User Guide 177

178 If selecting Incremental Scan, the Reference Time ptin is enabled. Reference Time Chse whether t scan cntent generated r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents generated r mdified. Enter an integer int the textbx and select Minute(s), Hur(s), Day(s), r Mnth(s) frm the drp-dwn list. *Nte: It is recmmended that yu specify a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. After cnfiguring the schedule fr the Cmpliance Scanner plan, select Calendar View t view the scheduled jbs by Day, Week, r Mnth. All f the schedules will be displayed in the Summary table. Select X t delete a schedule. Select Next. The Advanced page appears. 5. Cnfigure the advanced settings: Ntificatin Cnfigure the ntificatin settings. Select a previusly-cnfigured ntificatin prfile frm the Select a prfile with address nly drp-dwn list, r chse t create a new ntificatin prfile by selecting the New Ntificatin Prfile link. Select View t view the detailed cnfiguratin f the selected ntificatin prfile. Fr mre infrmatin n cnfiguring the ntificatin prfiles, refer t Cnfiguring Receive Settings. Select Next. The Overview page appears. 6. Review and edit the plan cnfiguratins. T make changes, select the Edit buttn next t the name f the each cnfiguratin field t jump t the crrespnding setting page and edit the cnfiguratin. 7. Once yu are satisfied with the plan settings, chse ne finishing ptin at the lwer-right sectin f the screen. Select Finish t save the cnfiguratin f the plan withut running it r Finish and Run Nw t save the cnfiguratin and then run the saved plan immediately. Scan Schedule Cnfigure the fllwing settings t build a new Cmpliance Scanner schedule in the Add Schedule ppup windw: Optins Select a scan type frm the drp-dwn list. Full Scan Run a full scan f all f the cntent in the specified scpe. Unlike incremental scan, all full scans are independent f ne anther and d nt have any dependencies n the ther s scan results. Hwever, because each f the full scans is cmprehensive, full scan jbs take the lngest t cmplete f the tw available ptins. 178 Cmpliance Guardian Installatin and Administratin User Guide

179 Incremental Scan Run a fractinal scan. It scans nly the updated cntent since the last successful full scan r incremental scan. This kind f scan requires less strage than a full scan and it reduces the executin time f the scan jb. Hwever, it is imprtant t nte that fr each incremental scan, the latest full scan jb in the full scan cycle must be available. If the incremental scan is based n a frmer incremental scan jb, the frmer incremental scan must als be available. If selecting Incremental Scan, the Reference Time ptin is available fr cnfiguratin. Reference Time Chse whether t scan cntent generated r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntent generated r mdified. Enter an integer int the textbx and select Minute(s), Hur(s), Day(s), r Mnth(s) frm the drp-dwn list. *Nte: It is recmmended that yu specify a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. Schedule Settings Set up the frequency fr the scheduled Cmpliance Scanner jb. Select ne time unit frm Minute(s), Hur(s), Day(s), Week(s), and Mnth(s), and then enter an integer int the text bx. The scheduled Cmpliance Scanner jb will be run accrding t the interval cnfigured here. Range f Recurrence Select the start time and end time fr the schedule. Start time Set up the time t start the Cmpliance Scanner plan and mdify the time zne as required. *Nte: The start time cannt be earlier than the current time. N end date Select this ptin t repeat running the plan until being stpped manually. End after specified ccurrence(s) Select this ptin t stp the plan autmatically after the specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f scheduled Cmpliance Scanner plans. Perfrming a Cmpliance Scanner Plan in Frm Mde Frm Mde is recmmended fr users wh are familiar with building Cmpliance Scanner plans. T build a Cmpliance Scanner plan in Frm Mde, select the scan scpe, and then select Plan Builder > Frm Mde. Refer t Perfrming a Cmpliance Scanner Plan in Wizard Mde fr detailed infrmatin regarding each ptin. *Nte: If this is yur first time building a plan, r if yu think yu wuld benefit frm descriptins f each plan cmpnent, it is recmmended that yu use the Wizard Mde. Cmpliance Guardian Installatin and Administratin User Guide 179

180 Cmpliance Reprts Fr details abut Cmpliance Guardian reprts and prcedures fr hw t use them, refer t the Cmpliance Guardian User Guide. Getting Started Refer t the sectins belw fr imprtant infrmatin n getting started with Cmpliance Reprt. Launching Cmpliance Reprt T launch Cmpliance Reprt, cmplete the fllwing steps: 1. Lg in t Cmpliance Guardian. If yu are already in the sftware, select the hme page buttn ( ) n the tp left crner g t the hme page. Frm the hme page, all f the prducts are displayed. 2. Select the Cmpliance Reprt t launch its interface. 3. Alternatively, yu can select Reprt n the tp-left crner, and select the crrespnding Reprt tab n the appeared navigatin bar t launch Cmpliance Scanner. Figure 19: Cmpliance Guardian mdule launch windw. 180 Cmpliance Guardian Installatin and Administratin User Guide

181 User Interface Overview The Cmpliance Reprt Dashbard interface appears after yu select Cmpliance Reprt in the hme page. Figure 20: Cmpliance Reprt Dashbard interface. This interface shws the scan results f the selected plan. This cntent is dynamic; it will ften change depending n what kind f reprt is selected. Yu can select Reprt n the left crner f the page, and then select the kind f reprt that yu want t view n the appeared navigatin bar. Cmpliance Guardian Installatin and Administratin User Guide 181

182 Classificatin Manager Classificatin Manager enables yu t define a scan scpe, and then it perfrms a jb t scan ut the related cntents accrding t the scan plicy, at last it will perfrm the specified actins t the cntents scanned ut. *Nte: Cmpliance Guardian supprts scanning Micrsft Office files that are in a 2003 r earlier frmat using ifilter in this versin. If yu are using an earlier versin f Cmpliance Guardian r if yu updated t Cmpliance Guardian 3 SP 3 frm an earlier versin, yu must dwnlad a cmpatibility pack t scan the Micrsft Office files (can keep the file s accessibility attributes). If yu prefer t scan these files thrugh installing the cmpatibility pack but nt thrugh ifilter, yu can install the pack and then add the fllwing nde under the OfficeFileMapping nde in the cnfiguratin file CntentCmplianceCnfig.xml (yu can find the file under the path \Cmpliance Guardian\Agent\Bin): <NeedCnvert> <Extensin>.xls</Extensin> </NeedCnvert> Figure 21: NeedCnvert nde. The value in the Extensin attribute is the extensin f the file that yu want t scan thrugh the cmpatibility pack. Classificatin Manager includes the Real-Time Classificatin Scanner and Scheduled Classificatin Scanner. Refer t Real-Time Classificatin Scanner and Scheduled Classificatin Scanner fr mre infrmatin. 182 Cmpliance Guardian Installatin and Administratin User Guide

183 Real-Time Classificatin Scanner The Real-Time Classificatin Scanner is used t scan cntents, classify them, and then perfrm actins t the scanned cntents in real time. The Real-Time Classificatin Scanner rule must first be applied n the desired scpe befre using Real-Time Classificatin Scanner t scan cntents in the specified scpe. Fr mre infrmatin, refer t Creating Real-Time Classificatin Scanner Rules. After yu apply the Real- Time Classificatin Scanner rule, the updated cntent in the defined scpe will be scanned and dealt with accrding t the specified rule in real time. Pre-Cnfiguratins Cnfiguring Scan Plicies A scan plicy defines the cmpliance rules t be used when scanning the cntents in the specified scpe. T cnfigure the scan plicies, select Scan Plicy n the ribbn f the Real-Time Classificatin Scanner page t g t the Scan Plicy interface. Managing Scan Plicies The Scan Plicy interface displays all f the scan plicies that yu have previusly created. In the Scan Plicy interface, yu can change the number f scan plicies displayed per page and the rder in which they are displayed. T change the number f scan plicies displayed per page, select the desired number frm the Shw rws drp-dwn menu in the lwer-right-hand crner. T srt the actin plicies, select a clumn heading such as Scan Plicy Name, Descriptin, r Last Mdified Time. Perfrm the fllwing actins in the Scan Plicy interface: Create Select Create n the ribbn t create a new scan plicy. Fr infrmatin abut creating a new actin plicy, refer t Creating and Editing Scan Plicies. View Details Select View Details n the ribbn and yu will see the previusly cnfigured settings fr the selected scan plicy. Here yu can als select Edit n the ribbn t make changes t the scan plicy s settings. Yu will be brught t the Edit Scan Plicy interface where yu can change this scan plicy. Edit Select Edit n the ribbn t change the cnfiguratins fr the selected scan plicy. Fr infrmatin abut editing cnfiguratins fr a scan plicy, refer t Creating and Editing Scan Plicies. Delete Select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected scan plicies, r select Cancel t return t the Scan Plicy interface withut deleting the selected scan plicies. Cmpliance Guardian Installatin and Administratin User Guide 183

184 Exprt Exprt the check infrmatin fr the test suites included in the selected scan plicy. Creating and Editing Scan Plicies T create a new scan plicy, select Create in the Manage grup f the Scan Plicy page. T mdify a previusly cnfigured scan plicy, select the scan plicy, and then select Edit n the ribbn. In the Create Scan Plicy r Edit Scan Plicy interface, cnfigure the fllwing settings: Name and Descriptin Enter a name fr this scan plicy. Yu can als enter an ptinal descriptin t distinguish this scan plicy frm the thers. Select the Test Suites Specify the test suites that yu want t include in this scan plicy. There are tw tabs in this field: Tagging The test suites used fr cntent classificatin with a variety f related actins such as embedding metadata, quarantining dcuments, and reacting cntent are displayed under this tab. Redactin The test suites used fr redacting the specified cntent in a file are displayed under this tab. Yu can refer t the descriptin f each test suite fr the intrductin f its usage. T add mre desired test suites, select Test Suite Manager in the Settings grup n the ribbn. Fr mre infrmatin n cnfiguring the test suites, refer t Test Suite Manager. After selecting sme test suites, if yu want t clear the selectin status, select the Clear Selectin link and then specify yur desired test suites again. T change the number f test suites displayed per page, select the desired number frm the Shw rws drp-dwn menu in the lwer-right-hand crner. T srt the test suites, select a clumn heading such as Test Suite r Descriptin. Yu can als perfrm the fllwing actins when selecting the test suites: Search Filter the test suites t be displayed by the keywrd yu designate. The keywrd must be cntained in a clumn value. At the tp f the viewing pane, enter the keywrd fr the actin plicy yu want t display. Yu can select Search all pages r Search current page t define the search scpe. Search all pages means that the test suites in all f the pages whse names r descriptins cntain the keywrds will be displayed; while Search current page means that nly the test suites in the current page whse names r descriptins cntain the keywrds will be displayed. *Nte: The search functin is nt case sensitive. Manage clumns ( ) Manage which clumns are displayed in the list s that nly infrmatin yu want t see is shwn. Select the manage clumns buttn ( ), and then check the checkbx next t the clumn name t have that clumn shwn in the list. 184 Cmpliance Guardian Installatin and Administratin User Guide

185 Hide the clumn ( ) Hver ver a clumn name, and then select the hide clumn buttn ( ) f the clumn yu want t hide, and the clumn will be hidden. After yu are satisfied with the cnfiguratin f the scan plicy, select OK t save this scan plicy. If yu d nt want t save the current cnfiguratin, select Cancel t cancel the cnfiguratin. Cnfiguring Filter Plicies Fr mre infrmatin, refer t Filter Plicy. Cnfiguring Actin Plicies Actin plicies allw yu t define the actins t be perfrmed n the scanned cntents in the specified scpe. T cnfigure the actin plicies, select Actin Plicy n the ribbn f the Real-Time Classificatin Scanner page t g t the Actin Plicy interface. Managing Actin Plicies The Actin Plicy interface displays all f the actin plicies that yu have previusly created. In this interface, yu can change the number f actin plicies displayed per page and the rder in which they are displayed. T change the number f actin plicies displayed per page, select the desired number frm the Shw rws drp-dwn menu in the lwer-right-hand crner. T srt the actin plicies, select a clumn heading such as Actin Plicy Name, Descriptin, r Last Mdified Time. Perfrm the fllwing actins in the Actin Plicy interface: Create Select Create n the ribbn t create a new actin plicy. Fr infrmatin abut creating a new actin plicy, refer t Creating and Editing Actin Plicies. View Select View n the ribbn and yu will see the previusly cnfigured settings fr the selected actin plicy. Here yu can als select Edit n the ribbn t make changes t the actin plicy s settings. Yu will be brught t the Edit Actin Plicy interface where yu can change this actin plicy. Edit Select Edit n the ribbn t change the cnfiguratins fr the selected actin plicy. Fr infrmatin abut editing cnfiguratins fr an actin plicy, refer t Creating and Editing Actin Plicies. Delete Select Delete n the ribbn. A cnfirmatin windw will appear and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected actin plicies, r select Cancel t return t the Actin Plicy interface withut deleting the selected actin plicies. Cmpliance Guardian Installatin and Administratin User Guide 185

186 Creating and Editing Actin Plicies T create a new actin plicy, select Create n the ribbn. T mdify a previusly-cnfigured actin plicy, select the actin plicy, and then select Edit n the ribbn. In the Create Actin Plicy interface r Edit Actin Plicy interface, enter a Name fr the actin plicy, and enter an ptinal Descriptin fr future reference. Then, cnfigure the Set up the actin rules sectin: Cnditins Cnfigure the actin plicy filter rules. Select Cnfigure. The Cnfigure interface appears. Refer t the fllwing steps t cnfigure the actin plicy filter rules: Select a categry, select Add an Actin Level Grup t add a new rule f the specified categry level. Cnfigure the fllwing fields fr the rule: Rule Select the new rule yu want t create frm the drp-dwn list. Cnditin Select the cnditin fr the rule. Value Enter a value yu want the rule t use in the text bx. Select the delete ( ) buttn t delete the rule that is n lnger needed. The filter rule cntains three categry levels: Dcument Based n the SharePint Dcument prperty value yu specified here t define the scpe in which the files that are nt cmpliant will be affected by the specified actins. *Nte: Under this categry, the filter rules Mdified Time and Created Time will nt be applied t define the scpe fr Real-Time Classificatin Scanner. Item Based n the SharePint Item prperty value yu specified here t define the scpe in which the items that are nt cmpliant will be affected by the specified actins. *Nte: Under the Dcument categry and the Item categry, the filter rules Mdified Time and Created Time will nt be applied t define the scpe fr Real-Time Classificatin Scanner. Classificatin Result Based n the tag value yu specified here t define the scpe in which the files that are nt cmpliant will be mved. Redactin Result Based n the result f whether the files have been redacted t define the scpe where nn-cmpliant files are affected by the specified actins. T add mre filters, repeat the previus step. 186 Cmpliance Guardian Installatin and Administratin User Guide

187 *Nte: Depending n the filters yu enter, yu can change the rder f the rules by selecting the dwn arrw ( ) befre the Rule value, and then select the rder f the rule frm the appeared drp-dwn list t determine the pririty f the rule. Yu can als change the lgical relatinships between the rules. There are currently tw lgical relatinships: And and Or. By default, the lgic is set t And. T change the lgical relatinship, select the lgical relatinship link. The And lgical relatinship means that the cntent which meets all f the rules will be filtered and included in the result. The Or lgic means that the cntent which meets any ne f the rules will be filtered and included in the result. Select OK in the interface t save the changes, r select Cancel t return t the Create Actin Plicy interface r Edit Actin Plicy interface withut saving any changes. After yu finished cnfiguring the Cnditins settings, select the right arrw ( ) after Cnditins in the Create r Edit Actin Plicy interface t review the cnfigured settings. Actins Select an actin t handle the nn-cmpliant files which are fund by perfrming the classificatin jbs. Then select Add an actin. Repeat the abve step t add multiple actins. The actins then will be added. If the Cnfigure buttn appears after the added actin, yu must select it t cnfigure the settings fr the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Yu can change the rder f the actin cnfiguratin by selecting the textbx befre the added actin t determine the pririty f the actin. Fr details f each actin, refer t Cmpliance Guardian Installatin and Administratin User Guide 187

188 Classificatin Actins. Select the right arrw ( ) after Actins t review the cnfigured settings. Alert Specify whether t send ut an alert when a file is affected by the specified actins. This is ptinal. Select Cnfigure. The Cnfigure interface appears. Alerts Specify whether t send an when the actin fails t execute r successfully executes t the scanned files that are nt cmpliant, and then specify wh will receive the . Yu must select a default template befre select the recipients. Select the New Ntificatin Template link t create a new template. Creatr template Select this checkbx t send an alert t the creatr f the specified file that will be taken actin. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. Mdifier template Select this checkbx t send an alert t the last mdifier f the specified file that will be taken actin. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. User in the selected ntificatin prfile Select this checkbx t send an alert t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the appeared drp-dwn list. Yu can als select the New Ntificatin Prfile link t create a new ntificatin prfile. Fr mre infrmatin, refer t Cnfiguring Receive Settings. Select OK in the interface t save the changes, r select Cancel t return t the Create Actin Plicy interface r Edit Actin Plicy interface withut saving any changes. After yu finished cnfiguring the Alert settings, select the right arrw ( ) after Alert in the Create r Edit Actin Plicy interface t review the cnfigured settings. Select Add a Cnditin Grup t add anther cnditin grup. Select the delete buttn ( ) after a cnditin grup t delete the cnditin grup. Yu can change the rder f the cnditin grup cnfiguratin by selecting the textbx n the tp f each cnditin grup t determine the pririty f the cnditin grup. Select the right arrw ( ) r dwn arrw ( ) t expand r retract the settings f a cnditin grup. 188 Cmpliance Guardian Installatin and Administratin User Guide

189 Classificatin Actins Refer t the fllwing sectin fr details abut each classificatin actin. Change Permissin The permissins f the files r items that are nt cmpliant will be changed based n yur settings. When selecting Cnfigure after the Change Permissin actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the appeared Cnfigure interface: Change Permissin Cnfigure the fllwing settings. SharePint Grup Name Enter a grup name. If the grup des nt exist, it will be created. Grup Permissins Specify permissins fr the grup. Users in the grup will have the specified permissins t the files r items that are nt cmpliant. Delete Files/Items The scanned files r items that are nt cmpliant will be deleted t the Site Cllectin Recycle Bin. Encrypt The scanned files r items that are nt cmpliant will be encrypted. After yu select Cnfigure after the Encrypt actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the appeared Cnfigure interface: Manage Encrypted Files r Items Cnfigure the fllwing settings: Select ne r mre grups frm the Select the grups that have permissin t manage the encrypted data in Cmpliance Guardian drp-dwn list. The users in the selected grups can view and manage the scanned files r items that are nt cmpliant in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Encryptin. Select New Grup t create a new grup in Cntrl Panel. Fr mre infrmatin, refer t Cmpliance Guardian Installatin and Administratin User Guide 189

190 Accunt Manager. Security Prfile Select a security prfile fr encrypting the nn-cmpliant files r items. Select New Security Prfile t create a new security prfile. Fr mre infrmatin, refer t Security Prfile. Encrypt and Quarantine The scanned files r items that are nt cmpliant will be encrypted and then quarantined. After yu select Cnfigure after the Encrypt and Quarantine actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the Cnfigure interface: Manage Encrypted Files r Items Cnfigure the fllwing settings: Select ne r mre grups frm the Specify a SharePint grup that has permissin t manage the data affected by this actin in SharePint drpdwn list. The users in the selected grups can view and manage the scanned files r items that are nt cmpliant in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Encryptin. Select New Grup t create a new grup in Cntrl Panel. Fr mre infrmatin, refer t 190 Cmpliance Guardian Installatin and Administratin User Guide

191 Accunt Manager. Security Prfile Select a security prfile fr encrypting the nn-cmpliant files r items. Select New Security Prfile t create a new security prfile. Fr mre infrmatin, refer t Security Prfile. Quarantine Methd Select a Quarantine Methd. In place quarantine The nn-cmpliant files r items will be quarantined. The users in the grups selected in the Manage Encrypted Files/Items field can view and manage these files r items in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Encryptin. Out f place quarantine The nn-cmpliant files r items will be quarantined t the specified lcatin. Quarantine Lcatin If the Out f place quarantine ptin is selected, yu must select a lcatin fr string the quarantined files r items. Select New Exprt Lcatin t create a new exprt lcatin. Fr mre infrmatin, refer t Exprt Lcatin. Lck The scanned Newsfeed that is nt cmpliant will be lcked. Users cannt reply t the lcked newsfeed. Mve t the Allwed Lcatin The scanned files that are nt cmpliant will be mved t the specified allwed lcatin cnfigured previusly. Yu can select Allwed Lcatin in the Create Actin Plicy interface r Edit Actin Plicy interface t g t the Cntrl Panel > Allwed Lcatin page. Fr mre detailed infrmatin n hw t cnfigure the allwed lcatin, refer t Cnfiguring Allwed Lcatin. *Nte: Only the files in the dcument library can be mved. After yu select Cnfigure after the Mve t the Allwed Lcatin actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the appeared Cnfigure interface: Specified Lcatin Select the lcatin where the files will mve. Glbal allwed lcatin Select the radi buttn t mve the files t the previusly-cnfigured allwed lcatin. Specify the relative path f the library r flder Select the radi buttn, and then enter the relative path r full path f a library r flder t mve the files t the library r a flder within the same site. Yu can als enter a full path f a library r flder t mve the files t anther site in the same farm. Quarantine Optin Select the If the files fail t mve, they will be quarantined checkbx if yu want t deal with the files that are failed t be mved. With this ptin enabled, the files that are failed t be mved will then be quarantined. The fllwing cnditins will lead t the failure f mving files: Cmpliance Guardian Installatin and Administratin User Guide 191

192 There is n cntent type that matches the surce file s cntent type in the target library. The matched cntent type f the target library (where the allwed lcatin is) des nt cntain all f the surce file s clumns. Other unknwn system issues. If the If the files fail t mve, they will be quarantined checkbx is selected, cnfigure the fllwing settings: Manage Quarantine Files r Items Cnfigure the fllwing settings: Specify a SharePint grup that has the permissins t view r manage the quarantined data in SharePint Specify wh can view and manage the quarantined data in Cmpliance Guardian Quarantine Manager in SharePint. Fr mre infrmatin n managing the quarantined files, refer t Using Cmpliance Guardian Quarantine Manager in SharePint. SharePint Grup Name Enter a grup name. If the grup des nt exist, it will be created. Grup Permissins Specify permissins fr the grup. Users in the grup will have the specified permissins t view and manage the data that are quarantined in Cmpliance Guardian Quarantine Manager in SharePint. Select the grups that have the permissin t manage the quarantined data in Cmpliance Guardian Specify wh can view and manage the quarantined data in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Quarantine. Select New Grup t create a new grup in Cntrl Panel. Fr mre infrmatin, refer t 192 Cmpliance Guardian Installatin and Administratin User Guide

193 Accunt Manager. Quarantine Methd Select a Quarantine Methd. In place quarantine The nn-cmpliant files will be quarantined, but they are still in SharePint. Out f place quarantine The nn-cmpliant files will be quarantined t the specified lcatin. Quarantine Lcatin If the Out f place quarantine ptin is selected, yu must select a lcatin fr string the quarantined files. Select New Exprt Lcatin t create a new exprt lcatin. Fr mre infrmatin, refer t Cnfiguring Exprt Lcatins. Permanently Delete The scanned Newsfeed, the replies f the Newsfeed and ntes in Nte Bard that are nt cmpliant will be permanently deleted. Quarantine Files/Items The scanned files r items that are nt cmpliant will be quarantined. After yu select Cnfigure after the Quarantine Files/Items actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the appeared Cnfigure interface. Manage Quarantined Files r Items Cnfigure the fllwing settings: Specify a SharePint grup that has the permissins t view r manage the quarantined data in SharePint Specify wh can view and manage the quarantined data in Cmpliance Guardian Quarantine Manager in SharePint. Fr mre infrmatin n managing the quarantined files, refer t Using Cmpliance Guardian Quarantine Manager in SharePint. SharePint Grup Name Enter a grup name. If the grup des nt exist, it will be created. Grup Permissins Specify permissins fr the grup. Users in the grup will have the specified permissins t view and manage the data that are quarantined in Cmpliance Guardian Quarantine Manager in SharePint. Select the grups that have the permissin t manage the quarantined data in Cmpliance Guardian Specify wh can view and manage the quarantined data in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Quarantine. Select New Grup t create a new grup in Cntrl Panel. Fr mre infrmatin, refer t Cmpliance Guardian Installatin and Administratin User Guide 193

194 Accunt Manager. Quarantine Methd Select ne f the fllwing Quarantine Methds: In place quarantine The nn-cmpliant files r items will be quarantined, but they are still in SharePint. Out f place quarantine The nn-cmpliant files r items will be quarantined t the specified lcatin. Quarantine Lcatin If the Out f place quarantine ptin is selected, yu must select a lcatin fr string the quarantined files r items. Select New Exprt Lcatin t create a new exprt lcatin. Fr mre infrmatin, refer t Cnfiguring Exprt Lcatins. Redact Files/Items Redact the files r items that are nt cmpliant accrding t the Redactin type test suite selected in the crrespnding scan plicy. Quarantine Befre Redact The files r items that are nt cmpliant will be backed up, and the backed up files r items will be quarantined t a specified lcatin. The riginal files r items in SharePint will be redacted. After yu select Cnfigure after the Quarantine Befre Redact actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the Cnfigure interface: Manage Redacted Files r Items Select ne r mre grups frm the Select the grups that have the permissin t manage the redacted data in Cmpliance Guardian drp-dwn list. The users in the selected grups can view and manage the scanned files r items that are nt cmpliant in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Redactin. Select New Grup t create a new grup in Cntrl Panel. Fr mre infrmatin, refer t 194 Cmpliance Guardian Installatin and Administratin User Guide

195 Accunt Manager. Quarantined Lcatin Select a lcatin fr string the backed up, quarantined files r items. Select New Exprt Lcatin t create a new exprt lcatin. Fr mre infrmatin, refer t Cnfiguring Exprt Lcatins. Alert Only The files r items that meet the cnfigured cnditin in the actin plicy can be recrded in an and sent t users. Navigate t the Create Actin Plicy r Edit Actin Plicy interface and select Alert Only > Cnfigure. The Cnfigure interface appears. Specify a default template Yu must select a default template befre yu can add recipients. Select the New Ntificatin Template link t create a new template. Creatr template Select this checkbx t send an alert t the creatr f the file r item. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. Mdifier template Select this checkbx t send an alert t the mdifier f the file r item. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. User in the selected ntificatin prfile Select this checkbx t send an alert t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the drp-dwn list. Select OK t save the changes, r select Cancel t exit the Cnfigure interface withut any changes. Cnfiguring Actin Plicies fr Scial Netwrk Cmpliance Guardian allws yu t take actin n scanned cntents in Yammer. T cnfigure the actin plicies, navigate t Real-Time Classificatin Scanner > Create > Scial Netwrk. Under the Scial Netwrk tab, select Actin Plicy n the ribbn t g t the Actin Plicy interface. Managing Actin Plicies In the Actin Plicy interface, yu can change the number f actin plicies displayed per page and the rder in which they are displayed. Yu can perfrm the fllwing actins: Create Select Create n the ribbn t create a new actin plicy. Fr infrmatin abut creating a new actin plicy, refer t Creating and Editing Actin Plicies. Cmpliance Guardian Installatin and Administratin User Guide 195

196 View Select View n the ribbn and yu will see the settings fr the selected actin plicy. Here yu can als select Edit n the ribbn t make changes t the actin plicy s settings. Edit Select Edit n the ribbn t change the cnfiguratins fr the selected actin plicy. Fr infrmatin abut editing cnfiguratins fr an actin plicy, refer t Creating and Editing Actin Plicies. Delete Select Delete n the ribbn. A cnfirmatin windw will appear and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected actin plicies, r select Cancel t return t the Actin Plicy interface withut deleting the selected actin plicies. Creating and Editing Actin Plicies T create a new actin plicy, select Create n the ribbn. T mdify a previusly-cnfigured actin plicy, select the actin plicy, and then select Edit n the ribbn. In the Create Actin Plicy interface r Edit Actin Plicy interface, cnfigure the fllwing settings: Name Enter a name fr the actin plicy. Descriptin Enter an ptinal Descriptin fr future reference. Type Select the type f the actin plicy. Fr Web Part Select this type, the actin plicy will be used fr the rule that uses the AvePint Yammer Cnnectr Web part t achieve the pst cntent. Fr Receiver Select this type, the actin plicy will be used fr the rule that uses receiver t achieve the pst cntent. Fr detailed infrmatin, refer t Using Real-Time Classificatin Scanner Rules in Scial Netwrk Mde. Scial Cnnectin Select a scial cnnectin. Cnfigure the Set up the actin rules sectin: Cnditins Cnfigure the actin plicy filter rules. Select Cnfigure. The Cnfigure interface appears. Refer t the fllwing steps t cnfigure the actin plicy filter rules: Select a categry, select Add an Actin Level Grup t add a new rule f the specified categry level. Cnfigure the fllwing fields fr the rule: Rule Select the new rule yu want t create frm the drp-dwn list. Cnditin Select the cnditin fr the rule. Value Enter a value yu want the rule t use in the text bx. Select the delete ( ) buttn t delete the rule that is n lnger needed. 196 Cmpliance Guardian Installatin and Administratin User Guide

197 The filter rule cntains three categry levels: Message Filter Based n the message infrmatin yu specified here t define the scpe in which cntent that is nt cmpliant will be affected by the specified actins. Classificatin Result Based n the tag value yu specified here t define the scpe in which the cntent will be affected by the specified actins. Redactin Result Based n the result f whether the cntent has been redacted t define the scpe where the cntent is affected by the specified actins. T add mre filters, repeat the previus step. *Nte: Depending n the filters yu enter, yu can change the rder f the rules by selecting the dwn arrw ( ) befre the Rule value, and then select the rder f the rule frm the appeared drp-dwn list t determine the pririty f the rule. Yu can als change the lgical relatinships between the rules. There are currently tw lgical relatinships: And and Or. By default, the lgic is set t And. T change the lgical relatinship, select the lgical relatinship link. The And lgical relatinship means that the cntent which meets all f the rules will be filtered and included in the result. The Or lgic means that the cntent which meets any ne f the rules will be filtered and included in the result. Select OK in the interface t save the changes, r select Cancel t return t the Create Actin Plicy interface r Edit Actin Plicy interface withut saving any changes. After yu finished cnfiguring the Cnditins settings, select the right arrw ( ) after Cnditins in the Create r Edit Actin Plicy interface t review the cnfigured settings. Actins Select an actin t handle the cntent which is fund by perfrming the classificatin jbs. Then select Add an Actin. Repeat the abve step t add multiple actins. The actins then will be added. If the Cnfigure buttn appears after the added actin, yu must select it t cnfigure the settings fr the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Yu can change the rder f the actin cnfiguratin by selecting the textbx befre the added actin t determine the pririty f the actin. Fr details f each actin, refer t Cmpliance Guardian Installatin and Administratin User Guide 197

198 Classificatin Actins. Select the right arrw ( ) after Actins t review the cnfigured settings. Alert Select Cnfigure. The Cnfigure interface appears. Select whether t send ut an alert if the actin failed t execute r successfully executed. Then, select an template. Select OK in the interface t save the changes, r select Cancel t return t the Create Actin Plicy interface r Edit Actin Plicy interface withut saving any changes. After yu finished cnfiguring the Alert settings, select the right arrw ( ) after Alert in the Create r Edit Actin Plicy interface t review the cnfigured settings. Select Add a Cnditin Grup t add anther cnditin grup. Select the delete buttn ( ) after a cnditin grup t delete the cnditin grup. Yu can change the rder f the cnditin grup cnfiguratin by selecting the textbx n the tp f each cnditin grup t determine the pririty f the cnditin grup. Select the right arrw ( ) r dwn arrw ( ) t expand r retract the settings f a cnditin grup. Classificatin Actins If yu select Fr Web Part as the actin type, there are three actins: Alert, Blck and Redact; If yu select Fr Receiver as the actin type, there are tw actins: Alert and Delete. Refer t the fllwing sectin fr details abut each classificatin actin. Alert Only The psts that meet the cnfigured cnditin in the actin plicy can be recrded in an and sent t the specified users. After yu select Cnfigure after the Alert Only actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the Alert settings in the appeared Cnfigure interface: Specify a default template Yu must select a default template befre select the recipients. Select the New Ntificatin Template link t create a new template. Creatr template Select this checkbx t send an alert t the creatr f the pst cntent. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. User in the selected ntificatin prfile Select this checkbx t send an alert t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the appeared drp-dwn list. Select OK t save the changes, r select Cancel t exit the Cnfigure interface withut any changes. 198 Cmpliance Guardian Installatin and Administratin User Guide

199 Blck The psts that meet the cnditin cnfigured in the actin plicy will be blcked. Redact The psts that meet the cnditin cnfigured in the actin plicy will be redacted accrding t the Redactin type test suite selected in the crrespnding scan plicy. Delete The psts that meet the cnditin cnfigured in the actin plicy will be deleted. Getting Started Refer t the sectins belw fr imprtant infrmatin n getting started with Real-Time Classificatin Scanner. Launching Real-Time Classificatin Scanner T launch Real-Time Classificatin Scanner, cmplete the fllwing steps: 1. Lg int Cmpliance Guardian. If yu are already in the sftware, select the hme page buttn ( ) t g t the hme page. Frm the hme page, all f the prducts are displayed. 2. Select Classificatin Scanner. The Classificatin Scanner interface appears. 3. Select the Real-Time Classificatin Scanner tab. Cmpliance Guardian Installatin and Administratin User Guide 199

200 4. Alternatively, yu can select Administratin n the tp-left crner, select the Classificatin Scanner tab n the appeared navigatin bar, and then select the Real-Time Classificatin Scanner tab in the appeared interface. Figure 22: Launching Real-Time Classificatin Scanner. 200 Cmpliance Guardian Installatin and Administratin User Guide

201 Hme Page Overview The Real-Time Classificatin Scanner hme page displays a list f all f yur previusly cnfigured ndes with Real-Time Classificatin Scanner rules applied. Yu can als select Create t select the Real-Time Classificatin Scanner Mde t SharePint r Scial Netwrk, and then create rules. Figure 23: Real-Time Classificatin Scanner hme page. Cnfiguring Actins n the Ribbn The ribbn prvides the fllwing cnfiguratin ptins: Selecting Mde Edit Select Edit n the ribbn t make changes t the rule f the selected nde. Yu will be brught t the Edit page where yu can change the rule settings fr the nde. Select Apply n the ribbn t save the changes and apply the rule. Select Cancel n the ribbn t return t the hme page withut saving any f yur changes. Delete Select Delete n the ribbn t delete the rules f the selected ndes. Select Create n the ribbn. A drp-dwn list appears. Select the crrespnding mde frm the drpdwn list: SharePint r Yammer. Then yu can enter the crrespnding mde, and cnfigure settings t scan bjects in SharePint r Yammer. Cmpliance Guardian Installatin and Administratin User Guide 201

202 Managing Ndes The Real-Time Classificatin Scanner hme page displays the ndes that have applied Real-Time Classificatin Scanner rules, but the nde that has an inherited rule is nt displayed in this field. This field als displays the Scan Plicy, Actin Plicy, and Filter Plicy that are selected in the crrespnding rule. Yu may select Edit n the ribbn t make changes t the rule f the selected nde. Yu will be brught t the Edit page where yu can change the rule settings fr the nde. Select Apply n the ribbn t save the changes and apply the rule. Select Cancel n the ribbn t return t the hme page withut saving any f yur changes. Real-Time Classificatin Scanner fr SharePint The SharePint mde is used t scan cntents in SharePint, classify them, and then perfrm actins t the scanned cntents in real time. *Nte: The psts and replies in SharePint 2013 Newsfeed are als supprted being scanned. The ntes in Nte Bard in SharePint are als supprted being scanned. Launching Real-Time Classificatin Scanner SharePint Mde On the Real-Time Classificatin Scanner Hme interface, select Create n the ribbn. A drp-dwn list appears. Select SharePint frm the drp-dwn list t enter the Real-Time Classificatin SharePint Mde. Using Real-Time Classificatin Scanner Rules in SharePint Mde Refer t the fllwing sectin fr using Real-Time Classificatin Scanner rules. Creating Real-Time Classificatin Scanner Rules in SharePint Mde T create a Real-Time Classificatin Scanner rule, cmplete the fllwing steps: Select the scpe f the cntent yu want t scan: a. Frm the Scpe panel n the left, select the farm that cntains the relevant SharePint cntent. Yu can enter a keywrd int the Search bx abve the farm tree t. a. Select the relevant cntent frm which yu want t perfrm further peratins by selecting the radi buttn t the left f the cntent. Select Create Rule frm the Rule Management grup n the ribbn. Cnfigure the fllwing rule settings: 202 Reprt Database Select a Reprt Database fr string the Real-Time Classificatin Scanner result. Cmpliance Guardian Installatin and Administratin User Guide

203 Reprt Grup Select the reprt grups. Users in this grup have permissin t the crrespnding reprts. Scan Plicy Select a scan plicy frm the drp-dwn list r create a new scan plicy t define the scan rules fr scanning cntent. Fr mre infrmatin n wrking with scan plicies, refer t Managing Scan Plicies. If selecting the Fr Cmpliance Guardian Tag Assist Manager nly checkbx belw the Scan Plicy selectin drp-dwn bx, the Actin Plicy and Filter Plicy will be grayed ut in this screen. Instead, in SharePint, thrugh activating the Cmpliance Guardian Tag Assist Manager feature, yu can manually scan the selected cntent based n the scan plicy defined in Cmpliance Guardian, yu can change the search results accrding t yur requirements. *Nte: Only used fr scanning dcuments. Fr mre detailed abut using the Cmpliance Guardian Tag Assist Manager feature in SharePint, refer t Using Cmpliance Guardian Tag Assist Manager in SharePint. Actin Plicy Select an actin plicy frm the drp-dwn list r create a new actin plicy t define the actins t the cntent that will be scanned ut. Fr mre infrmatin n wrking with actin plicies, refer t Cnfiguring Actin Plicies. Alert Specify whether t send ut an alert when an errr ccurs during the prcess f scanning a file r when a tag fails t be added t a file. If yu chse t send ut alert s when an errr ccurs, cnfigure the recipients by selecting the crrespnding checkbxes. Yu must select a default template befre select the recipients. Select the New Ntificatin Template link t create a new template. Creatr template Select this checkbx t send an alert t the creatr f the specified file. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. Mdifier template Select this checkbx t send an alert t the last mdifier f the specified file. If this ptin is selected, yu must select an e- mail template frm the crrespnding drp-dwn list. If yu d nt select an e- mail template, Cmpliance Guardian will use the default template. User in the selected ntificatin file Select this checkbx t send an alert e- mail t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the appeared drp-dwn list. Yu can als select the New Ntificatin Prfile link t create a new ntificatin prfile. Fr mre infrmatin, refer t User Ntificatin Settings. *Nte: Even thugh there may be mre than ne errr when scanning a file, the alert e- mail will nly be sent when the first errr ccurs. Cmpliance Guardian Installatin and Administratin User Guide 203

204 After cnfiguring the recipients, chse ne template frm the template drp-dwn list; yu can als select the New template link t create a new template. Fr mre infrmatin, refer t Cnfiguring Templates. Filter Plicy Select a filter plicy frm the drp-dwn list r create a new plicy t limit the scpe f the jb. Fr mre infrmatin n wrking with filter plicies, refer t Cnfiguring Filter Plicies. Custm Uplad Page Select a custm uplad page. This feature will allw users t jump t the Cmpliance Guardian uplad page when uplading files t SharePint. Fr mre infrmatin, refer t Enabling Custm Uplad Page. The functin supprts SharePint 2013 and SharePint 2010 OnPremises. SharePint Online is nt supprted. *Nte: Make sure SP2013CustmUpladPage.wsp r SP2010CustmUpladPage.wsp is deplyed befre using this functin. Fr mre infrmatin n deplying the slutin, refer t Slutin Manager. Applying Real-Time Classificatin Scanner Rules in SharePint Mde After creating a Real-Time Classificatin Scanner rule n the selected nde, select Apply n the ribbn r n the right-lwer sectin f the screen t apply the rule. *Nte: By default, the newly created site will nt inherit its parent s Real-Time Classificatin Scanner rule. Yu must first deply the SP2007InstallEventReceiver.wsp r SP2010InstallEventReceiver.wsp slutin n SharePint. Fr mre infrmatin n deplying the slutin, refer t Slutin Manager. After the SP2007InstallEventReceiver.wsp r SP2010InstallEventReceiver.wsp slutin is deplyed, the Cmpliance Guardian Newly Created Sites Real-Time Scan feature will be enabled n the Web applicatin autmatically. The newly created site s crrespnding Cmpliance Guardian Real-Time Scan feature will als be enabled, then the newly created site will apply its parent's Real-Time Classificatin rule (if the parent has applied a rule). Inheriting and Stp Inheriting Parents' Rule in SharePint Mde After applied a Real-Time Classificatin Scanner rule n the selected nde, the sub-ndes autmatically inherit this rule. On the SharePint tree, if a nde inherits its parent nde s rule, nly the inherit buttn ( ) is displayed befre this nde; if a nde des nt inherit its parent nde s rule, but has its wn rule, the stp inherit buttn ( ) icn is als displayed befre this nde. Stp Inheriting Parents Rule Stp Inheriting lgically separates the rule in the lwer level-nde frm the upper-level nde. After ne rule has been applied fr a particular level (Level A), yu can still cnfigure rules directly t levels that are higher than Level A. Hwever, if yu want t cnfigure rules at levels that are lwer than Level A, 204 Cmpliance Guardian Installatin and Administratin User Guide

205 yu must first break the rule inheritance. T break this inheritance, select Stp Inheriting in the Manage grup n the ribbn. Sme helpful ntes n the Stp Inheriting Parents rule: When breaking the rule s inheritance at a specified level, the inheritance is nly brken at this level. The rule s inheritance f the lwer levels is nt brken. After the rule s inheritance is brken, yu can apply new rules and edit the crrespnding rule settings at the lwer level. Inheriting Parents' Rule Use the inheriting feature after yu have stpped a nde s rule inheritance frm its parent nde. T manually apply a rule inheritance t a nde, select the nde that will inherit the parent nde s rule, and select Inheriting in the Manage grup n the ribbn. After selecting Inheriting, this buttn changes t Stp Inheriting. Sme fllwing helpful ntes n the Inheriting rule: By default, the Real-Time Classificatin Scanner rule cnfigured fr a higher level is inherited by the lwer levels. Yu cannt create a new rule n a nde if it inherits the rules f the higher level. Inheritance must first be brken. The inherited Real-Time Classificatin Scanner rule cannt be edited; it can nly be viewed. Once yu have brken the rule inheritance n a nde, if yu chse t inherit the rules f the higher level again, all f the rules that are added after breaking the inheritance n this nde will be remved frm the fllwing ndes: The nde that inherits the higher level rules again. The ndes that inherit the rules frm the nde abve. Enabling Custm Uplad Page T use this feature yu must first deplyed the SP2013CustmUpladPage.wsp r SP2013CustmUpladPage.wsp slutin and enabled the custm uplad page in an applied Real-Time Classificatin Scanner rule. When yu uplad a file in SharePint, Cmpliance Guardian s wn uplad page appears. Cmpliance Guardian will execute the Real-Time Classificatin Scanner rule immediately. If the file has taken actin accrding t the rule, the page with the related actin infrmatin will appear. Yu can custmize this page. Fr mre infrmatin n custmizing the SharePint page, refer t Custmizing SharePint Page and Message. If the file is upladed successfully, Cmpliance Guardian s Edit Prperties page appears, allwing yu t edit the upladed file prperties. *Nte: Fr the Redact actin, the user can cnfigure the key="filterredactresult" nde in RTSv2.exe.cnfig (apply t SharePint 2007 r SharePint 2010) r RTSv4.exe.cnfig (apply t Cmpliance Guardian Installatin and Administratin User Guide 205

206 SharePint 2013) in \AvePint\Cmpliance Guardian\Agent\bin. If the value f the nde is True, the page with the file s redactin infrmatin will nt appear after a file is upladed and redacted; if the value f the nde is False, the page with the file s redactin infrmatin will appear. *Nte: Fr SharePint 2013, the slutin des nt supprt uplading files by dragging files t SharePint. Fr SharePint 2010 and SharePint 2013, the slutin des nt supprt uplading files in bulk. The slutin des nt wrk n newly created sites r libraries. Yu must deply the SP2007InstallEventReceiver.wsp r SP2010InstallEventReceiver.wsp slutin if yu want the newly created sites inheriting their parent sites t apply the custm uplad page functin. Cmpliance Guardian allws users t use SharePint native pages when uplading files t a library. Cmplete the fllwing settings t edit the library settings Navigate t the crrespnding library, and then select Library Settings. Yu can find the Cmpliance Guardian page settings fr SharePint 2010 r Cmpliance Guardian page settings fr SharePint 2013 settings. Select the setting, and then select whether t use Cmpliance Guardian uplad page r the edit prperties page. Select OK t save the settings. The SharePint native pages will appear if the files are upladed t the crrespnding library. *Nte: SP2013CustmUpladPage.wsp is used t deply n a SharePint 2013 farm, and SP2010CustmUpladPage.wsp is used t deply n a SharePint 2010 farm. In SharePint 2013, if yu want t edit the library settings in a site cllectin that is created using the 2010 experience versin, yu must als deply SP2010CustmUpladPage.wsp n the SharePint 2013 farm. Custmizing SharePint Page and Message Cmpliance Guardian allws users t custmize pages and errr messages which appear when a Real- Time Classificatin actin is triggered. This des nt affect SharePint s wn behavirs. Althugh the user custmizes their wn errr message r page, when sme errrs ccur due t the SharePint s wn behavirs, the SharePint built-in errr page will appears. Basic Custmizatin The Basic Custmizatin feature allws yu t custmize yur wn page. Yu can use Visual Studi t create the SharePint slutin, and then create a SharePint page. Use the cde f the created page t invke the HttpCntext.Current.Items[ ErrrText ] prperty fr accessing the errr message string. T cnfigure the RTS prcess, cmplete the fllwing steps: Open RTSv2.exe.cnfig (apply t SharePint 2007 r SharePint 2010) r RTSv4.exe.cnfig (apply t SharePint 2013) in \AvePint\Cmpliance Guardian\Agent\bin. 206 Cmpliance Guardian Installatin and Administratin User Guide

207 Find the nde: <cnfiguratin><appsettings><add key="errrpagepath">. Change the value t be the path f the custmized page. Refer t Methd t Get the Page Path. Methd t Get the Page Path T get the custmized page path, cmplete the fllwing steps: Open the IIS Manager. Find the _layuts nde in the left pane f IIS Manager. Right-click the _layuts nde. A drp-dwn list appears. Select Explre and then find the custmized page. Open the page. Cpy the part after layuts/ r layuts/15/ f the page s URL, and then paste it in the <cnfiguratin><appsettings><add key="errrpagepath"> nde. Advanced Custmizatin The Advanced Custmizatin feature allws yu t custmize the pp-up message. Write the DLL file, implement the interface f Cntent.Cmpliance.Scanner.PAL.IMailFrmatter,CCS.PAL, Versin= , Culture=neutral, PublicKeyTken=fffb45e56dd478e3. Yu can receive IEnumerable<TagResult> tagresults (string the tagging infrmatin), ActinScpe (string the actin infrmatin), and the string template parameter thrugh the interface. Read and btain the data structure, and then cnvert t the desired character strings. After the character strings return, the RTS prcess will submit the strings t the SharePint builtin errr page, r submit the strings t the custmized page. Advanced Custmizatin als allws yu t frmat messages thrugh different methds. Fr example, frmat the message t plain text r HTML text. Refer t the fllwing steps: After yu finish the DLL file, the user must pen the Share.cnfig file at \AvePint\Cmpliance Guardian\Agent\bin and find the fllwing ndes: <SharedCnfig> <cnfig name="imailfrmatter" type="default"/> </SharedCnfig> Mdify the type value t the users wn class. Enter the assembly-qualified name. Install the DLL file t GAC r put it t \AvePint\Cmpliance Guardian\Agent\bin. *Nte: The DLL file will be laded t RTSv2.exe r RTSv4.exe, s please be careful t avid deleting, checking, adding, r mdifying in the DLL file (these actins are nt recmmended). Cmpliance Guardian Installatin and Administratin User Guide 207

208 Real-Time Classificatin Scanner fr Scial Netwrk The Scial Netwrk mde is used t scan cntent in yur scial netwrk in real time. Currently, Cmpliance Guardian nly supprts scanning cntent in Yammer. Launching Real-Time Classificatin Scanner Scial Netwrk Mde On the Real-Time Classificatin Scanner Hme interface, select Create n the ribbn, a drp-dwn list appears. Select Scial Netwrk frm the drp-dwn list. Cnfiguring Cnnectins t Yammer Yu must cnfigure the cnnectins befre scanning cntent in Yammer. Select Cnfigure Cnnectin n the ribbn. The Cnfigure Cnnectin interface appears. All f the cnnectins are displayed in this interface. Yu can perfrm the fllwing actins: Create Create a new cnnectin. Fr detailed infrmatin n creating a plan, refer t Creating r Editing Cnnectins. View Details View detailed settings f the selected cnnectin. Edit Edit the settings f the selected cnnectin. Fr detailed infrmatin n editing a plan, refer t Creating r Editing Cnnectins. Delete Delete the selected cnnectins. Creating r Editing Cnnectins Refer t the fllwing steps t create r edit a cnnectin: Select Create in the Manage grup n the Cnfigure Cnnectin interface. T mdify a cnnectin, select the cnnectin, and then select Edit n the ribbn. Cnfigure the fllwing settings. Name and Descriptin Enter a name and an ptinal descriptin fr the cnnectin. Yammer Client ID Enter the Client ID and Client Secret. Register an applicatin in Yammer t get the Client ID and Client Secret. *Nte: When yu register the applicatin in Yammer fr the Client ID and Client Secret, yu must enter the Cmpliance Guardian Manager URL as the Redirect URI. The frmat is: number. Fr example: The hstname in the URL must be same as the value entered in the Cntrl Service Hst field f the Cmmunicatin Cnfiguratin step when yu install Cmpliance Guardian Agent. Refer t Installing Cmpliance Guardian Agent. 208 Cmpliance Guardian Installatin and Administratin User Guide

209 Cnnect t Yammer Select the Cnnect t Yammer link. The Yammer Lg In interface appears. Enter the admin accunt username and passwrd t lg int Yammer t get permissins t scan all Yammer messages and execute specific actins. If a user cnnects t multiple netwrks n Yammer, fr example the user is an admin in ne netwrk, but is als an external user f anther netwrk. In this case, all f the assciated netwrks will be laded. Yu must chse which netwrk yu want t register in Cmpliance Guardian Manager. After the cnnectin is saved, the selected netwrk cannt be changed. If yu want t cnnect t anther ne, yu must create a new cnnectin. Reprt Database Select a Reprt Database fr string the Real-Time Classificatin Scanner result. Reprt Grup Select a Cmpliance Guardian grup frm the drp-dwn list. Once a grup is designated a Reprt Grup, all f the users in the grup will be able t view and dwnlad the reprts in Classificatin Reprt > Scial Reprt. Multiple grups can be used here; chse Select All t select all f the listed grups. Strage Lcatin Select an exprt lcatin and a strage database. The psted cntent will be backed up and stred in the exprt lcatin befre taking the classificatin actins. The strage database is used t stre the data recrds, and then cmbined with the cntent backed up in the exprt lcatin t display the crrespnding scial reprt. Agent Grup Select the agent grup that will perfrm the Scheduled Classificatin Scanner jb. Event Receiver Select if yu want t enable event receiver. Then, select an agent. If yu enable event receiver here, yu can register event receiver t Yammer server t achieve the Real-Time Classificatin Scan. Select OK t save the settings, r select Cancel t exit the interface withut saving any changes. Using Real-Time Classificatin Scanner Rules in Scial Netwrk Mde Refer t the fllwing sectin fr using Real-Time Classificatin Scanner rules t scan cntent in Yammer. Creating Real-Time Classificatin Scanner Rules T create a Real-Time Classificatin Scanner rule, cmplete the fllwing steps: Select a cnnectin in the Scpe pane. Select Create Rule frm the Rule Management grup n the ribbn. Cnfigure the fllwing rule settings: Rule Name Enter a Rule Name and an ptinal Descriptin. Cmpliance Guardian Installatin and Administratin User Guide 209

210 Apply T Select t use Web part r receiver t achieve the Real-Time Classificatin Scan. Web part Yu must first add the AvePint Yammer Cnnectr Web Part t SharePint, each time a user psts messages thrugh this Web part, Cmpliance Guardian will synchrnusly capture and scan, and then execute a specific actins. Fr mre infrmatin abut the Yammer Cnnectr Web part, refer t Using AvePint Yammer Cnnectr Web Part t Pst Messages t Yammer. *Nte: The YammerCnnectr.wsp slutin must be deplyed n SharePint in rder t use Real-Time Classificatin Scanner fr Yammer. Receiver Register event receiver t Yammer server withut dependency n SharePint. When users pst messages n Yammer, the receiver will synchrnusly get the event frm the Yammer server then dispatch messages t Cmpliance Guardian Agents t execute scan and actins. User Scpe Define the user scpe. The cntent psted by a specific user will be scanned. Add users Select the radi buttn t add users. Select the Select Users link, the Add specified users windw appears. In the left pane f the Add Users windw, enter a keywrd in the search bx, the display names and addresses f the related users wh are assciated with the netwrk are displayed in the table. Yu can als select the Advanced buttn t filter the results by user r grups. Select Add a Criterin. Rule Select Grup r User as the rule. Cnditins Select Equals r Cntains. Value Enter the value fr the rule. Select the Delete ( ) buttn t delete a rule. T add mre filters, select Add a Criterin again. *Nte: Depending n the filters yu enter, yu can change the lgical relatinships between the rules by selecting And and Or. After cnfiguring the filter rules, select Search t search fr the related users r grups. The results are displayed in the left pane f the Add Users windw. Select the user checkbxes and then select the Add buttn, the users are added int the left table. Select the Remve t cancel adding the users. Select Save n the Add specified users windw, psts f the users added in the left pane will be scanned. 210 Cmpliance Guardian Installatin and Administratin User Guide

211 Add users accrding t the cnfigured cnditins Select the Nne link, the Add users windw appears. Cnfigure the cnditin t filter by grups r users. Select Preview t review the users that meet the cnfigured cnditin in the Preview windw. Select Save t save the changes and clse the Add users windw. The psts f the users that meet the cnfigured cnditin will be scanned. Imprt file with specified users Select the radi buttn t imprt a file alng with the added user. Yu can select Dwnlad Template, and save the template file. Edit the template file t add the users and then select Imprt t imprt the file. Scan Plicy Select a scan plicy frm the drp-dwn list r create a new scan plicy t define the scan rules fr scanning cntent. Actin Plicy Select an actin plicy frm the drp-dwn list r create a new actin plicy t define what actins will be taken t the scanned cntent. Alert Send an alert when an errr ccurs during the scan. Select an prfile and an template. The alert will be sent t the recipients cnfigured in the selected alert ntificatin prfile. Stp Using Next Rule Select whether r nt t use the next rule t scan cntent. Select Save t save the changes, r select Cancel t exit the interface withut any changes. Managing and Applying Real-Time Classificatin Scanner Rules Once a rule is created, it is listed in the Real-Time Classificatin Scial Netwrk interface. Yu can manage the rules in the fllwing ways: Apply Apply the rules fr scanning cntent. If a rule is nt applied, it will nt be displayed the next time yu g t the Real-Time Classificatin Scial Netwrk interface. Edit Edit a selected rule. Delete Delete the selected rules. Enable Enable a rule. Yu must select Apply after selecting Enable fr a rule, r the rule will nt be enabled. Disable Disabled a rule. Yu must select Apply after selecting Disable fr a rule, r the rule will nt be disabled. Order Select the rder frm the Order drp-dwn list t define which rule is the first t be applied fr scanning cntent. Rule Name Select the Rule Name, the rule s Edit interface appears. Then, yu can edit the rule s settings. Cmpliance Guardian Installatin and Administratin User Guide 211

212 Using AvePint Yammer Cnnectr Web Part t Pst Messages t Yammer AvePint Yammer Cnnectr Web part is added in SharePint, which is used fr scanning the cntent pst t Yammer. Yu must cnfigure a Real-Time Classificatin Scanner rule, and Cmpliance Guardian will scan the cntent accrding t the scan plicy in the rule. The scanned reprt can be viewed in Cmpliance Guardian > Classificatin Reprt > Scial Reprt. Ensure that YammerCnnectr.wsp is deplyed befre using this feature. Fr mre infrmatin n deplying the slutin, refer t Slutin Manager. *Nte: This feature is supprted in bth SharePint 2010 and SharePint Enable the AvePint Yammer Cnnectr Feature Navigate t the crrespnding SharePint site where yu want t add the AvePint Yammer Cnnectr Web part > Site Settings > Site features, and activate the AvePint Yammer Cnnectr feature. Adding the AvePint Yammer Cnnectr Web Part T add the AvePint Yammer Cnnectr Web Part, cmplete the fllwing steps: Navigate a SharePint page, select the Page tab. Select Edit n the ribbn. And then select Edit frm the drp-dwn list. The Insert tab appears. Select the Insert tab. And then select Web Part n the ribbn. Select Custm in the Categries field f the left pane. The AvePint Yammer Cnnectr Web part appears. Select Add in the right pane. The AvePint Yammer Cnnectr Web part is added. Psting Messages t Yammer thrugh the AvePint Yammer Cnnectr Web Part After adding the AvePint Yammer Cnnectr Web part t a SharePint page, cmplete the fllwing steps t lg int Yammer: Select Lg int Yammer. Select a cnnectin. Select Lgin. Enter the accunt used t lg int Yammer. Then, select Lg In. When yu pst messages, refresh data r get messages using this lgin accunt, the messages will be scanned accrding t the Real-Time Classificatin Scanner rule cnfigured in Cmpliance Guardian. *Nte: Yu can nly pst message t ne grup at a time using the Web part. 212 Cmpliance Guardian Installatin and Administratin User Guide

213 Figure 24:AvePint Yammer Cnnectr Web Part. Scheduled Classificatin Scanner Scheduled Classificatin Scanner enables yu t define a scan scpe, and then it perfrms a scheduled r immediate jb t scan ut the related cntent accrding t the scan plicy, at last take the specified actins t the scanned cntent. Pre-Cnfiguratins Cnfiguring Scan Plicies Scan plicies define the cmpliance rules t be used when scanning the cntents in the specified scpe. T cnfigure the scan plicies, select Scan Plicy n the ribbn f the Scheduled Classificatin Scanner page t g t the Scan Plicy interface. Cmpliance Guardian Installatin and Administratin User Guide 213

214 Managing Scan Plicies Fr mre infrmatin abut hw t manage scan plicies, refer t Managing Scan Plicies in the Real- Time Classificatin Scanner sectin f this guide. Creating and Editing Scan Plicies Fr mre infrmatin abut hw t create and edit scan plicies, refer t Managing Scan Plicies in the Real-Time Classificatin Scanner sectin f this guide. Cnfiguring Filter Plicies Fr mre infrmatin, refer t Filter Plicy. Cnfiguring Actin Plicies fr SharePint Actin plicies fr SharePint allw yu t define the actins t the scanned cntents in the specified SharePint scpe. T cnfigure the actin plicies, navigate t Scheduled Classificatin Scanner > Create > SharePint, under the SharePint tab, and select Actin Plicy n the ribbn t g t the Actin Plicy interface. Managing Actin Plicies Fr mre infrmatin abut hw t manage actin plicies, refer t Managing Actin Plicies in the Real-Time Classificatin Scanner sectin f this guide. Creating and Editing Actin Plicies Fr mre infrmatin abut hw t create and edit actin plicies, refer t Creating and Editing Actin Plicies in the Real-Time Classificatin Scanner sectin f this guide. Cnfiguring Actin Plicies fr File System Actin plicies fr File System allw yu t define the actins t the scanned cntents in the specified file system. T cnfigure the actin plicies, navigate t Scheduled Classificatin Scanner > Create > File System. Under the File System tab, select Actin Plicy n the ribbn t g t the Actin Plicy interface. Managing Actin Plicies Fr mre infrmatin abut hw t manage actin plicies, refer t Managing Actin Plicies in the Real-Time Classificatin Scanner sectin f this guide. 214 Cmpliance Guardian Installatin and Administratin User Guide

215 Creating and Editing Actin Plicies T create a new actin plicy, select Create n the ribbn f the Actin Plicy interface. T mdify a previusly-cnfigured actin plicy, select the actin plicy, and then select Edit n the ribbn f the Actin Plicy interface. In the Create Actin Plicy interface r Edit Actin Plicy interface, enter a Name fr the actin plicy, and enter an ptinal Descriptin fr future reference. Then, cnfigure the Set up the actin rules sectin: Cnditins Cnfigure the actin plicy filter rules. Select Cnfigure. The Cnfigure interface appears. Cnfigure the fllwing settings as necessary: Select a categry, select Add an Actin Level Grup t add a new rule f the specified categry level. Cnfigure the fllwing fields fr the rule: Rule Select the new rule yu want t create frm the drp-dwn list. Cnditin Select the cnditin fr the rule. Value Enter a value yu want the rule t use in the text bx. Select the delete ( ) buttn t delete a rule that is n lnger needed. The filter rule cntains tw categry levels: Dcument Based n the Dcument prperty value yu specified here t define the scpe in which the files that are nt cmpliant will be affected by the specified actins. Classificatin Result Based n the tag value yu specified here t define the scpe in which the files that are nt cmpliant will be mved. Redactin Result Based n the result f whether the files have been redacted t define the scpe where nn-cmpliant files are affected by the specified actins. T add mre filters, repeat the previus step. *Nte: Depending n the filters yu enter, yu can change the rder f the rules by selecting the dwn arrw ( ) befre the Rule value, and then select the rder f the rule frm the appeared drp-dwn list t determine the pririty f the rule. Yu can als change the lgical relatinships between the rules. There are currently tw lgical relatinships: And and Or. By default, the lgic is set t And. T change the lgical relatinship, select the lgical relatinship link. The And lgical relatinship means that the cntent which meets all f the rules will be filtered and included in the result. The Or lgic means that the cntent which meets any ne f the rules will be filtered and included in the result. Cmpliance Guardian Installatin and Administratin User Guide 215

216 Select OK in the interface t save the changes, r select Cancel t return t the Create Actin Plicy interface r Edit Actin Plicy interface withut saving any changes. After yu finished cnfiguring the Cnditins settings, select the right arrw ( ) after Cnditins in the Create r Edit Actin Plicy interface t review the cnfigured settings. Actins Select an actin t handle the nn-cmpliant files which are fund by perfrming the classificatin jbs. Then select Add an actin. Repeat the abve step t add multiple actins. The actins then will be added. If the Cnfigure buttn appears after the added actin, yu must select it t cnfigure the settings fr the actin. Select the delete ( ) buttn after an actin t deselect t add this actin. Yu can change the rder f the actin cnfiguratin by selecting the textbx befre the added actin t determine the pririty f the actin. Fr details f each actin, refer t Classificatin Actins. Select the right arrw ( ) after Actins t review the cnfigured settings. Alert Specify whether t send ut an alert . This is ptinal. Select Cnfigure. The Cnfigure interface appears. Cnfigure the fllwing settings: Alerts Cnfigure the alert settings. If the actin failed t execute Specify whether t send ut an alert e- mail when a file failed t be affected by the specified actins. If yu select the checkbx, yu must select an alert prfile frm the appeared drp-dwn list. Yu can als select the New Ntificatin Prfile link t create a new ntificatin prfile, als yu must select an template frm the appeared drp-dwn list. Yu can als select the New Template t create a new template. Fr mre infrmatin, refer t User Ntificatin Settings. If the actin successfully executed Specify whether t send ut an alert when a file is successfully t be affected by the specified actins. If yu select the checkbx, yu must select an alert prfile frm the appeared drp-dwn list. Yu can als select the New Ntificatin Prfile link t create a new ntificatin prfile, als yu must select an template frm the appeared drp-dwn list. Yu can als select the New Template t create a new template. Fr mre infrmatin, refer t User Ntificatin Settings. Select OK in the interface t save the changes, r select Cancel t return t the Create Actin Plicy interface r Edit Actin Plicy interface withut saving any changes. After yu finished cnfiguring the Alert settings, select the right arrw ( ) after Alert in the Create r Edit Actin Plicy interface t review the cnfigured settings. 216 Cmpliance Guardian Installatin and Administratin User Guide

217 Select Add a Cnditin Grup t add anther cnditin grup. Select the delete ( ) buttn after a cnditin grup t delete the cnditin grup. Yu can change the rder f the cnditin grup cnfiguratin by selecting the textbx n the tp f each cnditin grup t determine the pririty f the cnditin grup. Select the right arrw ( ) r dwn arrw ( ) t expand r retract the settings f a cnditin grup. Classificatin Actins Refer t the fllwing sectins fr details abut each actin. Encrypt The scanned files that are nt cmpliant will be encrypted. After yu select Cnfigure after the Encrypt actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the appeared Cnfigure interface: Manage Encrypted Files Select ne r mre grups frm the Select the grups that have the permissin t manage the encrypted data in Cmpliance Guardian drpdwn list. The users in the selected grups can view and manage the scanned files that are nt cmpliant in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Encryptin. Select New Grup t create a new grup in Cntrl Panel. Fr mre infrmatin, refer t Cmpliance Guardian Installatin and Administratin User Guide 217

218 Accunt Manager. Security Prfile Select a security prfile fr encrypting the nn-cmpliant files. Select New Security Prfile t create a new security prfile. Fr mre infrmatin, refer t Security Prfile. Encrypt and Quarantine The scanned files that are nt cmpliant will be encrypted and then quarantined. After yu select Cnfigure after the Encrypt and Quarantine actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the appeared Cnfigure interface: Manage Encrypted Files Select ne r mre grups frm the Select the grups that have the permissin t manage the encrypted data in Cmpliance Guardian drpdwn list. The users in the selected grups can view and manage the scanned files that are nt cmpliant in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Encryptin. Select New Grup t create a new grup in Cntrl Panel. Fr mre infrmatin, refer t 218 Cmpliance Guardian Installatin and Administratin User Guide

219 Accunt Manager. Security Prfile Select a security prfile fr encrypting the nn-cmpliant files. Select New Security Prfile t create a new security prfile. Fr mre infrmatin, refer t Security Prfile. Quarantine Lcatin Select a lcatin fr string the quarantined files. Select New Exprt Lcatin t create a new exprt lcatin. Fr mre infrmatin, refer t Exprt Lcatin. Mve t the Specified Lcatin The scanned files that are nt cmpliant will be mved t the specified lcatin. After yu select Cnfigure after the Mve t the Specified lcatin actin in the Create Actin Plicy r Edit Actin Plicy interface, specify a lcatin where yu want t mve the nn-cmpliant files in the appeared Cnfigure interface. Enter the lcatin path in the frmat: \\admin-pc\c$\data r \\admin-pc\shared flder. If the path is specified in the frmat \\admin-pc\c$\data: The agent accunt must have the lcal administratr permissin t the server where the specified lcatin resides. If the path is specified in the frmat \\admin-pc\shared flder: The specified user must have the Lg n as a batch jb permissin t the server where the specified lcatin resides, r the user must be the member f the Backup Operatrs grup f the server where the specified lcatin resides. The specified user must have the Full Cntrl permissin t the shared flder. Quarantine Files The scanned files that are nt cmpliant will be quarantined. After yu select Cnfigure after the Quarantine Files actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the appeared Cnfigure interface: Manage Quarantined Files Select ne r mre grups frm the Select the grups that have the permissin t manage the quarantined data in Cmpliance Guardian drpdwn list. Users in the selected grups can view and manage the quarantined data in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Quarantine. Select New Grup t create a new grup in Cntrl Panel. Fr mre infrmatin, refer t Cmpliance Guardian Installatin and Administratin User Guide 219

220 Accunt Manager. Quarantine Lcatin Select a lcatin fr string the quarantined files. Select New Exprt Lcatin t create a new exprt lcatin. Fr mre infrmatin, refer t Managing Exprt Lcatins. Redact Files Redact the files that are nt cmpliant accrding t the Redactin type test suite selected in the crrespnding scan plicy. Quarantine Befre Redact The files that are nt cmpliant will be backed up, and the backed up files will be quarantined t a specified lcatin. The riginal files will be redacted. After yu select Cnfigure after the Quarantine Befre Redact actin in the Create Actin Plicy r Edit Actin Plicy interface, cnfigure the fllwing settings in the appeared Cnfigure interface: Manage Redacted Files Select ne r mre grups frm the Select the grups that have the permissin t manage the redacted data in Cmpliance Guardian drp-dwn list. Users in the selected grups can view and manage the quarantined data in Cmpliance Guardian > Classificatin Reprt > Incident Manager > Redactin.. Select New Grup t create a new grup in Cntrl Panel. Fr mre infrmatin, refer t 220 Cmpliance Guardian Installatin and Administratin User Guide

221 Accunt Manager. Quarantined Lcatin Select a lcatin fr string the quarantined files. Select New Exprt Lcatin t create a new exprt lcatin. Fr mre infrmatin, refer t Exprt Lcatin. Alert Only The files that meet the cnfigured cnditin in the actin plicy can be recrded in an and sent t the specified users. Navigate t the Create Actin Plicy r Edit Actin Plicy interface and select Alert Only > Cnfigure. The Cnfigure interface appears. Specify a default template Yu must select a default template befre adding recipients. Select the New Ntificatin Template link t create a new template. Creatr template Select this checkbx t send an alert t the creatr f the file. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. Mdifier template Select this checkbx t send an alert t the mdifier f the file. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. User in the selected ntificatin prfile Select this checkbx t send an alert t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the appeared drp-dwn list. Select OK t save the changes, r select Cancel t exit the Cnfigure interface withut any changes. Cnfiguring Actin Plicies fr Scial Netwrk Actin plicies fr Scial Netwrk allws yu t define the actins t the scanned cntents in Yammer. T cnfigure the actin plicies, navigate t Scheduled Classificatin Scanner > Create > Scial Netwrk. Under the Scial Netwrk tab, select Actin Plicy n the ribbn t g t the Actin Plicy interface. Managing Actin Plicies The Actin Plicy interface displays all f the actin plicies that yu have previusly created. In this interface, yu can change the number f actin plicies displayed per page and the rder in which they are displayed. Yu can perfrm the fllwing actins in the Actin Plicy interface: Create Select Create n the ribbn t create a new actin plicy. Fr infrmatin abut creating a new actin plicy, refer t Creating and Editing Actin Plicies. Cmpliance Guardian Installatin and Administratin User Guide 221

222 View Select View n the ribbn and yu will see the settings fr the selected actin plicy. Edit Select Edit n the ribbn t change the cnfiguratins fr the selected actin plicy. Fr infrmatin abut editing cnfiguratins fr an actin plicy, refer t Creating and Editing Actin Plicies. Delete Select Delete n the ribbn. A cnfirmatin windw will appear and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected actin plicies, r select Cancel t return t the Actin Plicy interface withut deleting the selected actin plicies. Creating and Editing Actin Plicies T create a new actin plicy, select Create n the ribbn. T mdify an actin plicy, select the actin plicy, and then select Edit n the ribbn. In the Create Actin Plicy interface r Edit Actin Plicy interface, cnfigure the fllwing settings: Name Enter a name fr the actin plicy. Descriptin Enter an ptinal Descriptin fr future reference. Scial Cnnectin Select a scial cnnectin. Cnfigure the Set up the actin rules sectin: Cnditins Cnfigure the actin plicy filter rules. Select Cnfigure. The Cnfigure interface appears. Refer t the fllwing steps t cnfigure the actin plicy filter rules: Select a categry, select Add an Actin Level Grup t add a new. Cnfigure the fllwing fields fr the rule: Rule Select the new rule yu want t create frm the drp-dwn list. Cnditin Select the cnditin fr the rule. Value Enter a value yu want the rule t use in the text bx. Select the delete ( ) buttn t delete a rule that is n lnger needed. The filter rule cntains tw categry levels: Message Filter Filter based n messages. Cmpliance Guardian will search fr cntent within the message. Then, take actin based n the plicy that yu ve selected. Classificatin Result Filter based n tag value. Cmpliance Guardian will search fr that tag value and then take actin n the jb. T add mre filters, repeat the previus step. 222 Cmpliance Guardian Installatin and Administratin User Guide

223 *Nte: Depending n the filters yu enter, yu can change the rder f the rules by selecting the dwn arrw ( ) befre the Rule value, and then select the rder f the rule frm the drp-dwn list t determine the pririty f the rule. Yu can als change the lgical relatinships between the rules. There are currently tw lgical relatinships: And and Or. The lgic is set t And. T change the lgical relatinship, select the lgical relatinship link. The And lgical relatinship means that the cntent which meets all f the rules will be filtered and included in the result. The Or lgic means that the cntent which meets any ne f the rules will be filtered and included in the result. Select OK t save the changes, r select Cancel t return t the Create Actin Plicy interface r Edit Actin Plicy interface withut saving any changes. After yu have finished cnfiguring the Cnditins settings, select the right arrw ( ) after Cnditins in the Create r Edit Actin Plicy interface t review the cnfigured settings. Actins Select an actin t take n the psts in the classificatin jbs. Then select Add an Actin. Repeat the abve step t add multiple actins. In sme cases the Cnfigure buttn will appear after the added actin, yu must select it and cnfigure the settings fr the actin. Click the delete ( ) buttn after an actin t deselect t add this actin. Yu can change the rder f the actin cnfiguratin by selecting the text bx befre the added actin t determine the pririty f the actin. Fr details f each actin, refer t Classificatin Actins. Select the right arrw ( ) after Actins t review the cnfigured settings. Alert Select Cnfigure. The Cnfigure interface appears. This is ptinal. Select if yu want t send an alert if the actin failed t execute r successfully executed. Then, select an template. Select OK t save the changes, r select Cancel t return t the Create Actin Plicy interface r Edit Actin Plicy interface withut saving any changes. After yu have finished cnfiguring the Alert settings, select the right arrw ( ) after Alert in the Create r Edit Actin Plicy interface t review the cnfigured settings. Select Add a Cnditin Grup t add anther cnditin grup. Select the delete buttn ( ) after a cnditin grup t delete the cnditin grup. Yu can change the rder f the cnditin grup cnfiguratin by selecting the textbx n the tp f each cnditin grup t determine Cmpliance Guardian Installatin and Administratin User Guide 223

224 the pririty f the cnditin grup. Select the right arrw ( ) r dwn arrw ( ) t expand r retract the settings f a cnditin grup. Classificatin Actins Refer t the fllwing sectin fr details abut each classificatin actin. Alert Only The psts that meet the cnfigured cnditin in the actin plicy can be recrded in an and sent t users. Navigate t the Create Actin Plicy r Edit Actin Plicy interface and select Alert Only > Cnfigure. The Cnfigure interface appears. Specify a default template Yu must select a default template befre yu can add recipients. Select the New Ntificatin Template link t create a new template. Creatr template Select this checkbx t send an alert t the creatr f the pst cntent. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. User in the selected ntificatin prfile Select this checkbx t send an alert t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the appeared drp-dwn list. Select OK t save the changes, r select Cancel t exit the Cnfigure interface withut any changes. Delete The psts that meet the cnditin cnfigured in the actin plicy will be deleted. Cnfiguring Cnnectins fr File System A cnnectin is cnfigured t be used in the Scheduled Classificatin Scanner File System Mde. If yu cnfigure a cnnectin with the file system, then the files in the cnnected file system are supprted t be scanned and have actins taken in Cmpliance Guardian. Navigate t Scheduled Classificatin Scanner > Create > File System, and select Cnfigure Cnnectins n the ribbn t enter the Cnfigure Cnnectin interface. Managing Cnnectins In the Cnfigure Cnnectin interface, yu will see a list f cnnectins. In the Cnfigure Cnnectin interface, yu can create a new cnnectin, view details abut a cnnectin, edit a previusly cnfigured cnnectin, r delete a previusly cnfigured cnnectin. Fr mre infrmatin abut creating r editing a cnnectin, refer t Creating and Editing Cnnectins. 224 Cmpliance Guardian Installatin and Administratin User Guide

225 Select Edit n the ribbn t change the cnfiguratins fr the selected cnnectin. Fr mre infrmatin abut editing cnfiguratins fr the cnnectin, refer t Cnfiguring Cnnectins fr File System. T view a cnnectin, select it frm the list f previusly cnfigured cnnectins, and then select View Details n the ribbn. T delete a cnnectin, select it frm the list f previusly cnfigured cnnectins, and then select Delete n the ribbn. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected cnnectin, r select Cancel t return withut deleting it. Creating and Editing Cnnectins T create a new cnnectin, select Create in the Manage grup f the Cnfigure Cnnectin page. T mdify a previusly cnfigured cnnectin, select the cnnectin, and then select Edit n the ribbn. In the Create Cnnectin r Edit Cnnectin interface, cnfigure the fllwing settings: Name and Descriptin Enter a name fr this cnnectin. Yu can als enter an ptinal descriptin t distinguish this cnnectin frm the thers. Type Select the file system type fr the cnnectin. Cnnectin Cnfigure the fllwing settings: Agent Grup Select the agent grup that will perfrm the Scheduled Classificatin Scanner jb. UNC Path Specify a path in the frmat \\admin-pc\c$\data r \\admin- PC\shared flder, the files in the specified lcatin are supprted t be scanned. Username Specify a username that can access the specified lcatin. Passwrd Specify a passwrd. *Nte: The user must have the fllwing permissins If the path is specified in the frmat \\admin-pc\c$\data: The specified user must have the lcal administratr permissin t the cnnected server. If the path is specified in the frmat \\admin-pc\shared flder: The specified user must have the Lg n as a batch jb permissin t the cnnected server, r the user must be the member f the Backup Operatrs grup f the cnnected server. The specified user must have the Full Cntrl permissin t the shared flder. After yu are satisfied with the cnfiguratin f the cnnectin, select OK t save this cnnectin. If yu d nt want t save the current cnfiguratin, select Cancel t cancel the cnfiguratin. Cmpliance Guardian Installatin and Administratin User Guide 225

226 Getting Started Refer t the sectins belw fr imprtant infrmatin n getting started with Scheduled Classificatin Scanner. Launching Scheduled Classificatin Scanner T launch Scheduled Classificatin Scanner, cmplete the fllwing steps: 1. Lg in t Cmpliance Guardian. If yu are already in the sftware, g t the welcme page. Frm the welcme page, all f the prducts are displayed. 2. Select the Classificatin Scanner t launch its interface. The Classificatin Scanner interface appears. Select the Scheduled Classificatin Scanner tab (the default selected tab). 3. Alternatively, yu can select Administratin n the tp-left crner, and select the Classificatin Scanner tab n the appeared navigatin bar. Then, select the Scheduled Classificatin Scanner tab in the appeared interface. Figure 25: Launching Scheduled Classificatin Scanner. 226 Cmpliance Guardian Installatin and Administratin User Guide

227 Hme Page Overview The Cmpliance Scanner hme page displays a list f all f yur previusly created Scheduled Classificatin Scanner plans. Als yu can select Create t select the Scheduled Classificatin Scanner Mde: SharePint r File System, and then create a plan. Figure 26: Scheduled Classificatin Scanner hme page. Selecting Mde Select Create n the ribbn, a drp-dwn list appears. Select the crrespnding mde frm the drpdwn list: SharePint r File System. Then yu can enter the crrespnding mde, and cnfigure a plan t scan bjects in SharePint r file system, and then perfrm the specified actins t the files in SharePint r file system. Managing Scheduled Classificatin Scanner Plans The Scheduled Classificatin Scanner hme page displays a list f all f yur previusly created Scheduled Classificatin Scanner plans. Als it displays the scan plicy and actin plicy that are selected in the plan. Yu can als see the plan type in the Scpe Type clumn. Yu may perfrm any f the fllwing actins n a selected plan: Cmpliance Guardian Installatin and Administratin User Guide 227

228 View Details Select View Details n the ribbn t see the details f the selected plan. Here yu can als select Edit n the ribbn t make changes t the plan s settings. Yu will be brught t the Edit page where yu can change the settings fr this plan. After editing the settings, select Save n the ribbn t save the plan. T save a changed plan as a new ne, select Save As n the ribbn. At any time, select Cancel n the ribbn t return t the Plan Manager withut saving any f yur changes. Edit Select Edit n the ribbn t make changes t the selected plan s settings. Yu will be brught t the Edit page where yu can change the settings fr this plan. Select Save n the ribbn t save the plan. T save a changed plan as a new ne, select Save As n the ribbn. At any time, select Cancel n the ribbn t return t the Plan Manager withut saving any f yur changes. *Nte: If yu change the scan plicy when editing a Scheduled Classificatin Scanner plan, r change the database plicy when editing a Scheduled Classificatin Scanner plan, after yu save the changes, the next time the plan will mandatrily run a full jb althugh yu select t run an incremental jb, thus t guarantee that the jb can perfrm crrectly, as well as guarantee the jb data is generated crrectly. Delete Select Delete n the ribbn t delete the selected plan. A warning message will appear t cnfirm the deletin. Select OK t delete the selected plan, r select Cancel t return t Plan Manager withut deleting the selected plan. Test Run Select Test Run n the ribbn t simulate the executin f the selected plan. After yu select Test Nw, a pp-up windw appears. Yu can select t run a full jb r an incremental jb. If Incremental Scan is selected, the Reference Time ptin is enabled. Reference Time Chse whether t scan cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Minute(s), Hur(s), Day(s), r Mnth(s) frm the drp-dwn list. *Nte: It is recmmended that yu specify a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. Yu can see the review details abut the plan s executin in Jb Mnitr. Run Nw Select Run Nw n the ribbn t execute the plan immediately. After yu select Run Nw, a pp-up windw appears. Yu can select t run a full jb r an incremental jb. If Incremental Scan is selected, the Reference Time ptin is enabled. Reference Time Chse whether t scan cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Minute(s), Hur(s), Day(s), r Mnth(s) frm the drp-dwn list. 228 Cmpliance Guardian Installatin and Administratin User Guide

229 *Nte: It is recmmended that yu specify a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. Yu can see the review details abut the plan s executin in Jb Mnitr. Scheduled Classificatin Scanner fr SharePint The SharePint Mde allws yu t define a scan scpe in SharePint, and then it perfrms a scheduled r immediate jb t scan ut the related cntent accrding t the scan plicy, at last take the specified actins t the scanned cntent. *Nte: The psts and replies in SharePint 2013 Newsfeed and the ntes in Nte Bard in SharePint are als supprted t be scanned. Launching Scheduled Classificatin Scanner SharePint Mde On the Scheduled Classificatin Scanner Hme interface, select Create n the ribbn, a drp-dwn list appears. Select SharePint frm the drp-dwn list, then yu will be brught t the Scheduled Classificatin SharePint Mde. Scanning User Prfiles Cmpliance Guardian supprts scanning user prperties and scial ntes in user prfiles. Cmpliance Guardian accesses the user prfiles thrugh the persnal site. Select the related persnal site nde in the farm tree t scan user prperties in the crrespnding user prfile. Hwever, if the persnal site is nt created, yu cannt scan the crrespnding user prfile since there is n persnal site nde in the tree. Cmpliance Guardian Scheduled Classificatin Scanner prvides a methd t scan the user prfile when the persnal site is nt created: The User Prfile Services nde is laded n the farm tree by changing the UserPrfile Used="false" (change the value false t true) nde in the CmplianceSetting.cnfig file. Refer t Cnfiguring t Scan User Prfiles fr details. Then, select the crrespnding User Prfile Service nde, and cnfigure the related plan settings t scan the user prperties and ntes. Cmpliance Guardian Installatin and Administratin User Guide 229

230 Figure 27: User Prfile Service nde in Scheduled Classificatin Scanner. Perfrming a Scheduled Classificatin Scanner Plan in Wizard Mde T cnfigure a Scheduled Classificatin Scanner plan using Wizard Mde, cmplete the fllwing steps: Select the scpe f the cntent yu want t scan: a. Frm the Scpe panel n the left, select the farm that cntains the relevant SharePint cntent. Yu can enter a keywrd int the Search bx abve the farm tree t filter ut the relevant SharePint cntent. b. Select the relevant cntent frm which yu want t perfrm further peratins by selecting the checkbxes t the left f the cntent. Select Plan Builder frm the Plan Management grup n the ribbn, select Wizard Mde frm the drp-dwn menu, r yu can directly select Start with Wizard Mde n the landing page. Enter a Plan Name fr the plan and an ptinal Descriptin. Select Next n the ribbn r n the lwer-right sectin f the screen. The Reprt Settings screen appears. Cnfigure the fllwing reprt settings: Reprt Database Select a reprt database fr string the jb result. Reprt Grup Select a Cmpliance Guardian grup frm the drp-dwn list. Once a grup is specified as the Reprt Grup, all f the users in the specified grup will be able t access the Classificatin Reprt > Actin Reprt mdule and perfrm actins t the 230 Cmpliance Guardian Installatin and Administratin User Guide

231 related files. Multiple grups can be specified here. Chse Select All t select all f the listed grups. Select Next n the ribbn r n the lwer-right sectin f the screen. The Scan Settings screen appears. Cnfigure the fllwing scan settings: Actin Plicy Select an actin plicy frm the drp-dwn list r create a new actin plicy t define the actins t the cntent that will be scanned ut. Fr mre infrmatin n wrking with actin plicies, refer t Managing Actin Plicies. Scan Plicy Select a scan plicy frm the drp-dwn list r create a new scan plicy t define the scan rules fr scanning cntent. Fr mre infrmatin n wrking with scan plicies, refer t Cnfiguring Scan Plicies. Scan File/Item Versins Specify the methd fr scanning file/item versins: Scan the current versin Only the current versins f the files/items defined in the jb scpe are supprted t be scanned. The files/items that are nt cmpliant will be treated accrding t actins defined in the actin plicy. Scan all versins The files/items and all their previus versins defined in the jb scpe are supprted t be scanned. If the current versin f a scanned file/item r ne f its previus versins is nt cmpliant, the entire file/item (the current versin f the file/item alng with its previus versins) will be treated accrding t actins defined in the actin plicy. Alert Specify whether t send ut an alert when an errr ccurs during the prcess f scanning a file r when a tag fails t be added t a file. If yu chse t send ut alert s when an errr ccurs, cnfigure the recipients by selecting the crrespnding checkbxes. Yu must select a default template befre select the recipients. Select the New Ntificatin Template link t create a new template. Creatr template Select this checkbx t send an alert t the creatr f the specified file. If this ptin is selected, yu must select an template frm the crrespnding drp-dwn list. If yu d nt select an template, Cmpliance Guardian will use the default template. Mdifier template Select this checkbx t send an alert t the last mdifier f the specified file. If this ptin is selected, yu must select an e- mail template frm the crrespnding drp-dwn list. If yu d nt select an e- mail template, Cmpliance Guardian will use the default template. User in the selected ntificatin file Select this checkbx t send an alert e- mail t the recipients cnfigured in the selected alert ntificatin prfile. If this ptin is selected, yu must select an alert ntificatin prfile frm the appeared drp-dwn list. Yu can als select the New Ntificatin Prfile link t create a new ntificatin prfile. Fr mre infrmatin, refer t User Ntificatin Settings. *Nte: Even thugh there may be mre than ne errr when scanning a file, the alert e- mail will nly be sent when the first errr ccurs. Cmpliance Guardian Installatin and Administratin User Guide 231

232 After cnfiguring the recipients, chse ne template frm the template drp-dwn list. Yu can als select the New template link t create a new template. Fr mre infrmatin, refer t Cnfiguring Templates. Filter Plicy Select a filter plicy frm the drp-dwn list r create a new plicy t limit the scpe f the jb. Fr mre infrmatin n wrking with filter plicies, refer t Filter Plicy. Select Next n the ribbn r n the lwer-right sectin f the screen. The Schedule screen appears. Select a scheduling ptin: N schedule Select this ptin t cnfigure the jb t nt run n a schedule (the jb must be manually initiated). Cnfigure the schedule myself Cnfigure a custmized schedule, and run the plan by schedule. Select Add Schedule and the Add Schedule windw pps up. Cnfigure the fllwing settings fr the schedule: Optins Select the type f the scan fr this plan: Full Scan r Incremental Scan. Full Scan scans all f the cntent in the scpe defined in the plan, while Incremental Scan nly scans the cntent that has been mdified since the last incremental r full scan jb. If selecting Incremental Scan, the Reference Time ptin is enabled. Reference Time Chse whether t scan cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Minute(s), Hur(s), r Day(s) frm the drp-dwn list. *Nte: It is recmmended specifying a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. Schedule Settings Specify the frequency t run the rerunning schedule. Enter an integer int the text bx and select Minute(s), Hur(s), Day(s), Week(s), r Mnth(s) frm the drp-dwn list. Range f Recurrence Specify when t start and end the running recurring schedule. Start time Set up the time t start the plan and Time Zne can be changed under the Start time. Nte that the start time cannt be earlier than the current time. N end date Select this ptin t repeat running the plan until being stpped manually. 232 Cmpliance Guardian Installatin and Administratin User Guide

233 End after specified ccurrence(s) Select this ptin t stp the plan after specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f plans. Select OK t save the settings. After cnfiguring the schedule fr this replicatin jb, select Calendar View t view the jb in a calendar view. Select Next n the ribbn r n the lwer-right sectin f the screen. The Advanced screen appears. Cnfigure the fllwing advanced settings: Agent Grup Select the agent grup fr the Scheduled Classificatin Scan Plan. Fr mre infrmatin n wrking with agent grups, refer t Agent Grups. Ntificatin Cnfigure the ntificatin settings. Scan Result Select this t send an ntificatin t the specified users. The cntains the infrmatin f the failed files and/r passed files. Scpe Level Select a scpe level. The scan result will be reprted based n each level in the . Reprt Level Select t have the failed files and passed files included in the . Receiver Cnfigure the receiver. Select Address, and then select Add a Ntificatin Address. Enter the address t which the will be sent, and select a crrespnding template. Select SharePint Grup, and then select Add a SharePint Grup. Enter the SharePint grup whse users will receive the , and then enter the crrespnding template. Nte that the SharePint grup must exist in the selected SharePint scpe. Select Add a Ntificatin Address r Add a SharePint Grup again t add mre addresses r grups. Select the delete ( an address r grup. ) buttn t delete Jb Reprt Select this checkbx t send an ntificatin with a jb reprt. Select a ntificatin prfile frm the Select a prfile with address nly drp-dwn list, r chse t create a new ntificatin prfile. Fr mre infrmatin n cnfiguring the ntificatin prfiles, refer t Cnfiguring Receive Settings. User Prfiles Filter This ptin appears nly when yu select the User Prfile Service nde in the tree. Cnfigure this ptin if yu want t filter the user prfiles. Select dwnlad a template t dwnlad the template file which is used fr filtering user prfiles. Edit the file accrding t yur wn requirement and then select Uplad t uplad the cnfigured file. Refer t Editing Template File fr Filtering User Prfiles fr details abut editing the template file. Cmpliance Guardian Installatin and Administratin User Guide 233

234 Select Next n the ribbn r n the lwer-right sectin f the screen. The Overview screen appears. Review and edit the plan selectins n the Overview screen. T make changes, select (Edit). This link takes yu t the crrespnding setting page, and allws yu t edit the cnfiguratin. Select Finish r Finish and Run Nw n ribbn r n the lwer-right sectin f the screen. The plan is nw listed in Plan Manager. If yu select Finish and Run Nw, the Run Nw interface pps up t allw yu t chse Optins: Full Scan Scans all f the cntent in the scpe defined in the plan. Incremental Scan Scans the cntent that has been mdified (Add, Delete, and Mdify) since the last incremental r full scan jb. If selecting Incremental Scan, the Reference Time ptin is enabled. Reference Time Chse whether t replicate cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t replicate cntents created r mdified. Enter an integer int the text bx and select Minute(s), Hur(s), r Day(s) frm the drp-dwn list. *Nte: The default maximum strage time f a SharePint change lg is 60 days. If the reference time yu cnfigure is greater than 60 days, Cmpliance Guardian nly runs an incremental scan fr the mdificatins within 60 days. Fr the mdificatins exceed 60 days, Cmpliance Guardian runs full replicatin. Select OK t run the jb. Perfrming a Scheduled Classificatin Scanner Plan in Frm Mde Frm Mde ffers the ability t run a quick scan jb by prviding a truncated versin f all f the Scheduled Classificatin Scan Plan Wizard screens n ne page. Select the scpe f the cntent yu want t scan, select Plan Builder frm the Plan Management grup n the ribbn, and then select Frm Mde frm the drp-dwn menu, r yu can directly select Start with Frm Mde n the landing page. Fr detailed infrmatin abut hw t cnfigure the Scheduled Classificatin Scan Plan settings, refer t Perfrming a Scheduled Classificatin Scanner Plan in Wizard Mde. *Nte: If yu are unfamiliar with this plan creatin prcess, it is nt recmmended that yu use this mde t cnfigure settings. Scheduled Classificatin Scanner fr File System The File System Mde allws yu t cnfigure cnnectin with a lcatin, and then perfrm a scheduled r immediate jb t scan ut the related cntent accrding t the scan plicy, at last take the specified actins t the scanned cntent in the lcatin. 234 Cmpliance Guardian Installatin and Administratin User Guide

235 Launching Cmpliance Guardian Scanner File System Mde On the Scheduled Classificatin Scanner Hme interface, select Create n the ribbn, a drp-dwn list appears. Select File System frm the drp-dwn list, then yu will be brught t the Scheduled Classificatin File System Mde. Perfrming a Scheduled Classificatin Scanner Plan in Wizard Mde T cnfigure a Scheduled Classificatin Scanner plan using Wizard Mde, cmplete the fllwing steps: Frm the Scpe panel n the left, select ne r mre cnnectins. Yu can enter a keywrd int the Search bx abve the cnnectins t filter ut the relevant cnnectins. Select Plan Builder frm the Plan Management grup n the ribbn, select Wizard Mde frm the drp-dwn menu, r yu can directly select Start with Wizard Mde n the landing page. Enter a Plan Name fr the plan and an ptinal Descriptin. Select Next n the ribbn r n the lwer-right sectin f the screen. The Reprt Settings screen appears. Select a Reprt Database fr string the jb result. Select Next n the ribbn r n the lwer-right sectin f the screen. The Scan Settings screen appears. Cnfigure the fllwing scan settings: Filter Plicy Select a filter plicy frm the drp-dwn list r create a new plicy t limit the scpe f the jb. Fr mre infrmatin n wrking with filter plicies, refer t Filter Plicy. Scan Plicy Select a scan plicy frm the drp-dwn list r create a new scan plicy t define the scan rules fr scanning cntent. Fr mre infrmatin n wrking with scan plicies, refer t Cnfiguring Scan Plicies. Scan Hidden Files Optin Select whether r nt t scan the hidden files in the specified file system. Alert If yu want Cmpliance Guardian t send an when an errr ccurs during the file scan, then select an prfile t specify the users wh will receive the e- mail, and select an template. Yu can als select the New Template link t create a new template. Fr mre infrmatin, refer t the Cnfiguring Templates sectin in this user guide. *Nte: Even thugh there may be mre than ne errr when scanning a file, the alert e- mail will nly be sent when the first errr ccurs. Actin Plicy Select an actin plicy frm the drp-dwn list r create a new actin plicy t define the actins t the cntent that will be scanned ut. Fr mre infrmatin n wrking with actin plicies, refer t Managing Actin Plicies. Select Next n the ribbn r n the lwer-right sectin f the screen. The Schedule screen appears. Cmpliance Guardian Installatin and Administratin User Guide 235

236 Select a scheduling ptin: N schedule Select this ptin t cnfigure the jb t nt run n a schedule (the jb must be manually initiated). Cnfigure the schedule myself Cnfigure a custmized schedule, and run the plan by schedule. Select Add Schedule and the Add Schedule windw pps up. Cnfigure the fllwing settings fr the schedule: Optins Select the type f the scan fr this plan: Full Scan r Incremental Scan. Full Scan scans all f the cntent in the scpe defined in the plan, while Incremental Scan nly scans the cntent that has been mdified since the last incremental r full scan jb. If selecting Incremental Scan, the Reference Time ptin is enabled. Reference Time Chse whether t scan cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t scan cntents created r mdified. Enter an integer int the textbx and select Minute(s), Hur(s), r Day(s) frm the drp-dwn list. *Nte: It is recmmended specifying a reference time when the recurrence schedule cnfigured in Range f Recurrence is End after 1 ccurrence. Schedule Settings Specify the frequency t run the rerunning schedule. Enter an integer int the text bx and select Minute(s), Hur(s), Day(s), Week(s), r Mnth(s) frm the drp-dwn list. Range f Recurrence Specify when t start and end the running recurring schedule. Start time Set up the time t start the plan and Time Zne can be changed under the Start time. Nte that the start time cannt be earlier than the current time. N end date Select this ptin t repeat running the plan until being stpped manually. End after specified ccurrence(s) Select this ptin t stp the plan after specified ccurrences that yu cnfigure in the text bx. End by Set up the time t end the recurrence f plans. Select OK t save the settings. After cnfiguring the schedule fr this replicatin jb, select Calendar View t view the jb in a calendar view. Select Next n the ribbn r n the lwer-right sectin f the screen. The Advanced screen appears. 236 Cmpliance Guardian Installatin and Administratin User Guide

237 Cnfigure the fllwing advanced settings: Ntificatin Allw yu t chse the type f ntificatin reprt, and designate which user will receive an ntificatin reprt. Select a Ntificatin Prfile yu previusly created frm the drp-dwn menu. Select View beside the drp-dwn menu t view details f the Ntificatin Prfile r select New Ntificatin Prfile frm the drp-dwn menu. Fr infrmatin n creating a ntificatin prfile, refer t User Ntificatin Settings. Select Next n the ribbn r n the lwer-right sectin f the screen. The Overview screen appears. Review and edit the plan selectins n the Overview screen. T make changes, select (Edit). This link takes yu t the crrespnding setting page, and allws yu t edit the cnfiguratin. Select Finish r Finish and Run Nw n ribbn r n the lwer-right sectin f the screen. The plan is nw listed in Plan Manager. If yu select Finish and Run Nw, the Run Nw interface pps up t allw yu t chse Optins: Full Scan Scans all f the cntent in the scpe defined in the plan. Incremental Scan Scans the cntent that has been mdified (Add, Delete, and Mdify) since the last incremental r full scan jb. If selecting Incremental Scan, the Reference Time ptin is enabled. Reference Time Chse whether t replicate cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t replicate cntents created r mdified. Enter an integer int the text bx and select Minute(s), Hur(s), r Day(s) frm the drp-dwn list. *Nte: The default maximum strage time f a SharePint change lg is 60 days. If the reference time yu cnfigure is greater than 60 days, Cmpliance Guardian nly runs an incremental scan fr the mdificatins within 60 days. Fr the mdificatins exceed 60 days, Cmpliance Guardian runs full replicatin. Select OK t run the jb. Perfrming a Scheduled Classificatin Scanner Plan in Frm Mde Frm Mde ffers the ability t run a quick scan jb by prviding a truncated versin f all f the Scheduled Classificatin Scan Plan Wizard screens n ne page. Select the Scpe f the cntent yu want t scan, select Plan Builder frm the Plan Management grup n the ribbn, and then select Frm Mde frm the drp-dwn menu, r yu can directly select Start with Frm Mde n the landing page. Fr detailed infrmatin abut hw t cnfigure the Scheduled Classificatin Scan Plan settings, refer t Perfrming a Scheduled Classificatin Scanner Plan in Wizard Mde. *Nte: If yu are unfamiliar with this plan creatin prcess, it is nt recmmended that yu use this mde t cnfigure settings. Cmpliance Guardian Installatin and Administratin User Guide 237

238 Scheduled Classificatin Scanner fr Scial Netwrk The Scial Netwrk Mde allws yu t cnfigure cnnectin with a scial netwrk, Currently, Cmpliance Guardian nly supprts scanning cntent in Yammer. Cmpliance Guardian allws users t scan cntent accrding t a predefined scan plicy and then take actin n that cntent. Launching Scheduled Classificatin Scanner Scial Netwrk Mde On the Scheduled Classificatin Scanner Hme interface, select Create n the ribbn, a drp-dwn list appears. Select Scial Netwrk frm the drp-dwn list t enter the Scheduled Classificatin Scial Netwrk Mde t scan cntent in Yammer. Cnfiguring Cnnectins t Yammer Fr mre infrmatin, refer t Cnfiguring Cnnectins t Yammer. Perfrming a Scheduled Classificatin Scanner Plan in Wizard Mde T cnfigure a Scheduled Classificatin Scanner plan using Wizard Mde, cmplete the fllwing steps: Frm the Scpe panel n the left, select a cnnectin. Select Plan Builder frm the Plan Management grup n the ribbn, select Wizard Mde frm the drp-dwn menu, r yu can directly select Start with Wizard Mde n the landing page. Enter a Plan Name fr the plan and an ptinal Descriptin. Select Next n the ribbn r n the lwer right sectin f the screen. The User Scpe screen appears. Define the fllwing ptins: Add users Select the radi buttn t add users. Select the Select Users link, the Add specified users windw appears. In the left pane f the Add Users windw, enter a keywrd in the search bx, the names and addresses f the related users wh are assciated with the netwrk are displayed in the table. Yu can als select the Advanced buttn t filter the results by user r grups. Select Add a Criterin. Rule Select Grup r User as the rule. Cnditins Select Equals r Cntains. Value Enter the value fr the rule. Select the Delete ( ) buttn t delete a rule. T add mre filters, select Add a Criterin again. 238 Cmpliance Guardian Installatin and Administratin User Guide

239 *Nte: Depending n the filters yu enter, yu can change the lgical relatinships between the rules by selecting And and Or. After cnfiguring the filter rules, select Search t search fr the related users r grups. The searched ut users r the users in the searched ut grup are displayed in the left pane f the Add Users windw. Select the user checkbxes and then select the Add buttn, the users are added int the left table. Select the Remve t cancel adding the users. Select Save n the Add Users windw, psts f the users added in the left pane will be scanned. Add users accrding t the cnfigured cnditins Select the Nne link, the Add users windw appears. Cnfigure the cnditin t filter by grups r users. Select Preview t review the users that meet the cnfigured cnditin in the Preview windw. Select Save t save the changes and clse the Add users windw. The psts f the users that meet the cnfigured cnditin will be scanned. Imprt file with specified users Select the radi buttn t imprt a file alng with the added users. Yu can select Dwnlad Template, and save the template file. Edit the template file t add the users and then select Imprt t imprt the file. Select Next n the ribbn r n the lwer right sectin f the screen. The Scan Settings screen appears. Cnfigure the fllwing scan settings: Scan Plicy Select a scan plicy frm the drp-dwn list r create a new scan plicy. Scan File/Nte Versins Select t scan the current versin r all f the versins f the file r nte. Actin Plicy Select an actin plicy frm the drp-dwn list r create a new actin plicy. Select Next n the ribbn r n the lwer right sectin f the screen. The Schedule screen appears. Select a scheduling ptin: N schedule Select this ptin if yu d nt want t add a schedule and run the jb manually. Cnfigure the schedule myself Cnfigure a custmized schedule. Select Add Schedule and the Add Schedule windw pps up. Cnfigure the fllwing settings fr the schedule: Optins Select the type f the scan fr this plan: Full Scan r Incremental Scan. Full Scan will scan all f the cntent in the scpe defined in the plan, while Cmpliance Guardian Installatin and Administratin User Guide 239

240 an Incremental Scan nly scans the cntent that has been mdified since the last incremental r full scan jb. If yu select Incremental Scan, the Reference Time ptin is enabled. Reference Time Scans cntent created r mdified during a selected interval. If yu chse t use a reference time, select the time t scan cntents created r mdified. Enter an integer int the text bx and select Minute(s), Hur(s), r Day(s) frm the drp-dwn list. Schedule Settings Select the frequency t which yu want t run the scan.. Enter an integer int the text bx and select Minute(s), Hur(s), Day(s), Week(s), r Mnth(s) frm the drp-dwn list. Range f Recurrence Specify the Start time fr the scan jb. Select ne f the fllwing ptins fr the end time and cnfigure its settings: N end date Select this ptin t cntinue running the jb accrding t the schedule until yu manually stp it. End after specified ccurrence(s) Select this ptin t stp the plan after a selected number f times. End by Set up the time t end the recurrence f plans. Select OK t save the settings. After cnfiguring the schedule fr this replicatin jb, select Calendar View t view the jb in a calendar view. Select Next n the ribbn r n the lwer right sectin f the screen. The Advanced screen appears. Cnfigure the fllwing advanced settings: Alert Send an alert when an errr ccurs during the prcess f scanning cntent. Select an prfile, and an template. The alert will be sent t the recipients cnfigured in the selected alert ntificatin prfile. Ntificatin Select a Ntificatin Prfile frm the drp-dwn menu. Select View beside the drp-dwn menu t view details f the Ntificatin Prfile r select New Ntificatin Prfile frm the drp-dwn menu. Fr infrmatin n creating a ntificatin prfile, refer t User Ntificatin Settings. Select Next n the ribbn r n the lwer right sectin f the screen. The Overview screen appears. T make changes, select Edit. Select Finish r Finish and Run Nw n ribbn r n the lwer right sectin f the screen. The plan is nw listed in Plan Manager. If yu select Finish and Run Nw, the Run Nw interface pps-up t allw yu t chse Optins: Full Scan Scans all f the cntent in the scpe defined in the plan. 240 Cmpliance Guardian Installatin and Administratin User Guide

241 Incremental Scan Scans the cntent that has been mdified (Add, Delete, and Mdify) since the last incremental r full scan jb. If yu select Incremental Scan, the Reference Time ptin is enabled. Select OK t run the jb. Reference Time Chse whether t replicate cntents created r mdified at a specified interval. If yu chse t use a reference time, specify the time t replicate cntents created r mdified. Enter an integer int the text bx and select Minute(s), Hur(s), r Day(s) frm the drp-dwn list. Cmpliance Guardian Installatin and Administratin User Guide 241

242 Perfrming a Scheduled Classificatin Scanner Plan in Frm Mde. Select the Scpe f the cntent yu want t scan, select Plan Builder frm the Plan Management grup n the ribbn. Select Frm Mde frm the drp-dwn menu, r yu can directly select Start with Frm Mde n the landing page. Fr detailed infrmatin abut hw t cnfigure the Scheduled Classificatin Scan Plan settings, refer t Perfrming a Scheduled Classificatin Scanner Plan in Wizard Mde. *Nte: If yu are unfamiliar with this plan creatin prcess, it is nt recmmended that yu use this mde t cnfigure settings. Using Cmpliance Guardian Features in SharePint Refer t the fllwing sectins abut the Cmpliance Guardian Tag Assist Manager feature, and Cmpliance Guardian Quarantine Manager features. Using Cmpliance Guardian Tag Assist Manager in SharePint Cmpliance Guardian Tag Assist Manager is used in cmbinatin with the Fr Cmpliance Guardian Tag Assist Manager nly ptin in Real-Time Classificatin Scanner. It allws yu t manually scan the file in the specified scpe defined in Cmpliance Guardian and view the scanned results, r yu can directly mdify the tag values fr the scanned file withut mdifying the checks. Ensure that SP2007AssistManager.wsp r SP2010AssistManager.wsp r SP2013AssistManager.wsp is deplyed befre using this feature. Fr mre infrmatin n deplying the slutin, refer t Slutin Manager. *Nte: This feature is supprted in SharePint 2007, SharePint 2010, and SharePint Refer t the fllwing steps t use Cmpliance Guardian Tag Assist Manager in SharePint 2007: Navigate t the crrespnding SharePint site (where the cntent yu want t scan is) > Site Settings > Site features, and activate the Cmpliance Guardian Tag Assist Manager feature. *Nte: At a minimum, t use the Cmpliance Guardian Tag Assist Manager feature in a site, the user must have the fllwing required six site permissins assigned: Manage Lists Edit Items View Items View Applicatin Pages View Pages Open 242 Navigate t the crrespnding dcument library. Select the dwn arrw buttn ( ) befre the file yu want t scan, and select Cmpliance Guardian Tag Assist Manager frm the appeared Cmpliance Guardian Installatin and Administratin User Guide

243 drp-dwn list. The Cmpliance Guardian Tag Assist Manager interface appears. There are three clumns in the table f this interface: Tag Name Display the tag names defined in the crrespnding checks. The values in this clumn cannt be changed. Original Value Display the tag values that are added fr the file in the last scan. If yu have nt added any tag values in the last scan, there will be n value in this clumn. Current Value Display the file s current tag value based n the checks. The current values can be mdified accrding t yur wn requirements. Yu can select t check the checkbx t the right f the tag value t determine which tag (include the tag name and tag value) can be added t this file. Selecting the checkbx after the Current Value clumn will select all f the tags. Select OK r Cancel, and the Cmpliance Guardian Tag Assist Manager windw will be clsed. If yu select OK, the current tags will be added in the lcatins that are defined in the crrespnding checks. There are three lcatins where the tags will be: In SharePint The single line f text clumn named Tag Name will be added fr the file in SharePint, the tag values will be added in this clumn; If a single line f text clumn named Tag Name already exists in SharePint, then the tag values will be added in this clumn; If a clumn named Tag Name already exists in SharePint, but it is nt a single line f text clumn, then a single line f text clumn named Tag Name will als be created in SharePint fr displaying the tag values. In the file The tags will be added in the file. In bth the Tag Name clumn and the file The tags will be added in bth the file and SharePint. *Nte: Tags can nly be added int the fllwing file types: DOCX, XLSX, PPTX, HTM, HTML, PDF, and ASPX. If yu define t add tags in the file in the check, but the file type is nt ne f the abve file types, select OK, and the tags will nt be added. If yu select Cancel, the current tag names and tag values will nt be added. *Nte: If yu d nt have the Manage Lists r Edit Items permissin t the crrespnding site, yu can nly view the scanned results, the OK buttn will be greyed ut. Refer t the fllwing steps t use Cmpliance Guardian Tag Assist Manager in SharePint 2010: Navigate t the crrespnding SharePint site (where the cntent yu want t scan is) > Site Settings > Site features and activate the Cmpliance Guardian Tag Assist Manager feature. *Nte: At a minimum, t use the Cmpliance Guardian Tag Assist Manager feature in a site, the user must have the fllwing required six site permissins assigned: Cmpliance Guardian Installatin and Administratin User Guide 243

244 Manage Lists Edit Items View Items View Applicatin Pages View Pages Open Select the crrespnding dcument library in Quick Launch Bar, and then select the Dcuments tab. The buttn Cmpliance Guardian Tag Assist Manager appears in the Cmpliance Guardian Tl grup n the ribbn. Check the checkbx in frnt f the file that yu want t scan. Select Cmpliance Guardian Tag Assist Manager n the ribbn. The Cmpliance Guardian Tag Assist Manager windw pps up, and the message Please wait while the page is lading appears. After the file is finished scanning, the scan results will appear in this windw. There are three clumns in the table f this windw: Tag Name Display the tag names defined in the crrespnding checks. The values in this clumn cannt be changed. Original Value Display the tag values that are added fr the file in the last scan. If yu have nt added any tag values in the last scan, there will be n value in this clumn. Current Value Display the file s current tag value based n the checks. The current values can be mdified accrding t yur wn requirements. Yu can select t check the checkbx t the right f the tag value t determine which tag (include the tag name and tag value) can be added t this file. Selecting the checkbx after the Current Value clumn will select all f the tags. Select OK r Cancel, and the Cmpliance Guardian Tag Assist Manager windw will be clsed. If yu select OK, the current tags will be added in the lcatins that are defined in the crrespnding checks. There are three lcatins where the tags will be: In SharePint If a Managed Metadata type/chice type/single line f text type clumn named Tag Name exists in SharePint, the tag value will be added int this clumn (if the three kinds f clumns all exist in SharePint, and the name is Tag Name, the pririty f the clumn being added tag is Metadata type clumn, Chice type clumn and then single line f text type clumn). If there is n clumn (Managed Metadata type/chice type/single line f text type clumn) named Tag Name in SharePint, a single line f text type clumn named Tag Name will be created fr adding the tag value. In the file The tags will be added in the file. 244 Cmpliance Guardian Installatin and Administratin User Guide

245 In bth the Tag Name clumn and the file The tags will be added in bth the file and SharePint. *Nte: Tags can nly be added int the fllwing file types: DOCX, XLSX, PPTX, HTM, HTML, PDF, and ASPX. If yu define t add tags in the file in the check, but the file type is nt ne f the abve file types, select OK, the tags will nt be added. If yu select Cancel, the current tag names and tag values will nt be added. *Nte: If yu d nt have the Manage Lists r Edit Items permissin t the crrespnding site, yu can nly view the scanned results, the OK buttn will be greyed ut. Using Cmpliance Guardian Quarantine Manager in SharePint Cmpliance Guardian Quarantine Manager allws yu t manage the quarantined files. Ensure that SP2007QuarantineManager.wsp r SP2010QuarantineManager.wsp r SP2013QuarantineManager.wsp is deplyed befre using this feature. Fr mre infrmatin n deplying the slutin, refer t Slutin Manager. This feature is supprted in SharePint 2007, SharePint 2010 and SharePint T use this feature in SharePint 2007, cmplete the fllwing steps: 1. Navigate t the crrespnding SharePint site > Site Settings > Site features, activate the Cmpliance Guardian Quarantine Manager feature. *Nte: At a minimum, t use the Cmpliance Guardian Quarantine Manager feature in a site, the user must have the fllwing required seven site permissins assigned: Manage Lists Edit Items View Items View Applicatin Pages View Pages Open Brwse User Infrmatin 2. Return t the Site Settings, and then select Cmpliance Guardian Quarantine Manager in the Cmpliance Guardian Tls and Services grup. Yu will be brught t the Cmpliance Guardian Quarantine Manager interface. 3. In the Cmpliance Guardian Quarantine Manager interface, select Quarantine Manager tab, yu will see the fllwing areas: Cmpliance Guardian Installatin and Administratin User Guide 245

246 Tl Field Use the tl field t manage the quarantined files. Yu can dwnlad the files details, restre the files r delete the files in bulk thrugh the crrespnding buttns in this field. View Cntent View the selected file s cntent. Fr the SharePint files r items that are affected by the In place quarantine methd, after yu select View Cntent: Yu can view the files n SharePint site webpage. Yu can directly edit the cntent f the file. SharePint items cannt be perfrmed this actin. Fr the SharePint files r items that are affected by the Out f place quarantine methd, after yu select View Cntent: The file will be dwnladed. SharePint items cannt be perfrmed this actin since there is n cntent in an item. View Prperties View the file r item s prperties. Fr the SharePint files r items that are affected by the In place quarantine methd, after yu select View Prperty: The crrespnding SharePint webpage appears displaying the file s prperties. The crrespnding SharePint webpage appears displaying the item s prperties. Yu can pen the item attachment in the appeared SharePint webpage, and then edit the cntent f the attachment. Fr the SharePint files r items that are affected by the Out f place quarantine methd, after yu select View Prperty: All f the selected file s prperties are displayed in the appeared View Prperties page. Select Clse t exit the View Prperties page. All f the selected item s prperties are displayed in the appeared View Prperties page. Yu can select the attachment name t dwnlad the attachment f the item, and edit the cntent f the attachment, and then uplad the edited item thrugh the Uplad functin which is intrduced abve. Select Clse t exit the View Prperties page. Dwnlad Details Dwnlad the selected files. Restre Refer t Restring Files in Quarantine Manager fr details. Delete Delete the quarantined files permanently. 246 Cmpliance Guardian Installatin and Administratin User Guide

247 Uplad Cntent Uplad a file. Fr the SharePint files r items that are using the In place quarantine methd, after yu select Uplad: Since the files r attachments f items that are affected by the In place quarantine methd are edited in the webpage directly, this Uplad functin des nt take effect n these files and items. Fr the SharePint files r items that are using the Out f place quarantine methd, after yu select Uplad: The dwnladed and edited file will be upladed and will replace the selected file. *Nte: The upladed file name must be same as that f the selected file. The dwnladed and edited attachment f the SharePint item can be upladed and replace the riginal attachment f the item. *Nte: The upladed attachment name must be same as the riginal attachment name. Data Range The first time yu access Quarantine Manager, the files r items in the last 1 day are displayed. Yu can change it by selecting Data Range and then enter a value in the Latest _ Days/Hurs field. Select OK t save the setting. The next time yu access Quarantine Manager, the files r items that are quarantined in the specified time range will be displayed. Scpe Define the scpe f the files yu want t manage. Files Field View the files in the selected ndes. File Details Display a file s detailed infrmatin. Cmpliance Guardian Installatin and Administratin User Guide 247

248 Figure 28: SharePint 2007 Cmpliance Guardian Quarantine Manager Interface. 4. T manage the quarantined files, cmplete the fllwing steps: a. In the scpe area f the screen, select the site cllectin t expand t the nde in which the files yu want t manage are. b. Select the nde, and yu will see all f the files listed in the Files field t the right f the Scpe field. c. Select the specific files by checking the checkbx in frnt f the file in the Files field. The file details will display in the File Details field. *Nte: In the File Details field, nly ne file s details can be displayed. If yu select several files, nly the last selected file s details can display in the screen. If yu want t view all f the selected files detailed infrmatin, yu must dwnlad the details t a CSV file using Dwnlad Details. d. Select the checkbx next t the file yu want t manage. Select the arrw ( ) buttn next t the file name, and a drp-dwn list appears. Yu can chse hw t manage the file by selecting the crrespnding actin (View Cntent, View Prperties, Dwnlad Details, Restre, Uplad Cntent, and Delete). T use this feature in SharePint 2010 r SharePint 2013, cmplete the fllwing steps: 1. Navigate t the crrespnding SharePint site cllectin > Site Settings > Manage site features, and activate the Cmpliance Guardian Quarantine Manager feature. 248 Cmpliance Guardian Installatin and Administratin User Guide

249 *Nte: At a minimum, t use the Cmpliance Guardian Quarantine Manager feature in a site, the user must have the fllwing required seven site permissins assigned: Manage Lists Edit Items View Items View Applicatin Pages View Pages Open Brwse User Infrmatin 2. Return t the Site Settings, and then select Cmpliance Guardian Quarantine Manager in the Cmpliance Guardian Tls and Services grup. Yu will be brught t the Cmpliance Guardian Quarantine Manager interface. 3. In the Cmpliance Guardian Quarantine Manager interface, select Quarantine Manager tab, yu will see the fllwing areas: Tabs Switch between the Brwse tab, and the Quarantine Manager tab. Ribbn Use the ribbn t manage the quarantined files. Yu can dwnlad the files details, restre the files r delete the files in bulk thrugh the ribbn. View Cntent View the selected file s cntent. Fr the SharePint files r items that are affected by the In place quarantine methd, after yu select View Cntent: Yu can view the files n SharePint site webpage. Yu can directly edit the cntent f the file. SharePint items cannt be perfrmed this actin. Fr the SharePint files r items that are affected by the Out f place quarantine methd, after yu select View Cntent: The file will be dwnladed. SharePint items cannt be perfrmed this actin since there is n cntent in an item. View Prperties View the file r item s prperties. Fr the SharePint files r items that are affected by the In place quarantine methd, after yu select View Prperties: The crrespnding SharePint webpage appears displaying the file s prperties. The crrespnding SharePint webpage appears displaying the item s prperties. Yu can pen the item attachment in the Cmpliance Guardian Installatin and Administratin User Guide 249

250 appeared SharePint webpage, and then edit the cntent f the attachment. Fr the SharePint files r items that are affected by the Out f place quarantine methd, after yu select View Prperties: All f the selected file s prperties are displayed in the View Prperties page. Select Clse t exit the View Prperties page. All f the selected item s prperties are displayed in the View Prperties page. Yu can select the attachment name t dwnlad the attachment f the item, edit the cntent f the attachment, and then uplad the edited item thrugh the Uplad functin which is intrduced abve. Select Clse t exit the View Prperties page. Dwnlad Details Dwnlad the selected files. Restre Refer t Restring Files in Quarantine Manager fr details. Delete Delete the quarantined files permanently. Uplad Cntent Uplad a file. Fr the SharePint files r items that are affected by the In place quarantine methd, after yu select Uplad: Since the files r attachments f items that are affected by the In place quarantine methd are edited in the webpage directly, this Uplad functin des nt take effect n these files and items. Fr the SharePint files r items that are affected by the Out f place quarantine methd, after yu select Uplad: The dwnladed and edited file will be upladed and will replace the selected file. *Nte: The upladed file name must be same as that f the selected file. The dwnladed and edited attachment f the SharePint item can be upladed and replace the riginal attachment f the item. *Nte: The upladed attachment name must be same as the riginal attachment name. 250 Data Range The first time yu access Quarantine Manager, the files r items that have been quarantined in the last 24 hurs will be displayed autmatically. Yu can change it by selecting Data Range and then enter a value in the Latest _ Days/Hurs field. Select OK t save the setting. The next time yu access Quarantine Manager, the files r items that are quarantined in the specified time range will be displayed. Scpe Define the scpe f the files yu want t manage. Cmpliance Guardian Installatin and Administratin User Guide

251 Files Field View the files in the selected ndes. File Details Display a file s detailed infrmatin. Figure 29: SharePint 2010 Cmpliance Guardian Quarantine Manager Interface. Figure 30: SharePint 2013 Cmpliance Guardian Quarantine Manager Interface. 4. T manage the quarantined files, cmplete the fllwing steps: a. In the scpe field f the screen, select the site cllectin t expand t the nde in which the files yu want t manage are. Cmpliance Guardian Installatin and Administratin User Guide 251

252 b. Select the nde, and then yu will see all f the files will list in the Files field t the right f the Scpe field. c. Select the specific files by checking the checkbx in frnt f the file in the Files field. The file details will display in the File Details field. *Nte: The File Details field can nly display infrmatin n ne file at a time. If yu select several files, nly the last selected file s details can display n the screen. If yu want t view infrmatin abut all f the selected files, yu must dwnlad the details t a CSV file using Dwnlad Details. d. Select the checkbx befre the file yu want t manage, select next t the file name, a drp-dwn list appears, and then yu can select hw t manage the file by selecting the crrespnding actin (View Cntent, View Prperties, Dwnlad Details, Restre, Uplad Cntent and Delete). Restring Files in Quarantine Manager Yu can restre a quarantined file r item by selecting Restre. Restring the SharePint Files r Items that Are Affected by the In Place Quarantine Methd After yu select a SharePint file r item that is affected by the In place quarantine methd, cnfigure the fllwing settings in the Restre interface: Ignre this File Until the File r Plicies Change Select this checkbx, the file r item will nt be scanned until the actin plicy r scan plicy is changed, r until the file r item is changed. Change Classificatin Result If yu have selected the Ignre this file until the file r the scan/actin plicy is changed checkbx, this field appears. Yu can then select t change the classificatin result by selecting the Change classificatin result checkbx. A table listing all the tags that have been added t the file r item appears. Yu can change the tags based n yur wn requirement. Cnflict Reslutin If there is a file (this functin will nt be taken effect n a SharePint item) whse name is same as the file name that yu want t restre in the destinatin, a cnflict will be judged. Select a cnflict reslutin: Replace The cnflicted destinatin file will be replaced with the selected file after the restre. Skip The file will be skipped t restre t the destinatin. Restring the SharePint Files r Items that Are Affected by the Out f Place Quarantine Methd After yu select a SharePint file r item that is affected by the Out f place quarantine methd, cnfigure the fllwing settings in the appeared Restre interface: 252 Cmpliance Guardian Installatin and Administratin User Guide

253 Restre Type Select In place restre t restre the selected file r item t its riginal place. Select Out f place restre t restre the selected file r item t anther place in SharePint. Destinatin If yu have selected Out f place restre, this field appears. All f the SharePint farms appear. Brwse the desired farm tree t a list level, library level, r flder level, the file r item will be restred t the selected SharePint list r library. Agent Grup If yu have selected Out f place restre, this field appears. Select an agent grup fr running the restre jb, r select New Agent Grup t create an agent grup. Ignre this File Until the File r Plicies Change Refer t Restring the SharePint Files r Items that Are Affected by the In Place Quarantine Methd fr details. Change Classificatin Result Refer t Restring the SharePint Files r Items that Are Affected by the In Place Quarantine Methd fr details. Cnflict Reslutin Refer t Restring the SharePint Files r Items that Are Affected by the In Place Quarantine Methd fr details. Fr the SharePint files r items that are affected by the Out f place quarantine methd, after they are restred t SharePint, the fllwing related bjects r prperties will be affected: Wrkflw The riginal related wrkflws will nt assciate t the restred file r item. ID The file s r item s ID will be changed after the file r item is restred t SharePint. Web part Refer t the fllwing scenaris fr details: If the file s Web part is nt saved tgether with the file r item (saved in the different tables in SharePint database), the Web part will nt exist after the file r item is restred n matter yu select In place restre r Out f place restre as the Restre Type. If the file s Web part is saved tgether with the file r item (saved in the same tables in SharePint database) and if yu select In place restre as the Restre Type, the Web part can be restred nrmally alng with the file r item. If the file s Web part is saved tgether with the file r item (saved in the same tables in SharePint database) and if yu select Out f place restre as the Restre Type, the Web part may be affected after the restre. Permissins The restred file r item will inherit its parent s permissins. Rating, SharePint Tags and Ntes The restred file r item s rating and SharePint tags and ntes will n lnger exist after it is restred. Versins The file r item s versins will nt be kept after the file r item is restred t SharePint. Only the versin cunt can be kept. Cmpliance Guardian Installatin and Administratin User Guide 253

254 Classificatin Reprt Fr details abut classificatin reprts and prcedures fr hw t use them, refer t the Cmpliance Guardian User Guide. The Classificatin Reprt area includes Actin Reprt, Incident Reprt, and Yammer Reprt. It is used t view the reprt results f the files affected by Classificatin Scanner actins, as well as prvide peratins t the quarantined files, redacted files and encrypted files. Launching Classificatin Reprt T launch Classificatin Reprt, cmplete the fllwing steps: 1. Lg in t Cmpliance Guardian. If yu are already in the sftware, select the hme page buttn ( ) g t the hme page. Frm the hme page, all f the prducts are displayed. 2. Select Classificatin Reprt t launch its interface. 3. Alternatively, yu can select Administratin n the tp-left crner, and select the Classificatin Reprt tab n the appeared navigatin bar t launch Classificatin Reprt. Figure 31: Classificatin Reprt mdule launch windw. 254 Cmpliance Guardian Installatin and Administratin User Guide

255 Jb Mnitr Jb Mnitr allws yu t view the status r details f jbs, dwnlad reprts, and manage the jbs all frm a central interface. Jb Mnitr is als integrated int ther Cmpliance Guardian prducts, which enables yu t manage the jbs inside its crrespnding mdules with additinal features specific t the prduct itself. These additinal features are als available in the stand-alne Jb Mnitr mdule. Getting Started Refer t the fllwing sectins fr imprtant infrmatin n getting started with Jb Mnitr. Launching Jb Mnitr T launch Jb Mnitr and access its functinality, cmplete the fllwing steps: 1. Lg in t Cmpliance Guardian. If yu are already in the sftware, select the hme page buttn ( ) n the left crner t g the hme page. 2. Frm the hme page, select Jb Mnitr t launch the mdule. Figure 32: Jb Mnitr mdule launch windw. 3. Alternatively, yu can select Administratin n the tp-left crner, and select the Jb Mnitr tab n the appeared navigatin bar t launch Cntrl Panel. Cmpliance Guardian Installatin and Administratin User Guide 255

256 Figure 33: Jb Mnitr tab n the navigatin bar. Understanding Jb Mnitr Jb Mnitr allws yu t custmize the way yur jbs are displayed s yu can mre efficiently manage them. The fllwing tw sectins will cver the different viewing ptins. Jb Mnitr Interface The interface in Jb Mnitr cntains the fllwing fur areas: 1. Tabs Switch between the Jb Mnitr and Scheduled Jb Mnitr interface. 2. Ribbn Tlbar where yu can custmize the view, perfrm actins n selected jbs, and cnfigure reprt lcatin settings. 3. Search Search tl fr filtering the displayed jbs. 4. Viewing pane List f jbs displayed accrding t the filters yu cnfigure. 256 Cmpliance Guardian Installatin and Administratin User Guide

257 Figure 34: Jb Mnitr user interface. Jb Mnitr vs. Scheduled Jb Mnitr The Jb Mnitr mdule interface cntains tw tabs: Jb Mnitr Allws yu t access all f the current and previus jbs. Scheduled Jb Mnitr Allws yu t exclusively access jbs that are scheduled t run in the future. *Nte: Differentiate between scheduled jbs (jbs scheduled t run in the future) and recurring jbs. Scheduled jbs will nly shw up n the Scheduled Jb Mnitr tab. Recurring jbs will shw up n bth tabs. Cnfiguring the Viewing Pane In bth the Jb Mnitr and Scheduled Jb Mnitr tabs, there is a View tlbar and a Filter tlbar n the ribbn with further cnfigurable ptins t help yu mre efficiently manage yur current and previus jbs. The View Tlbar This tlbar allws yu t chse t have yur jbs displayed in List View r Calendar View: List View Displays yur jbs in a table. Yu can add r remve a clumn t custmize yur view by selecting the manage clumns buttn ( ). Select the desired clumn fr Cmpliance Guardian Installatin and Administratin User Guide 257

258 this view by checking the checkbx next t its name in the drp-dwn menu. Select OK t save yur chices, r select Cancel t clse the drp-dwn menu withut saving yur chices. Calendar View Displays yur jbs in a calendar. Yu can cnfigure Calendar View t display in Day, Week, r Mnth frmat by selecting the respective buttn in the upper right-hand crner. T see detailed infrmatin abut a jb, place yur muse cursr ver its time slt. Yu can als cnfigure the Time Zne in this tlbar by specifying ne f the ptins belw t display in the jb infrmatin. Default Displays the time zne f the machine where the cntrl service is installed. In the Scheduled Jb Mnitr tab, the default time zne is based n the time zne cnfigured fr each schedule. Lcal Displays the time zne that the Internet Explrer (IE) brwser used t access Cmpliance Guardian. By default, the time zne f the jb infrmatin is set t Default. *Nte: In Calendar View, the time zne is set t Lcal and cannt be altered. T change the time zne, select the drp-dwn menu, and select Lcal. The Filter Tlbar This tlbar allws yu t filter the jbs listed in the viewing pane by Date Range r Mdule. Searching Jbs Date Range Allws yu t limit the jbs displayed by specifying a time frame. Mdule Allws yu t limit the jbs displayed by specifying the mdule where the jbs are run. Jb Mnitr als allws yu t search fr jbs t further custmize which jbs are displayed t yu. The search interface is lcated under the tlbar ribbn. Select the crrespnding radi buttn t either Search all pages r Search current page. Placing yur cursr ver the Search text bx will bring up a tltip infrming yu f the searchable parameters. *Nte: The search functin is nt case sensitive. Since the Jb ID includes the start time fr the jb, yu can search fr a jb by start time. Enter the time as a numerical string in the text bx, then select the magnifying glass ( ) (fr example, search fr :05:10 by typing in the search text bx). 258 Cmpliance Guardian Installatin and Administratin User Guide

259 Managing Jbs The Jb Mnitr tab and the Scheduled Jb Mnitr tab ffer different sets f tls mre suitable fr managing the different types f jbs. *Nte: If ne tl is nt supprted fr the selected jb f the specified prduct, the crrespnding buttn f this tl will be greyed ut and nt available t select. Operatins in the Jb Mnitr Tab The Jb Mnitr tab prvides yu with a number f tls that allw yu t perfrm actins t jbs yu are currently running r have run in the past. The Manage Tlbar This tlbar prvides yu with the fllwing functinality: View Details Allws yu t view a jb reprt f the selected jb. Select the jb by checking the crrespnding checkbx. Select View Details n the ribbn. The Jb Details tab appears with the jb reprt displayed in the viewing pane with the Summary tab selected. The Summary tab displays general infrmatin abut the jb. Fr mre indepth infrmatin, select the Details tab in the viewing pane. Select Dwnlad t dwnlad the jb reprt. Select TXT, CSV, r XLS as the frmat fr the reprt, then select t dwnlad the Current clumns r All clumns frm the Details tab, and then select OK t dwnlad the reprt, r Cancel t return t the Jb Details tab. Delete Deletes jb infrmatin withut sending a ntificatin t anyne. Select the checkbxes befre the jbs, and then select Delete. A cnfirmatin pp-up windw will appear t cnfirm the peratin. Select OK t delete the selected jbs, r select Cancel t return t the interface withut deleting the jbs. Dwnlad Allws yu t dwnlad the jb reprt f the selected jbs t a specified lcatin. Yu have the ptin t set the Reprt Frmat t dwnlad in TXT, CSV, r XLS frmat. Here yu can nly chse t dwnlad All clumns frm the Details tab. *Nte: Prir t dwnlading the jb reprt, make sure the Internet Explrer (IE) dwnlad settings are cnfigured prperly. Yu can cnfigure the dwnlad settings fr IE by fllwing the steps belw. Navigate t Internet Explrer > Tls > Internet Optins. Switch t the Security tab and select a zne. Select the Custm level buttn inside the Security level fr this zne field. Scrll dwn t the Dwnlads setting. Cmpliance Guardian Installatin and Administratin User Guide 259

260 Change the detailed settings accrding t the screensht belw. Figure 35: IE security settings. The Actins Tlbar When yu select ne r mre jbs, the tlbar appears. This tlbar prvides yu with the Stp actin t stp the selected in-prgress jb immediately. The jb status will change t Stpped, but the jb infrmatin will be retained, as well as any data aggregated by the jb. *Nte: Once a jb is stpped, in rder t run it again, yu must launch the respective mdule yu used t run that jb. Select the Plan Manager tab, and then select the plan by checking the checkbx, and select Run Nw. When yu run the same jb again, it will be cnsidered a new jb, s the previus data is retained. The Settings Tlbar This tlbar prvides access t the Reprt Lcatin tl that allws yu t specify a lcatin fr string the reprts generated after running the jbs. If yu d nt cnfigure this tl, the jb reprts will be stred in the default lcatin (...\AvePint\Cmpliance Guardian\Manager\wrk). T stre the jb reprts n a netwrk share: 1. Check the Use the Net Share path as the reprt lcatin checkbx. 2. Enter the UNC Path. 3. Enter the Username. 4. Enter the Passwrd. 5. Select OK. 260 Cmpliance Guardian Installatin and Administratin User Guide

261 Operatins in the Scheduled Jb Mnitr Tab The Scheduled Jb Mnitr tab prvides yu with tw tlbars that allw yu t perfrm actins t jbs that yu have scheduled t run in the future. The fllwing sectins explain what these tls d in detail. The Actins Tlbar This tlbar prvides the fllwing actins fr a scheduled jb: Enable If the status f the selected jbs is disabled, yu will have the ptin t select this buttn t enable it. Disable If the status f the selected jbs is enabled, yu will have the ptin t select this buttn t disable it. The Filter Tlbar This tlbar prvides the fllwing filter ptins fr a scheduled jb: Date Range Allws yu t limit the jbs displayed by specifying a time frame. Mdule Allws yu t limit the jbs displayed by specifying the mdule where the jbs are run. Cmpliance Guardian Installatin and Administratin User Guide 261

262 Using Check Validatr Tl The Check Validatr tl is used t verify if the custm check that is created using Cmpliance Guardian is crrect, and als used t verify if yu can get the type f scan results yu want. T use the Check Validatr, cmplete the fllwing steps: 1. G t the machine with Cmpliance Guardian Agent installed and pen the \AvePint\Cmpliance Guardian\Agent\bin directry t find the CCE.TDFValidatr.exe file. 2. Open the CCE.TDFValidatr.exe t start this tl. Figure 36: Check Validatr interface. 3. Select the Check/Test Suite (T) buttn (r yu can press T n yur keybard), a pp-up windw appears, select the check r test suite that yu want t validate, and then select Open in the pp-up windw. The full path f the selected check/test suite will be displayed n the tl interface. 4. Select the Test File (F) buttn (r yu can press F n yur keybard), a pp-up windw appears, select the file yu want t test, and then select Open in the pp-up windw. The full path f the selected file will be displayed n the tl interface. 262 Cmpliance Guardian Installatin and Administratin User Guide

263 5. Select the Scan buttn, the file then will be tested accrding t the rules defined in the selected check r test suite. 6. The scan results will be displayed in the Scan Result field f this tl. In the Scan Result field, the Check ID, Check Name, the cunt f the instances that are fund and the status f each check will be displayed. If ne f the statuses f the checks is Failed, the Scan Result will be Failed. The time that the scan takes will als be displayed. Figure 37: Scan results f Check Validatr. 7. Select Exprt Reprt t generate the scan result. After yu select the Exprt Reprt buttn, a pp-up windw appears, select the lcatin where yu want t save the reprt, and select OK n the windw. The detailed scan reprt will be saved in the specified lcatin. Yu can check the reprt t verify if the scan results are what yu wanted. 8. Befre scanning the selected file, the tl will first validate if the check r test suite is crrect, if the selected check r test suite is nt crrect, after yu select the Scan buttn, the errr message will be displayed n the tl interface, yu can then review the lgs fr the detailed infrmatin. 9. After the scan jb, a reprt is als generated in \AvePint\Cmpliance Guardian\Agent\bin\TDFValidatrReprt. The reprt cntains three kinds f files: The file that is scanned by Check Validatr. Cmpliance Guardian Installatin and Administratin User Guide 263

264 The HTML frmat f the scanned file. The reprt that cntains all f the scanned file s vilatins as well as the vilatin s lcatins. Figure 38: Check Validatin reprt. Related Cnfiguratin File The tl has a related cnfiguratin file named CCE.TDFValidatr.exe.cnfig, the file is lcated under the directry \AvePint\Cmpliance Guardian\Agent\bin directry. Figure 39: CCE.TDFValidatr.exe.cnfig file verview. Yu can cnfigure the Value attribute t specify the maximum scan time. If the time that the scan takes exceeds the specified scan time, an errr message will be displayed n the tl interface, and the scan will stp. By default, the value fr the Value attribute is 180 secnds. 264 Cmpliance Guardian Installatin and Administratin User Guide

265 Using Detailed Risk Reprt Analysis Tl Cmpliance Guardian supprts exprts f detailed risk reprt infrmatin f all the files in a site cllectin level Cmpliance Guardian Scanner fr SharePint jb. *Nte: The DcAve Auditr database must be cnnected s as t get the related auditing infrmatin. Generating the Reprt T generate the reprt, cmplete the fllwing steps: G t the machine with Cmpliance Guardian Agent installed and pen the \AvePint\Cmpliance Guardian\Agent\bin directry t find the CCR.RiskReprtTl.exe.cnfig file. Open the CCR.RiskReprtTl.exe.cnfig and cnfigure the fllwing attributes: Figure 40: Attributes fr generating the reprt. Database Name Specify the database file name as the value f the DBName attribute. T get the database file name, g t the reprt lcatin, and find the request s crrespnding TXT file (the name f the TXT file is the Request ID + _ + the Request Name). Open the TXT file. Yu will find all the plans cntained in this request. The database file name fllws the crrespnding plan. Then g back t the reprt lcatin, basing n the database file name in the TXT file, yu will find the database file s full name (the database name +.db) f the desired plan whse detailed risk infrmatin is ging t be exprted.. Exprt Lcatin Specify the lcatin as the value f the excellcatin attribute. The reprt will be generated int this lcatin. File Shw Cunt Specify the number f the files as the value f the fileshwcunt attribute. The files are displayed accrding t their risk scres calculated by the Raw type risk frmula. Fr example, if yu specify 10 as the value, then the risk infrmatin f 10 files that have the tp 10 risk scres (calculated by the Raw type risk frmula) will be displayed in the reprt. Each file s risk infrmatin is displayed in ne sheet in the reprt excel. Auditing Item Cunt Specify the number f the Auditing items that will be displayed in the reprt. The infrmatin f the mst recent activities t the file will be displayed in the reprt. After cnfiguring the attributes, save the cnfiguratin file. Cmpliance Guardian Installatin and Administratin User Guide 265

266 Under the same directry ( \AvePint\Cmpliance Guardian\Agent\bin), find the CCR.RiskReprtTl.exe file and select t Run As Administratr. After the CCR.RiskReprtTl.exe file has been pened, wait until the fllwing message appears, indicating the reprt has been generated int the specified lcatin: The reprt has been generated. Press any key t exit. Figure 41: The CCR.RiskReprtTl.exe file interface. Infrmatin Included in the Exprted Excel File The generated risk reprt excel cntains the BasicInfrmatin sheet that displays the basic infrmatin f the risk files. Each risk file has its wn sheet fr displaying the file s risk infrmatin. The number f the files whse risk infrmatin will be displayed in the reprt is based n the value f fileshwcunt attribute that yu specify in the CCR.RiskReprtTl.exe.cnfig file. Yu can view the fllwing infrmatin in the exprted reprt: Basic infrmatin sheet: The risk scres (the risk scres calculated by the Raw type risk frmula, the risk scres calculated by the Stepped type risk frmula and the risk scres calculated by the Weighted type risk frmula) f each site cllectin in the jb. A bar chart is displayed t help yu view the infrmatin intuitively. The infrmatin f risk files that vilated the regulatins (check) in the jb. A pie chart is displayed t help yu view the infrmatin intuitively. The detailed infrmatin f the risk files in each site cllectin, including the risk scres, the number f the Passed files, Failed files, User Review Required files, Nt Applicable files, Nt Tested files and Errr files, and the percentage f the failed files. A bar chart is displayed fr each site cllectin t help yu view the infrmatin intuitively. Risk infrmatin f each file: The file infrmatin, the risk scres, and the regulatins (checks) that the file vilated. The related auditing infrmatin, including the access time t the file, the user wh accessed the file, the actin type and sme related details. The security infrmatin related infrmatin. 266 Cmpliance Guardian Installatin and Administratin User Guide

267 Generate Detailed Risk Reprt f a File Cmpliance Guardian supprts t exprt the detailed risk reprt infrmatin f a file thrugh the ccr.sp2010riskananlyzer.exe r CCR.SP2007RiskAnalyzer.exe files. Cmpared with the Risk Reprt that is displayed in the Cmpliance Guardian Reprt, r generated frm Cmpliance Guardian Reprt, the detailed risk reprt cmbines all f the risk reprt infrmatin f a file t ne CSV file, thus fr user cnveniently checking and viewing. Befre Yu Begin In rder t generate the detailed risk reprt, the ccr.sp2010riskananlyzer.exe r CCR.SP2007RiskAnalyzer.exe file must be run in the Cmmand Line. The DcAve Auditr database must be cnnected s as t get the related auditing infrmatin. T get the risk reprt, cmplete the fllwing steps: 1. G t the machine with Cmpliance Guardian Agent installed and pen the \AvePint\Cmpliance Guardian\Agent\bin directry t find the ccr.sp2010riskananlyzer.exe file (CCR.SP2007RiskAnalyzer.exe is fr the files in SharePint 2007, here we take the ccr.sp2010riskananlyzer.exe as an example). Figure 42: The EXE file lcatin. 2. On the machine, navigate t Start > All Prgrams > Accessries > Cmmand Prmpt. 3. In the cmmand-line interface, enter the directry. Fr example, C:\Prgram Files\AvePint\Cmpliance Guardian\Agent\bin, and press Enter. Figure 43: The cmmand line verview 1. Cmpliance Guardian Installatin and Administratin User Guide 267

268 4. Enter the fullpath cmmand, and then enter the full path f the file whse detailed risk reprt will be generated. 5. Enter the dbname cmmand, and then enter the database file name f the plan whse detailed risk reprt infrmatin will be exprted. T get the database file name, g t the reprt lcatin, and find the request s crrespnding TXT file (the name f the TXF file is the Request ID + _ + the Request Name). Open the TXT file, yu will find all the plans cntained in this request, the database file name is fllwing the crrespnding plan. Then g back t the reprt lcatin, basing n the database file name in the TXF file, yu will find the database file s full name (the database name +.db) f the desired plan whse detailed risk infrmatin is ging t be exprted. 6. Enter the -exprtlcatin cmmand, and then enter the exprt lcatin where the detailed risk reprt will be generated. The exprtlcatin cmmand is ptinal, if yu d nt enter the cmmand and d nt specify an exprt lcatin, by default, the reprt will be generated under the directry \AvePint\Cmpliance Guardian\Agent\bin\Risk Analyzer. Figure 44: The cmmand line verview Press Enter t execute the jb. After the jb cmpletes, a prmpt is shwn as belw. Figure 45: The cmmand line verview 8. Yu can then navigate t the specified exprt lcatin t view the risk reprt. 268 Cmpliance Guardian Installatin and Administratin User Guide

269 Using Cmpliance Guardian Transactin Capture Cmpliance Guardian Transactin Capture is used t recrd the webpages that yu access, and then yu can save the recrded results as a transactin file, which is used by Cmpliance Guardian Website Scanner. The recrded URLs in the transactin file will be the start URLs used in Cmpliance Guardian scans. *Nte: Make sure Micrsft Visual C x86 Redistributable and Micrsft.NET Framewrk 3.5 r abve versin must be installed befre using Cmpliance Guardian Transactin Capture. System Requirements fr Using Cmpliance Guardian Transactin Capture Cmpliance Guardian Transactin Capture includes tw versins: AgentTlWebSiteRecrder_.NETv2.msi and AgentTlWebSiteRecrder_.NETv4.msi. Refer t the fllwing table fr the system requirements f the tw versins: Cmpliance Guardian Transactin Capture Installatin File Versins AgentTlWebSiteRecrder_.NETv2.msi Requirements Windws XP Windws Server 2003 Windws Vista Windws Server 2008 Windws 7 Windws Server 2008 R2 Windws Thin PC AgentTlWebSiteRecrder_.NETv4.msi Windws 8 Windws Server 2012 Windws 8.1 Windws Server 2012 R2 Installing Cmpliance Guardian Transactin Capture T install Cmpliance Guardian Transactin Capture, cmplete the fllwing steps: Find the AgentTlWebSiteRecrder_.NETv2.msi r AgentTlWebSiteRecrder_.NETv4.msi file in...\cmpliance Guardian\Agent\bin\WebSiteRecrderInstallFiles. Open the AgentTlWebSiteRecrder_.NETv2.msi r AgentTlWebSiteRecrder_.NETv4.msi. Cmpliance Guardian Installatin and Administratin User Guide 269

270 *Nte: Yu can decide the versin t install accrding t yur system. Refer t Errr! Reference surce nt fund.. Select Install in the appeared drp-dwn menu. The Cmpliance Guardian Transactin Script Recrder Setup wizard appears, which helps yu t install the Cmpliance Guardian Transactin Capture tl. Select Next n the wizard welcme page. Select a flder where the related files f this tl will reside. The default lcatin is: C:\Prgram Files (x86)\avepint\cg Transactin Script Recrder\. Yu can select Brwse t select anther lcatin. Select the Disk Cst buttn under the Brwse buttn t view the drives yu can install the tl, and each drive's available and required disk space f the tl. Select Next n this page. Cnfirm the installatin n the Cnfirm Installatin page, and select Next. The tl will begin installing. After the installatin cmpletes, select Clse t exit the installatin wizard. Using the Tl T use Cmpliance Guardian Transactin Capture, pen Windws Internet Explrer (x86) frm the path \Prgram Files (x86)\internet Explrer, select View n the Menu Bar, and select Explrer Bars. Yu will find Cmpliance Guardian Transactin Capture in the drp-dwn menu that appears. Select Cmpliance Guardian Transactin Capture t pen this tl. The tl interface appears n the bttm f the current webpage. Refer t the fllwing screensht: Figure 46: The Cmpliance Guardian Transactin Capture interface. Operatin Field Yu can perfrm the fllwing actins in this field: Recrd On the webpage yu want t recrd, select the Recrd buttn. Cmpliance Guardian Transactin Capture will then start t recrd the webpages yu access frm this current webpage. The URLs that are recrded will be displayed n the Recrded Infrmatin Field. Stp Select the Stp buttn t stp recrding the webpages. 270 Cmpliance Guardian Installatin and Administratin User Guide

271 Play Select the Play buttn. The series f webpages that yu have recrded will autmatically play as they are accessed. Reset Select the Reset buttn, all the recrded results will be cleared up. Save Select the Save buttn t save the series f peratin results as a transactin file. After select the Save buttn, the Save As windw pps up. Select a lcatin, and then select Save n the Save As windw t save the transactin file, which will be used fr Cmpliance Guardian Website Scanner. Optins Select the Optins buttn, a pp-up windw appears. Select the checkbx befre Capture the Ajax Request (XMLHttpRequest). Then Cmpliance Guardian Transactin Capture can recrd the webpages that use the Ajax Request. Delete Select a recrd in the Recrded Infrmatin Field, and select Delete, the recrd then will be deleted. Imprt Imprt a previusly saved transactin file. Yu can view the results that the transactin file recrds by selecting Play. Help Select the Help buttn t view the Help infrmatin. Recrded Infrmatin Field The recrded results will be displayed in this field. Select the clse buttn ( Capture tl. URL The webpage URLs that have been recrded. Status The status cde f a webpage. Dmain The dmain f the URL. Scan Select the checkbxes under this clumn. The crrespnding URL will be signed. After yu save the related transactin file fr Cmpliance Guardian Website Scanner, nly the URLs that are signed here can be used as the Start URLs t be scanned. Only the checkbx f the URL whse crrespnding status cde is 200 can be selected and scanned. ) n the tp-right crner t clse the Cmpliance Guardian Transactin Cmpliance Guardian Installatin and Administratin User Guide 271

272 Exprting Actin Reprts and Scial Reprts t Event Viewer Cmpliance Guardian supprts exprting the actin reprts and scial reprts t Windws Event Viewer. Refer t the fllwing steps t exprt the actin reprt: G t the machine with Cmpliance Guardian Agent installed and pen the \AvePint\Cmpliance Guardian\Agent\bin directry t find the AgentTlExprtClassificatinResults.exe file. Right-click n AgentTlExprtClassificatinResults.exe and select Run as administratr t run it. Figure 47: The interface f running AgentTlExprtClassificatinResults.exe. The actin reprts and scial reprts are exprted t Event Viewer after the exprting jb finishes. Select Start n the machine, find Event Viewer and select it. Select Applicatins and Services Lgs > CmplianceGuardian in the Event Viewer interface. Then, yu will find the events in the right pane. Select each event t view the related actin reprt r scial reprt. 272 Cmpliance Guardian Installatin and Administratin User Guide

273 Figure 48: Event Viewer interface. Cmpliance Guardian Installatin and Administratin User Guide 273

274 Mnitring Cmpliance Guardian Jb Perfrmance in Perfrmance Mnitr Cmpliance Guardian allws yu t mnitr the Cmpliance Guardian jb perfrmance in Perfrmance Mnitr. On the machine where Cmpliance Guardian agent is installed, select Start > Administrative Tls > Perfrmance Mnitr. Select Perfrmance Mnitr in the left pane, and then select the Add ( pane. The Add Cunters windw appears. Find the Cmpliance Guardian categry, then add the crrespnding cunters. Then, yu can view the Cmpliance Guardian jb perfrmance. ) buttn in the right Yu can als create a new data set and then view the Cmpliance Guardian jb perfrmance reprt. Refer t the fllwing steps: a. Expand Data Cllectr Sets in the left pane. b. Right-click User Defined under Data Cllectr Sets. Select New in the appeared drpdwn list. Then, select Data Cllectr Set. c. Select the Create manually (Advanced) radi buttn, and enter a name in the Create new Data Cllectr Set windw. Select Next. d. Select the Perfrmance cunter checkbx and then select Next. e. Select Add. Then, add the Cmpliance Guardian categry cunters in the appeared windw, and select OK in the appeared windw. Specify the interval and units fr cllecting data. Select Next. f. Select a directry t stre the reprt. Select Next. g. Select Finish. The new data set is created. Select the data set under User Defined and then select Start t start cllecting the data. Select the data set and select Stp t stp cllecting data. Then, yu can view the reprt. 274 Cmpliance Guardian Installatin and Administratin User Guide

275 Using the Fingerprinting Tl The fingerprinting tl is used t cmpare the files and then help yu t have a general view f file similarity fr using the Fingerprinting type check. The tl can achieve the fllwing functins: Add sme files as templates in a Fingerprinting type check Cmpare a file with ther files in a flder Cmpare files in a flder and generate a matrix file reprting the similarity f these files Based n the matrix reprt generated in functin 3, generate a file gruping the files whse similarity is greater than the specified similarity threshld In rder t realize the functins, the CCE.FingerPrintingTl.exe file must be run in the Cmmand Line. G t the machine with Cmpliance Guardian Agent installed and pen the \AvePint\Cmpliance Guardian\Agent\bin directry t find the CCE.FingerPrintingTl.exe file. On the machine, navigate t Start > All Prgrams > Accessries > Cmmand Prmpt. In the cmmandline interface, enter the directry. Fr example, C:\Prgram Files\AvePint\Cmpliance Guardian\Agent\bin\ CCE.FingerPrintingTl.exe, and press Enter. T add sme files as templates in a Fingerprinting type check, refer t the fllwing steps: Enter the registerfile cmmand. Enter the file cmmand, and then enter the template file path. Yu can als use * t match files. Fr example, enter C:\12*.dcx, then all f the DOCX files that start with 12 under disk C will be used as the template files. Enter the tdf cmmand, and then enter the check file path. The template files will be used in this check. Press Enter. Figure 49: Using the registerfile cmmand. T cmpare a file with ther files in a flder, refer t the fllwing steps: Enter the cmparefile cmmand. Enter the file cmmand, and then enter the file path. Cmpliance Guardian Installatin and Administratin User Guide 275

276 Enter the flder cmmand after the file path, and then enter the flder path. The files in the first level f the flder will be used t cmpare with the specified file, the files in the sub flders f the specified flder will nt be used t cmpare with the specified file. Enter the type cmmand and then enter RAW, TEXT r EXACT t specify the matching frm. Fr mre infrmatin n the matching frm, refer t Fingerprinting. Enter the utput cmmand and then enter the full path f the generated CSV reprt. Press Enter. The specified CSV reprt will be generated in the specified path. Figure 50: Using the cmparefile cmmand. T cmpare files in a flder and generate a matrix file reprting the similarity f these files, refer t the fllwing steps: Enter the buildcmparematrix cmmand. Enter the flder cmmand, and then enter the flder path. The files in these flders will cmpare with each ther. Enter the type cmmand and then enter RAW, TEXT r EXACT t specify the matching frm. Enter the utput cmmand and then enter a full path f the generated CSV reprt. Press Enter. The matrix CSV reprt will be generated in the specified path. Figure 51: Using the cmparefile cmmand. T generate a reprt gruping the files whse similarity is greater than the specified similarity threshld based n the functin 3, refer t the fllwing steps: Enter the reprtcluster cmmand. Enter the matrix cmmand, and then enter the full path f the matrix CSV reprt. Enter the threshld cmmand, and then enter the similarity threshld. Enter the utput cmmand, and then enter a full path f the generated reprt. 276 Cmpliance Guardian Installatin and Administratin User Guide

277 Press Enter. The reprt will be generated under the specified path. The files whse similarity is equal t r greater than the specified threshld will be gruped in ne rw in the CSV file. Figure 52: Using the reprtcluster cmmand. Cmpliance Guardian Installatin and Administratin User Guide 277

278 Appendix A: Accessing Ht Key Mde In rder t wrk faster and imprve yur prductivity, Cmpliance Guardian supprts ht key mde fr yu t perfrm crrespnding actins quickly using yur keybard. T access ht key mde in the Cmpliance Guardian interface, press Ctrl + Alt + Z n yur keybard. The fllwing table prvides a list f ht keys fr the tp level. Each time yu want t g back t the tp level after accessing the lwer level interface, press Ctrl + Alt + Z. Operatin Interface Cmpliance Guardian 1 Reprt 2 Administratin 3 User: admin 4 Help and Abut Infrmatin 5 Cmpliance Guardian Official Website 6 Ht Key Cmpliance Scanner Page The fllwing table prvides a list f ht keys fr the functinalities n the ribbn f the Cmpliance Scanner page. Functinality Name and Ht Key Cmpliance Guardian 1 Reprt 2 Administratin 3 Cmplianc e Scanner 278 P Create C SharePi nt S SharePin t Tab Plan Builder S C Wizard Mde M Back Next Finish Finish and Run Nw B N R O Cmpliance Guardian Installatin and Administratin User Guide

279 Functinality Name and Ht Key Cancel C Frm L Save R Mde Save and Run O Nw Cancel C Scan S Create C Plicy View V Details Edit E Delete D Exprt W Clse X Filter F Create N Plicy View V Details Edit E Delete D Clse X Database D Create C Manager View V Details Edit E Delete D Clse X Accunt A Grups G Add Grup AG Manager Edit Grup E Shw Users S Delete Grup D Cmpliance Guardian Installatin and Administratin User Guide 279

280 280 File System F Functinality Name and Ht Key Permissin P Level Authenticati AM n Manager Clse X Users U Add User AU Edit User E Delete User DU Activate AC Deactivate DA Permissin P Level Authenticati AM n Manager Clse X Jb J Mnitr Clse File System Tab Plan Builder X F C Wizar d Mde Frm Mde M Back B Next N Finish R Finish and O Run Nw Cancel C L Save R Save and Run O Nw Cmpliance Guardian Installatin and Administratin User Guide

281 Functinality Name and Ht Key Cancel Cnfigure N Create C Cnnecti View V n Detail s Edit E Delete D Scan Plicy Filter Plicy Database Manager Cmpliance Guardian Installatin and Administratin User Guide Clse X S Create C View V Detail s Edit E Delete D Exprt W Clse X F Create N View V Detail s Edit E Delete D Clse X D Create C View V Detail s Edit Delete Clse E D X C 281

282 Functinality Name and Ht Key Accunt A Grup G Add Grup AG Manager s Edit Grup E Shw Users S Delete Grup D Permissin P Level Authenticati n Manager AM Clse X Users U Add User AU Edit User E Delete User DU Activate AC Deactivate DA Permissin P Level Authenticati AM n Manager Clse X Jb J Mnitr Clse X Website W Create Plan Tab W Scan Plicy S Create C View Details V Edit E Delete D Exprt W Clse X 282 Cmpliance Guardian Installatin and Administratin User Guide

283 Functinality Name and Ht Key Filter Plicy F Create N View Details V Edit E Delete D Clse X Database Manager D Create C View Details V Edit E Delete D Clse X Save R Save and Run Nw O Cancel C Database D Database Tab D Plan Builder C Wizard Mde M Frm Mde Cnfigure N Create C Database View Details V Cnnectin Edit E Delete D Clse X Scan Plicy S Create C View Details V Edit E Delete D Exprt W Clse X D Create C L Cmpliance Guardian Installatin and Administratin User Guide 283

284 View Details Edit Delete Run Nw V E D R Functinality Name and Ht Key Database View Details V Manager Edit E Delete D Clse X Accunt A Grup G Add Grup AG Manager s Edit Grup E Shw Users S Delete Grup D Permissin Level P Authenticatin AM Manager Clse X Users U Add User AU Edit User E Delete User DU Activate AC Deactivate DA Permissin Level P Authenticatin AM Manager Clse X Jb Mnitr J Clse X 284 Cmpliance Guardian Installatin and Administratin User Guide

285 Functinality Name and Ht Key Cnfigu A Create C Lync L Save O re Save and Run Nw R Archivi Cancel C ng View Details V Edit U Delete R Enable E Disable D Run Nw R Jb Mnitr J Clse X Search S Lync L Exprt E Exprt t EDRM E Exprt t Cncrdance C Exprt t HTML H Cnfigure C Exprt Settings Exprt R Requests Clse X Cmpliance Scanner fr Lync Page Cmplian ce Scanner Functinality Name and Ht Key P Create C Lync L Lync tab H Plan Builder P Wizard M Back Mde Next Finish B N R Cmpliance Guardian Installatin and Administratin User Guide 285

286 Finish and Run Nw Cancel Frm L Save R Mde Save and Run Nw O Cancel C Cnfigure C Create C Lync L Save O Archiving Save and Run Nw R Cancel C View V Details Edit U Delete R Enable E Disable D Run Nw R Jb J Mnitr Clse X Scan Plicy S Create C View Details V Edit E Delete D Exprt W Clse X Filter Plicy F Create N View Details V Edit E Delete D Clse X O C 286 Cmpliance Guardian Installatin and Administratin User Guide

287 Database Manager Accunt Manager Jb Mnitr Clse D Create C View Details V Edit E Delete D Clse X A Grups G Add Grup AG Edit Grup E Shw Users S Delete Grup D Permissin Level P Authenticatin AM Manager Clse X Users U Add User AU Edit User E Delete User DU Activate AC Deactivate DA Permissin Level P Authenticatin AM Manager Clse X J X Classificatin Scanner Page The fllwing table prvides a list f ht keys fr the Scheduled Classificatin Scanner and Real-Time Classificatin Scanner in Classificatin Scanner mdule. Cmpliance Guardian Installatin and Administratin User Guide 287

288 Functinality Name and Ht Key Cmpliance Guardian 1 Reprt 2 Administratin 3 Scheduled Classificatin Scanner P Real-Time Classificatin Scanner H Scheduled Classificatin Scanner Page The fllwing table prvides a list f ht keys fr the functinalities n the ribbn f the Scheduled Classificatin Scanner page. Scheduled Classificatin Scanner P Creat e C SharePin t S Functinality Name and Ht Key SharePin S t Tab Plan C M Back B Builder Wizard Next N Mde Finish R Finish and O Run Nw Cancel C Frm L Save R Mde Save and O Run Nw Cancel C Scan S Create C Plicy View Details V Edit E Delete D Exprt W Clse X 288 Cmpliance Guardian Installatin and Administratin User Guide

289 Functinality Name and Ht Key Filter F Create N Plicy View Details V Edit E Delete D Clse X Actin A Create C Plicy View Details V Edit E Delete D File System F Database Manager Jb Mnitr Clse File System Tab Plan Builder Clse X D Create C View Details V Edit E Delete D Clse X J X F C Wizard Mde M Back B Next N Finish R Finish and Run O Nw Cancel C Frm Mde L Save R Cmpliance Guardian Installatin and Administratin User Guide 289

290 Functinality Name and Ht Key Cnfigure Cnnecti n Scan Plicy Filter Plicy Actin Plicy Database Manager N Create C View Details V Edit E Delete D Clse X S Create C View Details V Edit E Delete D Exprt W Clse X F Create N View Details V Edit E Delete D Clse X A Create C View Details V Edit E Delete D Clse X D Create C View Details V Edit E Delete D Clse X Save and Run Nw Cancel O C 290 Cmpliance Guardian Installatin and Administratin User Guide

291 View Detail s Edit Delet e Run Nw Test Run V E D R T Functinality Name and Ht Key Jb J Mnitr Clse X Scheduled Classificatin Scanner fr Scial Netwrk Page Scheduled Classificatin Scanner P Create C Scial Netwrk D Functinality Name and Ht Key Scial L Netwrk tab Plan C Wizard Mde M Back B Builder Next N Finish R Finish and Run O Nw Cancel C Frm Mde L Save R Save and Run O Nw Cancel C Cmpliance Guardian Installatin and Administratin User Guide 291

292 Cnfigure N Create C Cnnectin View Details W Edit E Delete D Clse X Scan Plicy S Create C View Details V Edit E Delete D Exprt W Clse X Actin A Create C Plicy View Details V Edit E Delete D Clse X Database D Create C Manager View Details V Edit E Delete D Clse X Jb J Mnitr Clse X Real-Time Classificatin Scanner page The fllwing table prvides a list f ht keys fr the functinalities n the ribbn f the Real-Time Classificatin Scanner page. 292 Cmpliance Guardian Installatin and Administratin User Guide

293 Real-Time Classificatin Scanner Functinality Name and Ht Key H Create C SharePint S SharePint Tab S Stp Inheriting/ T Inheriting Scan Plicy S Create C View Details V Edit E Delete D Exprt W Clse X Filter Plicy F Create N View Details V Edit E Delete D Clse X Actin Plicy A Create C View V Edit E Delete D Clse X Database Manager D Create C View Details V Edit E Delete D Clse X Apply P Create Rule R Jb Mnitr J Clse X C Scial Netwrk L Cmpliance Guardian Installatin and Administratin User Guide 293

294 Real-Time Classificatin Scanner H Edit Delete E D Scial Netwrk Functinality Name and Ht Key Edit E Delete D Enable B Disable I Cnfigure N Create C Cnnectin View Details V Edit E Delete D Clse X Scan Plicy S Create C View Details V Edit E Delete D Exprt W Clse X Actin Plicy A Create C View Details V Edit E Delete D Clse X Apply P Create Rule R Jb Mnitr J Clse X 294 Cmpliance Guardian Installatin and Administratin User Guide

295 Jb Mnitr Page The fllwing table prvides a list f ht keys fr the functinalities n the ribbn f the Jb Mnitr page. Fr example, cntinue pressing M n yur keybard t enter the Mdule interface. Functinality Name and Ht Key List View LV Calendar View CV Time Zne TZ View Details D OK O Dwnlad VD Jb Details Page V Cancel C Clse X Dwnlad DL OK O Cancel C Pause P Resume RE Stp SP Start ST Delete DE Delete withut Ntificatin D Date Range DR Mdule M Reprt Lcatin RL OK O Back B Cmpliance Guardian Installatin and Administratin User Guide 295

296 Scheduled Jb Mnitr Page T access the Scheduled Jb Mnitr page by using ht keys frm within the Jb Mnitr interface, press Ctrl + Alt + Z n yur keybard t access the ht key mde, and then press S n the keybard t enter the Scheduled Jb Mnitr page. The fllwing table prvides a list f ht keys fr the functinalities n the ribbn f the Scheduled Jb Mnitr page. Fr example, cntinue pressing L t enter the List View interface. List View Calendar View Time Zne Enable Disable Date Range Mdule Functinality Name and Ht Key L C TZ E D R M Cntrl Panel Page The fllwing table prvides a list f ht keys fr the functinalities n the ribbn f the Cntrl Panel page. Cntrl Panel P Functinality Name and Ht Key 296 Cmpliance Guardian Installatin and Administratin User Guide

297 Appendix B: Cnfiguring Checks and Test Suites When editing checks and test suites in the Test Suite Manager in Cmpliance Guardian, yu will use detailed cnfiguratin screens t set the attributes and values. If yu are editing a single check (per the Editing a Check sectin earlier in this dcument), refer t Cnfiguring Check Type Attributes in this Appendix t cnfigure the details accrding t the specific test definitin file type. If yu are editing a test suite (per the Editing Test Suite sectin earlier in this dcument), refer t Cnfiguring Test Suite File Attributes in this Appendix t cnfigure the details accrding t the specific type f test suite file. Cnfiguring Check Type Attributes Based n the different kinds f checks yu can run, there are the fllwing types f checks: Element Type EnhancedElement Type MatchedElement Type FindText Type CmplexFindText Type RegularExpressin Type CmplexRegEx Type Dictinary Type Ckie Type SSL Type WebBeacns Type FindFile Type LinkValidatin Type FilePrperty Type Redactin Type Check CustmScan Details abut cnfiguring each f these check types are prvided in the fllwing sectins. Cmpliance Guardian Installatin and Administratin User Guide 297

298 Element Type Check The Element type check is used t validate whether HTML/XML elements have particular settings n attributes r cntents. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cnfiguring Attributes fr Element Type Check Cnfigure the attributes fr the Element type check accrding t the instructins in the fllwing sectins. Element Cnfigure the fllwing attributes under the Element sectin: ListLc Name Specify the element name that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. ResultNA Specify a result when the specified element is nt fund. If TrueResult is selected, then if the specified element is nt fund, the True result will be returned. If FalseResult is selected, then if the specified element is nt fund, the False result will be returned. If NAResult is selected, then if the specified element is nt fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. In ther wrds, yu have the ptin t set the result t Nt Applicable if nne f the elements are fund. TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False. Cnfigure the fllwing attributes under the ListLc sectin: Type There are tw values fr this attribute, Valid and Invalid. All elements that are cnsidered valid r invalid are stred t the database (the Lcatin). Status This is used t indicate the dispsitin f the element and the severity selected by the user. Nte that in the Reprt Text step, if the status set fr True Result r False Result is Failed, the value fr the Status attribute will be Fail, and the value cannt be changed. 298 Cmpliance Guardian Installatin and Administratin User Guide

299 ElementRepeat If yu want t cnfigure the ElementRepeat sectin, select the checkbx befre the element (this sectin is ptinal): TextCmpare Alert Specify whether t check fr repeating elements. Value Specify the maximum times the element can repeat befre the check is determined False. If yu want t cnfigure the TextCmpare sectin, select the checkbx befre the element (this sectin is ptinal): Attributes CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the element being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. If yu want t cnfigure the Attributes sectin, select the checkbx befre the element (this sectin is ptinal): Name Specify attribute name that will be tested. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If it is set t True, then the test will fail if the specified attribute des nt exist. Select the delete buttn ( ) t delete this check rule. The fllwing elements with specific attributes appear within the ptinal Attributes sectin: Length This element is ptinal. Select the checkbx befre this element, and the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Cmpliance Guardian Installatin and Administratin User Guide 299

300 Characters Specify the number f the characters used fr the cmpare. Select the delete buttn ( ) t delete this check rule. Select Add Anther Length t add anther rule. TextCmpare This element is ptinal. Select the checkbx befre this element, and the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute values being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this check rule. Select Add Anther TextCmpare t add anther rule. WrdsRepeat This element is ptinal. Select the checkbx befre this element, the fllwing attribute appears: Number Define the number f times that wrds can repeat in the attribute value befre the test fails. Select Add Anther Attribute t add anther Attributes check rule. ElementCntent If yu want t cnfigure the ElementCntent sectin, select the checkbx befre the element (this sectin is ptinal): CntentReq Specify whether the specified element must cntain cntent. If Yes is selected, then the element must cntain cntent, r the check fr this sectin will be False. The fllwing elements with specific attributes are within the ptinal ElementCntent sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal and NtEqual. Characters Specify the number f the characters used fr the cmpare. Select the delete buttn ( add anther rule. ) t delete this check rule. Select Add Anther Length t 300 Cmpliance Guardian Installatin and Administratin User Guide

301 TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual and MustNtEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the cntent being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this check rule. Select Add Anther TextCmpare t add anther rule. ChildElement If yu want t cnfigure the ChildElement sectin, select the checkbx befre the element (this sectin is ptinal): Name Specify the name f the child element that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. MustExist Specify whether r nt the child element must exist. If True is selected, then the test will fail if there is N child element. The fllwing elements with specific attributes are within the ptinal ChildElement sectin: ElementRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Alert Specify whether t check fr repeating elements. Value Specify the maximum times the element can repeat befre the check is determined False Attributes This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the attribute name that will be tested. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If True is selected, then the test will fail if the specified attribute des nt exist. Cmpliance Guardian Installatin and Administratin User Guide 301

302 The fllwing elements with specific attributes are within the ptinal Attributes sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal and NtEqual. Characters Specify the number f the characters used fr the cmpare. Select the delete buttn ( ) t delete this check rule. Select Add Anther Length t add anther rule. TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, and MustNtEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this check rule. Select Add Anther TextCmpare t add anther check rule. WrdsRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attribute appears: Number Define the number f times that wrds can repeat in the attribute value befre the test fails. ElementCntent This sectin is ptinal. Select the checkbx befre this element, the fllwing attribute appears: CntentReq Specify whether the specified element must cntain cntent. If Yes is selected, then the element must cntain cntent, r the check fr this sectin will be False. The fllwing elements with specific attributes are within the ptinal ElementCntent sectin: 302 Cmpliance Guardian Installatin and Administratin User Guide

303 Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Characters Specify the number f the characters used fr the cmpare. Select the delete buttn ( ) t delete this check rule. Select Add Anther Length t add anther check rule. TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this check rule. Select Add Anther TextCmpare t add anther check rule. Filter The cntent that meets the cnditin cnfigured in this element field can be tested. The fllwing elements with specific attributes are available in the ptinal Filter sectin: Attributes Fr the details abut the attributes, refer t Attributes. ElementCntent Fr the details abut the attributes, refer t ElementCntent. Element Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the Element type check. The selected file A will be tested. It cntains tw ndes: <img src="attribute.png" url="anther.png" /> <img src="//msstnjsmsdn net/b/ss/msstnjsmsdn/1/h ns/0" height="1" width="1" brder="0" alt="" /> Cmpliance Guardian Installatin and Administratin User Guide 303

304 Create and cnfigure the Element Type check test lgic: Create an Element type check. In the Reprt Text step, in the False Result and Message field, select User Review Required in the False Result drp-dwn list. Cnfigure the Element sectin: Specify the element name IMG fr the Name attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select ResultNA in the drp-dwn list under the ResultNA attribute. Select One in the drp-dwn list under the TrueIf attribute. Select False in the drp-dwn list under the ValidWhen attribute. Cnfigure the ListLc sectin: Select Invalid in the drp-dwn list under the Type attribute. Select Warn in the drp-dwn list under the Status attribute. Select the checkbx befre the ElementRepeat element, and then select Yes in the drp-dwn list under the Alert attribute. Enter 2 in the Value field. Select the checkbx befre the TextCmpare element: Select MustCntain in the drp-dwn list under the CmpareType attribute. Enter ; as the separatr. Select N in the drp-dwn list under the CaseSensitive attribute. Enter A in the Value field. Save the check. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the check test lgic: See the ElementRepeat sectin. The element IMG is cntinuusly repeated 2 times in the file A, s the check in the ElementRepeat sectin is False. See the TextCmpare sectin. The nde in the file cntains the value A, s the check in the TextCmpare sectin is True. Frm the abve example, the check result f this check is False (any f the check results is False, the check result f this check is False). Accrding t the settings in False Result and Message in the Reprt Text step, the returning status is User Review Required, which will be displayed in the Cmpliance Guardian reprt. See the attributes under Element: True has been selected in the drp-dwn list under ValidWhen, but the check result f this check is False, s the result fr the ValidWhen attribute is Invalid. 304 Cmpliance Guardian Installatin and Administratin User Guide

305 See the ListLc sectin. The result fr ValidWhen is Invalid, s the check status will be Warn, and this check status will be recrded in the Cmpliance Guardian database, users cannt see the status in the Cmpliance Guardian GUI. EnhancedElement Type Check The EnhancedElement type check is used t validate tw kinds f elements in ne check during the scanning prgress. The functinality f the EnhancedElement type check is similar t the Element type check. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cnfiguring Attributes fr EnhancedElement Type Check Cnfigure the attributes fr the EnhancedElement type check accrding t the instructins in the fllwing sectins. EnhancedElement There are the five attributes under this element. Fr the details abut the five attributes, refer t the Cnfiguring Attributes fr Element Type sectin. ListLc There are the tw attributes under this element. Fr the details abut the tw attributes, refer t the Cnfiguring Attributes fr Element Type sectin. ElementRepeat This sectin is ptinal. Fr the details abut the attributes under this element, refer t the Cnfiguring Attributes fr Element Type sectin. TextCmpare This sectin is ptinal. Fr the details abut the attributes under this element, refer t the Cnfiguring Attributes fr Element Type sectin. Attributes This sectin is ptinal. Fr the details abut the attributes under this element, refer t the Cnfiguring Attributes fr Element Type sectin. ElementCntent This sectin is ptinal. Fr the details abut the attributes under this element, refer t the Cnfiguring Attributes fr Element Type sectin. Cmpliance Guardian Installatin and Administratin User Guide 305

306 ChildElement This sectin is ptinal. Fr the details abut the attributes under this element, refer t the Cnfiguring Attributes fr Element Type sectin. SecndaryElement This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the secndary element that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. MustExist Specify whether the secndary element must exist. TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. MustNext Specify whether the secndary element must be next t the primary element (the element yu specified abve in this check). If yu select Yes in the drpdwn list under this attribute, nly the secndary element that is next t the primary element will be checked. If yu select N in the drp-dwn list under this attribute, then all the specified secndary elements will be checked. The fllwing elements with specific attributes are within the ptinal SecndaryElement sectin: ElementRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Alert Specify whether t check fr repeating elements. Value Specify the maximum times the element can repeat befre the check is determined False. Attributes This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the attribute name that will be tested. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If True is selected, then the test will fail if the specified attribute des nt exist. Select the delete buttn ( ) t delete this Attributes check rule. 306 Cmpliance Guardian Installatin and Administratin User Guide

307 The fllwing elements with specific attributes are within the ptinal Attributes sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Characters Specify the number f the characters used fr the cmpare. Select the delete buttn ( ) t delete this check rule. Select Add Anther Length t add anther rule. TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the Separatr specified befre t separate the values. Select the delete buttn ( ) t delete this check rule. Select Add Anther TextCmpare t add anther rule. WrdsRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attribute appears. Number Define the number f times that wrds can repeat in the attribute value befre the test fails. ElementCntent This sectin is ptinal. Select the checkbx befre this element, the fllwing attribute appears: CntentReq Specify whether the specified element must cntain cntent. If Yes is selected, then the element must cntain cntent, r the check fr this sectin will be False. The fllwing elements with specific attributes are within the ptinal ElementCntent sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Cmpliance Guardian Installatin and Administratin User Guide 307

308 CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Characters Specify the number f the characters used fr the cmpare. Select the delete buttn ( ) t delete this check rule. Select Add Anther Length t add anther rule. TextCmpare This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual,MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this check rule. Select Add Anther TextCmpare t add anther rule. ChildElement This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the name f the child element that will be tested. CaseSensitive Specify whether the element name being tested fr must match the case exactly. MustExist Specify whether r nt the child element must exist. If True is selected, then the test will fail if there is N child element. The fllwing elements with specific attributes are within the ptinal ChildElement sectin: ElementRepeat This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Alert Specify whether t check fr repeating elements. Value Specify the maximum times the element can repeat befre the check is determined False. Attributes This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: Name Specify the attribute name that will be tested. 308 Cmpliance Guardian Installatin and Administratin User Guide

309 CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If True is selected, then the test will fail if the specified attribute des nt exist. The fllwing elements with specific attributes are within the ptinal Attributes sectin: Length This sectin is ptinal. Select the checkbx befre this element, the fllwing attributes appear: CmpareType Specify a cmpare type fr this length cmpare. The attributes fr CmpareType are GreaterThan, LessThan, GreaterOrEqualThan, LessOrEqualThan, Equal, and NtEqual. Characters Specify the number f the characters used fr the cmpare. Select the delete buttn ( ) t delete this check rule. Select Add Anther Length t add anther rule. Filter The cntent that meets the cnditin cnfigured in this element field can be tested. The fllwing elements with specific attributes are available in the ptinal Filter sectin: Attributes Fr the details abut the attributes, refer t Attributes. ElementCntent Fr the details abut the attributes, refer t ElementCntent. EnhancedElement Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the EnhancedElement type check. The fllwing ndes are cntained in the selected file A that will be tested: <a href=" < >ggle</a> <img src="" alt="this is a test test img"/> <img src="" alt="this is a test img"/> Create and cnfigure the EnhancedElement check test lgic: Create an EnhancedElement type check. In the Reprt Text step, in the False Result and Message field, select User Review Required in the False Result drp-dwn list. Cnfigure the Element sectin: Specify the element name A fr the Name attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Cmpliance Guardian Installatin and Administratin User Guide 309

310 Select ResultNA in the drp-dwn list under the ResultNA attribute. Select One in the drp-dwn list under the TrueIf attribute. Select False in the drp-dwn list under the ValidWhen attribute. In the ListLc sectin: Select Valid in the drp-dwn list under the Type attribute. Select Warn in the drp-dwn list under the Status attribute. Select the checkbx befre TextCmpare, and cnfigure the fllwing attributes: Select MustCntain in the drp-dwn list under the CmpareType attribute. Enter ; as the separatr. Select Yes in the drp-dwn list under the CaseSensitive attribute. Enter ggle in the Value field. Select the checkbx befre SecndaryElement, and cnfigure the fllwing attributes: Specify the element name IMG fr the Name attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select Yes in the drp-dwn list under the MustExist attribute. Select One in the drp-dwn list under the TrueIf attribute. Select Yes in the drp-dwn list under the MustNext attribute. Select the checkbx befre Attributes, and cnfigure the fllwing attributes: Save the check. Specify the attribute name alt fr the Name attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select Yes in the drp-dwn list under the AllwNull attribute. Select Yes in the drp-dwn list under the MustExist attribute. Select the checkbx befre the WrdsRepeat element, and then enter 2 in the Number field. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the check test lgic: See the TextCmpare sectin: the nde <a href=" < >ggle</a> in the file cntains the value ggle, s the check result in the TextCmpare sectin is True. 310 Cmpliance Guardian Installatin and Administratin User Guide

311 See the attributes under Element: True has been selected in the drp-dwn list under ValidWhen, and the check result fr the element A in this check is True, s the result fr ValidWhen sectin is Valid. See the ListLc sectin: the result fr ValidWhen is Valid, s the lcatin f the nde <a href=" < >ggle</a> will be temprarily recrded (the lcatin f the nde is TEMPORARILY recrded, but is NOT really recrded in the Cmpliance Guardian database. Fr this type f check, nly the lcatin f the instance fund by the SecndaryElement check can be recrded). See the SecndaryElement sectin: because we have set Yes fr the MustNext attribute, the nde <img src="" alt="this is a test test img"/> in file A will be checked, the nde <img src="" alt="this is a test img"/> will nt be checked: See the Attributes sectin under SecndaryElement: we have specified 2 in the Number field under the WrdsRepeat attribute, the value in the nde <img src="" alt="this is a test test img"/> cntains tw repeated wrds: test, s the check fr Attributes is False. See the attributes under Element: True has been selected in the drp-dwn list under ValidWhen, but the check result f this check is False, s the result fr ValidWhen field is Invalid. See the ListLc sectin: the result fr ValidWhen is Invalid, s the check status is Warn, and this check status will be recrded in the Cmpliance Guardian database, users cannt see the status in the Cmpliance Guardian GUI. Fr this type f check, if there are nthing temprarily recrded in the EnhancedElement check sectin, the SecndaryElement check will nt start, and the check result f this check will be True. If there are smething that are recrded in the EnhancedElement check sectin, the SecndaryElement check will start. If there are smething recrded based n the SecndaryElement check, the result f this check will be False. On the cntrary, if there are nthing recrded based n the SecndaryElement check, the result f this check will be True. Since there is smething recrded in the Cmpliance Guardian database in this use case, the check result f this check is False. Accrding t the setting in False Result and Message in the Reprt Text step, the returning status is User Review Required, which will be displayed in the Cmpliance Guardian reprt. MatchedElement Type Check The MatchedElement type check is used t validate the matching relatinship between tw elements. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cmpliance Guardian Installatin and Administratin User Guide 311

312 Cnfiguring Attributes fr MatchedElement Type Check Cnfigure the attributes fr the MatchedElement type check accrding t the instructins in the fllwing sectins. MatchElement There are the five attributes under this element. Fr the details abut the five attributes, refer t the Cnfiguring Attributes fr Element Type sectin. ListLc There are tw attributes under this element. Fr the details abut the tw attributes, refer t the Cnfiguring Attributes fr Element Type sectin. Attributes This sectin is ptinal. Fr the details abut the attributes under this element, refer t the Cnfiguring Attributes fr Element Type sectin. ElementCntent This sectin is ptinal. The details abut the attributes under this element, refer t the Cnfiguring Attributes fr Element Type sectin. ChildElement This sectin is ptinal. The details abut the attributes under this element, refer t the Cnfiguring Attributes fr Element Type sectin. SecndaryMatch This sectin is ptinal. Select the checkbx befre the element, and cnfigure the fllwing attributes: SecndaryMatch Cnfigure the fllwing attributes fr this element: Name Specify the element that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. ResultNA Specify a result when the specified element is nt fund. If TrueResult is selected, then if the specified element is nt fund, the True result will be returned. If FalseResult is selected, then if the specified element is nt fund, the False result will be returned. If NAResult is selected, then if the specified element is nt fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. This is basically stating that yu have the ptin t set the result t Nt Applicable if nne f the elements are fund. 312 Cmpliance Guardian Installatin and Administratin User Guide

313 TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False. Attribute Cnfigure the fllwing attributes fr this element: Name Specify the name f the attribute t be tested. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. AllwNull Specify whether the attribute that has n value will be tested. MustExist Specify whether r nt the attribute has t exist. If True is selected, then the test will fail if the specified attribute des nt exist. TextCmpare Cnfigure the fllwing attributes fr this element: MatchElementValue If the Attributes element under the MatchElement sectin has been cnfigured, this radi buttn will be selectable. If this radi buttn is selected, cnfigure the fllwing attributes: Name All the attribute names cnfigured under the MatchElement sectin will be laded. Select a name frm the drp-dwn list fr the test. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. CmpareType There are tw values fr this attribute: MustCntain and MustNtCntain. If MustCntain is selected, the test cnditin is: the value f the attribute under the SecndaryMatch sectin must cntain the value f the attribute under the MatchElement sectin, r the check will be failed; If MustNtCntain is selected, the test cnditin is: the value f the attribute under the SecndaryMatch sectin must nt cntain the value f the attribute under the MatchElement sectin, r the check will be failed. TextCmpare If this radi buttn is selected, cnfigure the fllwing attributes: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, and MustNtEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Cmpliance Guardian Installatin and Administratin User Guide 313

314 Filter The cntent that meets the cnditin cnfigured in this element field can be tested. The fllwing elements with specific attributes are available in the ptinal Filter sectin: Attributes Fr the details abut the attributes, refer t Attributes. ElementCntent Fr the details abut the attributes, refer t ElementCntent. MatchedElement Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the MatchedElement type check. The selected file A that will be tested cntains the fllwing ndes: <Input id="search-keywrd"/> <Input id=".dcx"> <label Fr=".dcx"> <label Fr="keywrd"/> Create and cnfigure the MatchedElement check test lgic: Create a MatchedElement type check. In the Reprt Text step, in the True Result and Message field, select Passed in the True Result drp-dwn list. Cnfigure the Element sectin: Specify the element name Input fr the Name attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select ResultNA in the drp-dwn list under the ResultNA attribute. Select One in the drp-dwn list under the TrueIf attribute. Select True in the drp-dwn list under the ValidWhen attribute. Cnfigure the ListLc sectin: Select Valid in the drp-dwn list under the Type attribute. Select Nte in the drp-dwn list under the Status attribute. Select the checkbx befre Attributes, and cnfigure the fllwing attributes: Specify the attribute name ID fr the Name attribute Select N in the drp-dwn list under the CaseSensitive attribute. Select Yes in the drp-dwn list under the AllwNull attribute. Select True in the drp-dwn list under the MustExist attribute. Select the checkbx befre Length, and cnfigure the fllwing attributes: Select GreaterThan in the drp-dwn list under the CmpareType attribute. 314 Cmpliance Guardian Installatin and Administratin User Guide

315 Enter 5 as the value f the Characters attribute. Select the checkbx befre SecndaryMatch: Cnfigure the fllwing attributes: Specify the element name Label fr the Name attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select ResultNA in the drp-dwn list under the ResultNA attribute. Select One in the drp-dwn list under the TrueIf attribute. Select False in the drp-dwn list under the ValidWhen attribute. In the Attributes sectin: Specify the attribute name FOR fr the Name attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select Yes in the drp-dwn list under the AllwNull attribute. Select True in the drp-dwn list under the MustExist attribute. In the TextCmpare sectin, select the MatchElementValue radi buttn: Save the check. Select the attribute name ID fr the Name attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select MustCntain in the drp-dwn list under the CmpareType attribute. Run a Cmpliance Scanner jb, the test suite used in this jb cntains the check cnfigured abve. Review the check test lgic: See the Attributes sectin under MatchElement: under the Length element: we have set GreaterThan fr the CmpareType attribute, and set 5 fr the Characters attribute, that means the check fr the nde <Input id="keywrd"/> in file A is True, while the check fr the nde <Input id=".dcx"> is False, and accrding t the value set fr ValidWhen, the nde <Input id="keywrd"/> will be valid. Accrding t the lgic f the ListLc sectin, the lcatin f the nde <Input id="keywrd"/> will be TEMPORARILY recrded (the lcatin f the nde <Input id=" keywrd"/> is TEMPORARILY recrded, but is Nt really recrded in the Cmpliance Guardian database, nly there are smething temprarily recrded in the MatchElement check sectin, can the SecndaryMatch sectin check start. If there are nthing recrded in the MatchElement check, the SecndaryMatch sectin check will nt start, and the result f the check will be True). In the SecndaryMatch sectin, see the fllwing ndes in file A: <Input id="keywrd"/> <Input id=".dcx"> Cmpliance Guardian Installatin and Administratin User Guide 315

316 <label Fr=".dcx"> <label Fr="search-keywrd"/> Accrding t the lgic set in the MatchElement sectin, the nde <Input id=" keywrd"/> meets the cnditin and is taken t participate t the secndary check. See the Attributes sectin under SecndaryMatch sectin, see the nde: <label Fr="search-keywrd"/>, the value f the attribute Fr (search-keywrd) cntains the value f the attribute id, s the check result f the SecndaryMatch sectin is True. See the ValidWhen attribute under SecndaryMatch, False has been selected in the drp-dwn list under ValidWhen, but the check result f this check is True, s the result fr ValidWhen attribute is Invalid. See the ListLc field, the result fr ValidWhen is Invalid, s the check status (Nte) and the lcatin f the nde <Input id="keywrd"/> (the lcatin f the attribute specified in the SecndaryMatch sectin will nt be recrded, the lcatin f the attribute that is specified in the MatchElement and meets the cnditin will be recrded in the database) will be recrded in Cmpliance Guardian database, users cannt see the status in the Cmpliance Guardian GUI. In the SecndaryMatch sectin, if yu select the MatchElementValue radi buttn under the TextCmpare sectin, the result f this check is nt determined by the check result f the MatchElement sectin, and nt determined by the check result f the SecndaryMatch sectin either. In the MatchElement sectin, if there are nthing temprarily recrded, the SecndaryMatch sectin check will nt start, and the result f this check will be True; while in the MatchElement sectin, if there are smething temprarily recrded, the SecndaryMatch sectin check will start. Accrding t the lgic in the SecndaryMatch sectin, if there are smething recrded in the SecndaryMatch check, the result f this check will be False. While if there are nthing recrded in the SecndaryMatch check, the result f this check will be True. In this use case, accrding t the SecndaryMatch sectin, the nde <Input id="keywrd"/> will be recrded in Cmpliance Guardian database. S the result f this check will be False. In the SecndaryMatch sectin, if yu select TextCmpare radi buttn under the TextCmpare sectin, if the element specified in the MatchElement sectin is nt fund, the result f this check will be the value set fr the ResultNA attribute; if the element specified in the MatchElement sectin is fund, the check result will be determined by the lgic in the SecndaryMatch sectin, the attributes cnfigured in the MatchElement sectin will nt affect the result f this check. 316 Cmpliance Guardian Installatin and Administratin User Guide

317 FindText Type Check The FindText type check is used t find specified text in a dcument. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cnfiguring Attributes fr FindText Type Check Cnfigure the attributes fr the FindText type check accrding t the instructins in the fllwing sectins. FindText This element has the fllwing attributes: TrueIf Specify the cnditin when the check result is True. If Fund is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be True. If NtFund is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be False. SearchAll Specify whether r nt t check the cmments and scripts. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be recrded in the Cmpliance Guardian database. If N is selected in the drp-dwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus attribute will be Fail, and the value cannt be changed. CaseSensitive Specify if the text being tested fr must match the case exactly. MustRepeat Specify the amunt f times a wrd r phrase must be fund befre cnsidering the cnditin t be Fund. When cnfiguring the check, if yu d nt enter a value fr this attribute, the value fr this attribute will be cnsidered 1 in the test. CmpareType Select MustCntain r MustEqual fr this attribute. Value Specify a scanned value. Cmpliance Guardian Installatin and Administratin User Guide 317

318 FindText Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the FindText type check. The cntent f the file A that will be tested cntains the fllwing tw values: 508, 508. Create and cnfigure the FindText check test lgic: Create a FindText Type check. In the Reprt Text step, in the False Result and Message field, select User Review Required in the False Result drp-dwn list. Cnfigure the elements in the check: Select NtFund in the drp-dwn list under the TrueIf attribute. Select Yes in the drp-dwn list under the SearchAll attribute. Select Yes in the drp-dwn list under the ListLcatin attribute. Select Nte in the drp-dwn list under the ListLcStatus attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Enter 2 as the value fr the MustRepeat attribute. Select MustEqual fr the CmpareType attribute. Enter 508 in the Value field. Save the check. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the FindText Check test lgic: If MustEqual is selected fr the CmpareType attribute, then the cntent must exactly equal the value we specified in rder t be fund. If MustCntain is selected fr this attribute, then the cntent nly needs t cntain the value in rder t be fund. Fr example, if the tested file cntains the wrd Frnt-end, and we select MustEqual fr the CmpareType attribute with the value specified as end, then the wrd Frnt-end will nt be fund, but if we select MustCntain fr the CmpareType attribute, the wrd Frnt-end will be fund. We have set 2 fr the MustRepeat attribute, and the value 508 has repeated 2 times in the file A, s the check is Fund. We have set NtFund fr the TrueIf value, s the check result f this check is False. Accrding t the setting in False Result and Message in the Reprt Text step, the returning status is User Review Required, which will be displayed in the Cmpliance Guardian reprt. We have set Yes fr the ListLcatin attribute, and have set Nte as the status, s the lcatin f 508 in the file A will be recrded in the Cmpliance Guardian database, the status is Nte. 318 Cmpliance Guardian Installatin and Administratin User Guide

319 CmplexFindText Type Check The CmplexFindText type check ffers a mre cmplex way t detect if tw text strings are cexisting in ne dcument. The functinality f the CmplexFindText type check is similar t the FindText type check. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t better understand the test lgic. Cnfiguring Attributes fr CmplexFindText Type Check Cnfigure the attributes fr the CmplexFindText type check accrding t the instructins in the fllwing sectins. Primary Cnfigure the fllwing attributes in this sectin: TrueIf Specify the cnditin when the check result is True. If Fund is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be True. If NtFund is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be False. SearchAll Specify whether r nt t check the cmments and scripts. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be recrded in the Cmpliance Guardian database. If N is selected in the drp-dwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus attribute will be Fail, and the value cannt be changed. CaseSensitive Specify if the text being tested fr must match the case exactly. MustRepeat Specify the amunt f times a wrd r phrase must be fund befre cnsidering the cnditin t be True. When cnfiguring the check, if yu d nt enter a value fr this attribute, the value fr this attribute will be cnsidered 1 in the test. CmpareType Select MustCntain r MustEqual fr this attribute. ResultNA If the primary check in this check is nt fulfilled, the scan status will be the value yu selected fr the ResultNA attribute. Value Specify a scanned value fr the primary check sectin. Cmpliance Guardian Installatin and Administratin User Guide 319

320 Secndary Cnfigure the fllwing attributes in this sectin: TrueIf Specify the cnditin when the check result is True. If Fund is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be True. If NtFund is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be False. SearchAll Specify whether r nt t check the cmments and scripts. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be recrded in the Cmpliance Guardian database. If N is selected in the drp-dwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus attribute will be Fail, and the value cannt be changed. CaseSensitive Specify if the text being tested fr must match the case exactly. MustRepeat Specify the amunt f times a wrd r phrase must be fund befre cnsidering the cnditin t be True. When cnfiguring the check, if yu d nt enter a value fr this attribute, the value fr this attribute will be cnsidered 1 in the test. CmpareType Select MustCntain r MustEqual fr this attribute. MaxDistanceTPrimary Specify the number f the characters. The scan engine extracts text as the scanning cntents. In the cntents, if the characters between a primary check instance (instance fund in the primary check) and the secndary check instance (instance fund in the secndary check) are less than the number specified here, the secndary check is Fund. Value Specify a scanned value fr the secndary check sectin. CmplexFindText Check Test Lgic Example Refer t the fllwing example fr better understanding the test lgic f the CmplexFindText type check. The cntent f the selected file A that will be tested cntains the fllwing values: 508, Justice. Create and cnfigure the CmplexFindText check test lgic: Create a FindText Type check. In the Reprt Text step, in the False Result and Message field, select User Review Required in the False Result drp-dwn list. 320 Cmpliance Guardian Installatin and Administratin User Guide

321 Cnfigure the Primary sectin: Select Fund in the drp-dwn list under the TrueIf attribute. Select Yes in the drp-dwn list under the SearchAll attribute. Select Yes in the drp-dwn list under the ListLcatin attribute. Select Nte in the drp-dwn list under the ListLcStatus attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select MustCntain in the drp-dwn list under the CmpareType attribute. Select FalseResult in the drp-dwn list under the ResultNA attribute. Enter 508 in the Value field. Cnfigure the Secndary sectin: Select NtFund in the drp-dwn list under the TrueIf attribute. Select Yes in the drp-dwn list under the SearchAll attribute. Select Yes in the drp-dwn list under the ListLcatin attribute. Select Nte in the drp-dwn list under the ListLcStatus attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select MustCntain in the drp-dwn list under the CmpareType attribute. Enter 10 in the MaxDistanceTPrimary attribute field. Enter JUSTICE in the Value field. Save the check. Run a Cmpliance Scanner jb, the test suite used in this jb cntains the check cnfigured abve. Review the check test lgic: If MustEqual is selected fr the CmpareType attribute, then the cntent must exactly equal the value we specified in rder t be fund. If MustCntain is selected fr this attribute, then the cntent nly needs t cntain the value in rder t be fund. Fr example, if the tested file cntains the wrd Frnt-end, and we select MustEqual fr the CmpareType attribute with the value specified as end, then the wrd Frnt-end will nt be fund, but if we select MustCntain fr the CmpareType attribute, the wrd Frnt-end will be fund. In this type f check, if the result f the primary check is True, the secndary check can start fr this check. If the result f the primary check is False, the secndary check will nt start fr this check and the result f this check will be determined by the primary check. Fr the ResultNA attribute, if TrueResult is set as the value f this attribute, the result f this check will be True. If FalseResult is set as the value f this attribute, the result f this check will be False. If NAResult is set as the value f this attribute, the Cmpliance Guardian Installatin and Administratin User Guide 321

322 status f the tested file will be Nt Applicable, and Nt Applicable will be displayed in the Cmpliance Guardian reprt. Accrding t the MaxDistanceTPrimary attribute, if the secndary check starts in the extracted file cntent: In this use case: RegularExpressin Type Check If the characters between the instance fund in the primary check and the instance fund in the secndary check are less than the number f characters specified in the MaxDistanceTPrimary attribute, the result f the secndary check is Fund. If the characters between the instance fund in the primary check and instance fund in the secndary check are greater than the number f characters specified in the MaxDistanceTPrimary attribute, the result f the secndary check is Nt Fund. In the primary check, the value that will be searched fr in the file is 508, which can be fund in the file A, s the result is Fund. Accrding t the lgic f the TrueIf attribute, the result f the primary check is True. The secndary check will start. In the secndary check, the value that will be searched fr in the file is JUSTICE, which can be fund in the file A. In the extracted file cntent, the characters between JUSTICE and 508 are less than 10 characters, s the result f the secndary check is Fund. Accrding t the lgic f the TrueIf attribute, the result f the secndary check is False. Accrding t the setting in False Result and Message in the Reprt Text step, the returning status is User Review Required which will be displayed in the Cmpliance Guardian reprt. The RegularExpressin type check is used t find a string f text that fits the frmat f the defined regular expressin. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cnfiguring Attributes fr RegularExpressin Type Check Cnfigure the attributes fr the RegularExpressin type check accrding t the instructins in the fllwing sectins. RegularExpressin Cnfigure the fllwing attributes in this sectin: IsFindText Specify whether r nt t extract the text as the scanning cntent. If Yes is selected in the drp-dwn list under this attribute, the scan engine will extract the text as the scanning cntent. if N is selected in the drp-dwn list under this attribute, the scan engine will use the surce cde as the scanning cntent. 322 Cmpliance Guardian Installatin and Administratin User Guide

323 SearchAll Specify whether r nt t check the cmments and scripts. CaseSensitive Specify if the text being tested fr must match the case exactly. TrueIf Specify the cnditin when the check result is True. If Fund is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be True. If NtFund is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be False. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be recrded in the Cmpliance Guardian database. If N is selected in the drp-dwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus attribute will be Fail, and the value cannt be changed. MustRepeat Specify the amunt f times the value that matches the regular expressin must be fund befre cnsidering the cnditin t be True. When cnfiguring the check, if yu d nt enter a value fr this attribute, the value fr this attribute will be cnsidered 1 in the test. CustmCheck Enter a CustmCheck name fr this attribute. The CustmCheck is used t calculate check digit n the result f the regular expressins, in rder t validate the result. Fr mre infrmatin n CustmCheck, refer t Using CustmScan in Cmpliance Guardian.. This attribute is ptinal. Filter If yu want t cnfigure the Filter sectin, select the checkbx befre the element (this sectin is ptinal). Select the checkbx befre Text if yu want t cnfigure the Text sectin: CaseSensitive Specify if the element being tested must match the case exactly. Separatr Specify a separatr if multiple values are specified. Value Define ne r mre values fr the test, and use the separatr specified befre t separate the values. If the scanned result that matches the specified regular expressin exactly matches the value specified here, this result will be filtered ut. Select Add Anther Text t add anther Text filter check rule. Select the delete buttn ( Text filter check rule. Select the checkbx befre Regex if yu want t cnfigure the Regex sectin: ) t delete a CaseSensitive Specify if the element being tested must match the case exactly. Cmpliance Guardian Installatin and Administratin User Guide 323

324 Value Define a regular expressin. If the scanned result that matches the specified regular expressin als matches the regular expressin specified here, this result will be filtered ut. Select Add Anther Regex t add anther Regex filter check rule. Select the delete buttn ( a Regex filter check rule. ) t delete Value Field Specify a regular expressin. The value that matches the regular expressin will be scanned. RegularExpressin Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the RegularExpressin type check. The file A that will be tested cntains tw wrds: Server-Side and frnt-end. Create and cnfigure the RegularExpressin type check: Create a RegularExpressin Type check. In the Reprt Text step, in the True Result and Message field, select Passed in the False Result drp-dwn list. Cnfigure the elements in the RegularExpressin sectin: Select Yes in the drp-dwn list under the IsFindText attribute. Select Yes in the drp-dwn list under the SearchAll attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select Fund in the drp-dwn list under the TrueIf attribute. Select Yes in the drp-dwn list under the ListLcatin attribute. Select Warn in the drp-dwn list under the ListLcStatus attribute. Select the checkbx befre Filter, and select the checkbx befre Text. Cnfigure the fllwing attributes in the Text sectin: Select N in the drp-dwn list under the CaseSensitive attribute. Enter ; as the separatr. Enter frnt-end;server-side in the Value field. Enter the regular expressin \b[a-za-z]+-[a-za-z]+\b in the Value field. A wrd that cntains a hyphen can match the regular expressin. Save the check. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the check test lgic. 324 In this case, in the file A, the wrds Server-Side and frnt-end match the specified regular expressin, but accrding t the lgic we cnfigured in the Filter sectin, the Cmpliance Guardian Installatin and Administratin User Guide

325 tw wrds will be filtered ut, s the result is Nt Fund. We set NtFund fr the TrueIf value, s the check result f this check is True. Accrding t the setting in True Result and Message in the Reprt Text step, the returning status is Passed, which will be displayed in the Cmpliance Guardian reprt. We set Yes fr the ListLcatin attribute, but n result that meets the cnditin in the check was fund. N lcatin will be recrded in the Cmpliance Guardian database. CmplexRegEx Type Check The CmplexRegEx type check ffers a mre cmplex way t detect if tw strings f text are cexisting in ne dcument. The functinality f the CmplexRegEx type check is similar t the RegularExpressin type check. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example t better understand the test lgic. Cnfiguring Attributes fr CmplexRegEx Type Check Cnfigure the attributes fr the CmplexRegEx type check accrding t the instructins in the fllwing sectins. CmplexRegex Cnfigure the fllwing attribute in this sectin: Primary Check IsFindText Specify whether r nt t extract the text as the scanning cntent. If Yes is selected in the drp-dwn list under this attribute, the scan engine will extract the text as the scanning cntent; if N is selected in the drp-dwn list under this attribute, the scan engine will use the surce cde as the scanning cntent. Cnfigure the fllwing attributes in this sectin: SearchAll Specify whether r nt t check the cmments and scripts. CaseSensitive Specify if the text being tested fr must match the case exactly. TrueIf Specify the cnditin when the check result is True. If Fund is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be True. If NtFund is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be False. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be recrded in the Cmpliance Guardian database. If N is selected in the drp-dwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. Cmpliance Guardian Installatin and Administratin User Guide 325

326 ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus attribute will be Fail, and the value cannt be changed. MustRepeat Specify the amunt f times the value that matches the regular expressin must be fund befre cnsidering the cnditin t be True. When cnfiguring the check, if yu d nt enter a value fr this attribute, the value fr this attribute will be cnsidered 1 in the test. CustmCheck Enter a CustmCheck name fr this attribute. The CustmCheck is used t calculate the check digit n the result f the regular expressins, in rder t validate the result. Fr mre infrmatin abut CustmCheck, refer t Using CustmScan in Cmpliance Guardian. This is ptinal. ResultNA If the primary check in this check is nt fulfilled, the scan status will be the value yu selected fr the ResultNA attribute. Filter This field is ptinal. Select the checkbx befre Filter, the Text sectin and the Regex sectin appear: Text Select the checkbx befre Text, and cnfigure the fllwing attributes: CaseSensitive Specify if the element being tested fr must match the case exactly. Separatr Specify a separatr if multiple values are specified. Value Define ne r mre values fr the test, and use the separatr specified befre t separate the values. If the scanned result that matches the specified regular expressin exactly matches the value specified here, this result will be filtered ut. Select Add Anther Text t add anther Text filter check rule. Select the delete buttn ( ) t delete this check rule. Regex Select the checkbx befre Text, and cnfigure the fllwing attributes: CaseSensitive Specify if the element being tested fr must match the case exactly. Separatr Specify a separatr if multiple values are specified. Value Define a regular expressin. If the scanned result that matches the specified regular expressin als matches the regular expressin specified here, this result will be filtered ut. Select Add Anther Regex t add anther Text filter check rule. Select the delete buttn ( ) t delete this Regex filter check rule. Value Specify a regular expressin fr the secndary check sectin. The value that matches the regular expressin will be scanned. 326 Cmpliance Guardian Installatin and Administratin User Guide

327 Secndary Check Cnfigure the fllwing attributes in this sectin: SearchAll Specify whether r nt t check the cmments and scripts. CaseSensitive Specify if the text being tested fr must match the case exactly. TrueIf Specify the cnditin when the check result is True. If Fund is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be True. If NtFund is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be False. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be recrded in the Cmpliance Guardian database. If N is selected in the drp-dwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus attribute will be Fail, and the value cannt be changed. MustRepeat Specify the amunt f times the value that matches the regular expressin must be fund befre cnsidering the cnditin t be True. When cnfiguring the check, if yu d nt enter a value fr this attribute, the value fr this attribute will be cnsidered 1 in the test. CustmCheck Enter a CustmCheck name fr this attribute. The CustmCheck is used t calculate check digit n the result f the regular expressins, in rder t validate the result. Fr mre infrmatin n CustmCheck, refer t Using CustmScan in Cmpliance Guardian. This attribute is ptinal. MaxDistanceTPrimary Specify the number f the characters. The scan engine extracts text as the scanning cntents. In the cntents, if the characters between a primary check instance (instance fund in the primary check) and the secndary check instance (instance fund in the secndary check) are less than the number specified here, the secndary check is Fund. Filter This is ptinal. Select the checkbx befre Filter, the Text sectin and the Regex sectin appear: Text Select the checkbx befre Text, and cnfigure the fllwing attributes: CaseSensitive Specify if the element being tested fr must match the case exactly. Separatr Specify a separatr if multiple values are specified. Value Define ne r mre values fr the test, and use the separatr specified befre t separate the values. If the scanned result that Cmpliance Guardian Installatin and Administratin User Guide 327

328 matches the specified regular expressin exactly matches the value specified here, this result will be filtered ut. Select Add Anther Text t add anther Text filter check rule. Select the delete buttn ( ) t delete this filter check rule. Regex Select the checkbx befre Text, and cnfigure the fllwing attributes: CaseSensitive Specify if the element being tested fr must match the case exactly. Separatr Specify a separatr if multiple values are specified. Value Define a regular expressin. If the scanned result that matches the specified regular expressin als matches the regular expressin specified here, this result will be filtered ut. Select Add Anther Regex t add anther Text filter check rule. Select the delete buttn ( ) t delete this Regex filter check rule. Value Specify a regular expressin fr the secndary check sectin. The value that matches the regular expressin will be scanned. CmplexRegEx Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the CmplexRegEx type check. The file A that will be tested cntains a wrd Server-Side, and cntains the Canadian Scial Insurance Number: Create and cnfigure the CmplexRegEx check test lgic: Create a CmplexRegEx Type check. In the Reprt Text step, in the False Result and Message field, select User Review Required in the False Result drp-dwn list. Cnfigure the elements in the check: Select Yes fr the IsFindText attribute. In the Primary sectin: Select N in the drp-dwn list under the SearchAll attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select Fund in the drp-dwn list under the TrueIf attribute. Select N in the drp-dwn list under the ListLcatin attribute. Select FalseResult in the drp-dwn list under the ResultNA attribute. Enter 1 fr the MustRepeat attribute. Enter the regular expressin \b[a-za-z]+-[a-za-z]+\b in the Value field. A wrd that cntains a hyphen can match the regular expressin. 328 Cmpliance Guardian Installatin and Administratin User Guide

329 In the Secndary sectin: Save the check. Select N in the drp-dwn list under the SearchAll attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select Fund in the drp-dwn list under the TrueIf attribute. Select N in the drp-dwn list under the ListLcatin attribute. Enter 1 fr the MustRepeat attribute. Enter 10 in the MaxDistanceTPrimary attribute field. Enter the regular expressin (?<=^ \b)\d{3}([- ])\d{3}(\1)\d{3}(?=$ \b) in the Value field. The Scial Insurance Number can match the regular expressin. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the check test lgic: In this type f check, if the result f the primary check is True, the secndary check can start fr this check. If the result f the primary check is False, the secndary check will nt start fr this check and the result f this check will be determined by the primary check. Fr the ResultNA attribute, if TrueResult is set as the value f this attribute, the result f this check will be True. If FalseResult is set as the value f this attribute, the result f this check will be False. If NAResult is set as the value f this attribute, the status f the tested file will be Nt Applicable, and Nt Applicable will be displayed in the Cmpliance Guardian reprt. Accrding t the MaxDistanceTPrimary attribute, if the secndary check starts in the extracted file cntent: If the characters between the instance fund in the primary check and the instance fund in the secndary check are less than the number f characters specified in the MaxDistanceTPrimary attribute, the result f the secndary check is Fund. If the characters between the instance fund in the primary check and instance fund in the secndary check are greater than the number f characters specified in the MaxDistanceTPrimary attribute, the result f the secndary check is Nt Fund. In the primary and secndary check sectin, we have set N fr the ListLcatin attribute. The lcatin f the instance will nt be recrded in the Cmpliance Guardian database, s the value fr LisLcStatus is nt required t be set. In this use case: In the primary check, the value that matches the regular expressin in the file is Server-Side, s the result is Fund. Accrding t the lgic set f the TrueIf Cmpliance Guardian Installatin and Administratin User Guide 329

330 attribute, the result f the primary check is True. S the secndary check will be used. In the secndary check, the value that matches the regular expressin in the file is In the extracted file cntent, the characters between and Server-Side are less than 10 characters, s the result f the secndary check is Fund. Accrding t the lgic set f the TrueIf attribute, the result f the secndary check is False. S the result f this check is False. Accrding t the setting in False Result and Message in the Reprt Text step, the returning status is User Review Required, which will be displayed in the Cmpliance Guardian reprt. Dictinary Type Check The Dictinary type check grups FindText check and RegularExpressin check in ne check, and take the AND peratin n the search result. The dictinary settings enable end users t define multiple checking in each FindText r RegularExpressin sectin. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cnfiguring Attributes fr Dictinary Type Check Cnfigure the attributes fr the Dictinary type check accrding t the instructins in the fllwing sectins. Dictinary Cnfigure the fllwing attribute: FindText BreakIfFund Select Yes r N fr this attribute. If Yes is selected, the scan will stp when ne instance is fund (t save scan time). If N is selected, the scan will nly stp when all instances are fund. This sectin is ptinal. Cnfigure the fllwing attributes: Select the checkbx befre FindText, the fllwing attributes appear: TrueIf Specify the cnditin when the check result is True. If Fund is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be True. If NtFund is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be False. SearchAll Specify whether r nt t check the cmments and scripts. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be 330 Cmpliance Guardian Installatin and Administratin User Guide

331 recrded in the Cmpliance Guardian database. If N is selected in the drpdwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus will be Fail, and the value cannt be changed. CaseSensitive Specify if the text being tested fr must match the case exactly. CmpareType Select MustCntain r MustEqual fr this attribute. Dictinary Cnfigure the fllwing attributes: Separatr Specify a separatr if multiple values are specified. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this Dictinary check rule. Select Add Anther Dictinary t add anther rule. Regex This sectin is ptinal. Cnfigure the fllwing attributes: Select the checkbx befre Regex, the fllwing attributes appear: TrueIf Specify the cnditin when the check result is True. If Fund is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be True. If NtFund is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be False. SearchAll Specify whether r nt t check the cmments and scripts. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be recrded in the Cmpliance Guardian database. If N is selected in the drpdwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus attribute will be Fail, and the value cannt be changed. CaseSensitive Specify if the text being tested fr must match the case exactly. CustmCheck Enter a CustmCheck name fr this attribute. The CustmCheck is used t calculate the check digit n the result f the regular expressins, in Cmpliance Guardian Installatin and Administratin User Guide 331

332 rder t validate the result. Fr mre infrmatin n CustmCheck, refer t Using CustmScan in Cmpliance Guardian. This is ptinal. Dictinary Cnfigure the fllwing attributes: Separatr Specify a separatr if multiple values are specified. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this Dictinary check rule. Select Add Anther Dictinary t add anther rule. Filter This is ptinal. Select the checkbx befre Filter, the Text sectin and the Regex sectin appear: Text Select the checkbx befre Text, and cnfigure the fllwing attributes: CaseSensitive Specify if the element being tested fr must match the case exactly. Separatr Specify a separatr if multiple values are specified. Value Define ne r mre values fr the test, and use the separatr specified befre t separate the values. If the scanned result that matches the specified regular expressin exactly matches the value specified here, this result will be filtered ut. Select Add Anther Text t add anther Text filter check rule. Select the delete buttn ( ) t delete this filter check rule. Regex Select the checkbx befre Regex, and cnfigure the fllwing attributes: CaseSensitive Specify if the element being tested fr must match the case exactly. Separatr Specify a separatr if multiple values are specified. Value Define a regular expressin. If the scanned result that matches the specified regular expressin als matches the regular expressin specified here, this result will be filtered ut. Select Add Anther Regex t add anther Text check rule. Select the delete buttn ( ) t delete this Regex filter check rule. 332 Cmpliance Guardian Installatin and Administratin User Guide

333 Dictinary Check Test Lgic Example Refer t the fllwing example fr better understanding the test lgic f the Dictinary type check. The file A that will be tested cntains a wrd Server, and cntains the Canadian Scial Insurance Number: Create and cnfigure the Dictinary check test lgic: Create a Dictinary Type check. In the Reprt Text step, in the True Result and Message field, select Passed in the True Result drp-dwn list. Cnfigure the elements in the check: Select Yes in the drp-dwn list under the BreakIfFund attribute. In the FindText sectin: Select Fund in the drp-dwn list under the TrueIf attribute. Select Yes in the drp-dwn list under the SearchAll attribute. Select N in the drp-dwn list under the ListLcatin attribute. Select MustCntain in the drp-dwn list under the CmpareType attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Enter server in the Value field. In the Regex sectin: Save the check. Select Fund in the drp-dwn list under the TrueIf attribute. Select Yes in the drp-dwn list under the SearchAll attribute. Select Yes in the drp-dwn list under the ListLcatin attribute. Select Nte in the drp-dwn list under the ListLcStatus attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Enter the regular expressin (?<=^ \b)\d{3}([- ])\d{3}(\1)\d{3}(?=$ \b) in the Value field. The Scial Insurance Number can match the regular expressin. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the Dictinary Check test lgic: Fr the CmpareType attribute in FindText sectin, if MustEqual is selected fr this attribute, then the cntent must be exactly equal t the value we specified in rder t be fund. If MustCntain is selected fr this attribute, the cntent will be fund if the cntent cntains the value we specified. Fr example, if the tested file cntains the wrd Frnt-end, and we select MustEqual fr the CmpareType attribute with the Cmpliance Guardian Installatin and Administratin User Guide 333

334 value specified as end, then the wrd Frnt-end will nt be fund, but if we select MustCntain fr the CmpareType attribute, the wrd Frnt-end will be fund. See the lgic set in the FindText sectin, the value that will be searched fr in the file is server, s the result is Fund. Accrding t the lgic f the TrueIf attribute, the result f the FindText sectin is True. Accrding t the lgic f the BreakIfFund attribute, if ne instance is fund, the scan will stp, s the test f the Regex sectin will nt be cntinued. S the result f this check is True. Accrding t the setting in True Result and Message in the Reprt Text step, the returning status is Passed, which will be displayed in the Cmpliance Guardian reprt. Ckie Type Check The Ckie type check is used t validate ckie dmain and expiratin dates. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check. Cnfiguring Attributes fr Ckie Type Check Cnfigure the attributes fr the Ckie type check accrding t the instructins in the fllwing sectins. Ckie Cnfigure the fllwing attributes under this element: ThirdParty Instruct the scan engine t check if the ckie is frm a third party. PrivacyLinReq Instruct the scan engine (based n the ckie cnditin) t check fr a privacy link. ResultNA Specify a result when the specified element is nt fund. If TrueResult is selected, then if the specified element is nt fund, the True result will be returned; if FalseResult is selected, then if the specified element is nt fund, the False result will be returned. If NAResult is selected, then if the specified element is nt fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. This is basically stating that yu have the ptin t set the result t Nt Applicable if nne f the elements are fund. Expires Instruct the testing cre t check when the ckie expires in N secnds. cpiitdf Instruct the testing cre t use the specified check t identify PII in the webpage. CType Identify the ckie type t test fr (allwed values 1, 2, 3): 1 Single sessin. This tier encmpasses any use f single sessin Web measurement and custmizatin technlgies. 334 Cmpliance Guardian Installatin and Administratin User Guide

335 2 Multi-sessin withut PII. This tier encmpasses any use f multi-sessin Web measurement and custmizatin technlgies when n PII is cllected (including when the agency is unable t identify an individual as a result f its use f thse technlgies). 3 Multi-sessin with PII. This tier encmpasses any use f multi-sessin Web measurement and custmizatin technlgies when PII is cllected (including when the agency is able t identify an individual as a result f its use f thse technlgies). PrivacyLink Enter a value in this field, if the privacy link in the file cntains the value, this check will be True. Ckie Check Test Lgic Example Refer t the fllwing example fr better understanding the test lgic f the Ckie type check. A user s sessin ckie will be tested. Create and cnfigure the Ckie check test lgic: Create a Ckie type check. In the Reprt Text step, in the True Result and Message field, select Passed in the True Result drp-dwn list. Cnfigure the elements in the check: Select True in the drp-dwn list under the ThirdParty attribute. Select True in the drp-dwn list under the PrivacyLinkReq attribute. Select TrueResult in the drp-dwn list under the ResultNA attribute. Select 1 in the drp-dwn list under the CType attribute. Enter privacy.htm in the PrivacyLink field. Save the check. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the Ckie check test lgic: If the ckie is frm a third party, the check result fr this attribute will be True. Since we have selected True in the drp-dwn list under the PrivacyLinkReq attribute, and specified privacy.htm in the PrivacyLink field, s if the privacy link f the ckie cntains privacy.htm, the check result fr this attribute will be True. In this use case, if the check result fr the ThirdParty attribute is True, and the check result fr the PrivacyLinkReq attribute is True, the check result f this check will be True. Cmpliance Guardian Installatin and Administratin User Guide 335

336 SSL Type Check The SSL type check is used t validate HTTPS prtcl encryptin levels. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cnfiguring Attributes fr SSL Type Check Cnfigure the attributes fr the SSL type check accrding t the instructins in the fllwing sectins. SSL Cnfigure the fllwing attributes under this element: TextCmpare ElementName This is the element that will be tested. CaseSensitive Instruct the testing cre if the element name being tested fr must match the case exactly. ResultNA Specify a result when the specified element is nt fund. If TrueResult is selected, then if the specified element is nt fund, the True result will be returned. If FalseResult is selected, then if the specified element is nt fund, the False result will be returned; if NAResult is selected, then if the specified element is nt fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. In ther wrds, yu have the ptin t set the result t Nt Applicable if nne f the elements are fund. AttrName This is the attribute that will be tested. AttrCaseSensitive Instruct the testing cre if the attribute name being tested fr must match the case exactly. MinLevel Represent the minimum HTTPS prtcl encryptin level required by the check. This sectin is ptinal. Select the checkbx befre this element, and the fllwing attributes appear: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( rule. 336 ) t delete this check rule. Select Add Anther TextCmpare t add anther Cmpliance Guardian Installatin and Administratin User Guide

337 TextCmpare Check Test Lgic Example Refer t the fllwing example fr better understanding the test lgic f the SSL type check. The webpage that will be scanned cntains a nde: <input type="passwrd" name="passwd" id="passwd">. Create and cnfigure the SSL check test lgic: Create a SSL Type check. In the Reprt Text step, in the True Result and Message field, select Passed in the True Result drp-dwn list. Cnfigure the elements in the check: Specify the element name input fr the ElementName attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select ResultNA in the drp-dwn list under the ResultNA attribute. Specify the attribute name id fr the AttrName attribute. Select N in the drp-dwn list under the AttrCaseSensitive attribute. Enter 128 fr the MinLevel attribute. Select the checkbx befre TextCmpare, and cnfigure the fllwing attributes: Save the check. Select MustCntain in the drp-dwn list under the CmpareType attribute. Enter ; as the separatr. Select N in the drp-dwn list under the CaseSensitive attribute. Enter Pass in the Value field. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the TextCmpare check test lgic: The webpage cntains the nde <input type="passwrd" name="passwd" id="passwd">, the value f the attribute id cntains the value Pass, s the webpage meets the cnditin. If the minimum HTTPS prtcl encryptin level f the webpage is higher than 128, the result f this check will be True, r the result will be False. WebBeacns Type Check The WebBeacns type check is used t detect if Web Beacns are present n a webpage. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cmpliance Guardian Installatin and Administratin User Guide 337

338 Cnfiguring Attributes fr WebBeacns Type Check Cnfigure the attributes fr the WebBeacns type check accrding t the instructins in the fllwing sectins. WebBeacns Cnfigure the fllwing attributes under this element: Elements ElementName Specify the element name that will be tested. CaseSensitive Specify if the element name being tested fr must match the case exactly. ResultNA Specify a result when the specified element is nt fund. If TrueResult is selected, then if the specified element is nt fund, the True result will be returned; if FalseResult is selected, then if the specified element is nt fund, the False result will be returned; if NAResult is selected, then if the specified element is nt fund, the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. This is basically stating that yu have the ptin t set the result t Nt Applicable if nne f the elements are fund. AttrName Specify the attribute name that will be tested. AttrCaseSensitive Specify if the attribute name being tested fr must match the case exactly. ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False. Cnfigure the fllwing attribute under this element: ListLc Scpe There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. Cnfigure the fllwing attributes under this element: Type There are tw values fr this attribute, Valid and Invalid. All elements that are cnsidered valid r invalid are stred t the database (the Lcatin). Status This is used t indicate the dispsitin f the element and the severity selected by the user. Nte that in the Reprt Text step, if the status set fr True Result r False Result is Failed, the value fr the Status attribute will be Fail, and the value cannt be changed. 338 Cmpliance Guardian Installatin and Administratin User Guide

339 DmainExclude Cnfigure the fllwing attributes under this element: Separatr Specify a separatr if multiple values are specified. Value Enter ne r mre dmains here, the links that are lcated in these dmains will nt be checked. Use the separatr specified befre t separate the values. WebBeacns Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the WebBeacns type check. The webpage that will be tested cntains the fllwing ndes: <html> <bdy> <div><img src=" </bdy> </html> The dmain f this webpage is simer.cm. Create and cnfigure the WebBeacns check test lgic: Create a WebBeacns Type check. In the Reprt Text step, in the True Result and Message field, select Passed in the True Result drp-dwn list. Cnfigure the elements in the check: In the WebBeacns sectin: Specify img fr the ElementName attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select TrueResult in the drp-dwn list under the ResultNA attribute. Specify src fr the AttrName attribute. Select N in the drp-dwn list under the AttrCaseSensitive attribute. Select Yes in the drp-dwn list under the ValidWhen attribute. In the Elements sectin: Select One in the drp-dwn list under the Scpe attribute. In the ListLc sectin: Select Invalid in the drp-dwn list under the Type attribute. Select Warn in the drp-dwn list under the Status attribute. Cmpliance Guardian Installatin and Administratin User Guide 339

340 In the DmainExclude sectin: Save the check. Enter in the Value field under the DmainExclude attribute. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the check test lgic: Accrding t the lgic set in the WebBeacns sectin, the nde <img src=" meets the cnditin. The dmain f this webpage is simer.cm, while the dmain f the link in the nde <img src=" is hell.cm, but accrding t the value we specified fr the DmainExclude attribute, the dmain hell.cm will nt be checked. S the result f this check is True. Accrding t the lgic set fr the ValidWhen attribute as well as the lgic set in the ListLc sectin, the lcatin f this nde will nt be recrded in the Cmpliance Guardian database. Accrding t the setting in True Result and Message in the Reprt Text step, the returning status is Passed, which will be displayed in the Cmpliance Guardian reprt. FindFile Type Check The FindFile type check is used t find a specified file. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cnfiguring Attributes fr FindFile Type Check Cnfigure the fllwing attributes: TrueIf Specify the cnditin when the check result is True. If Yes is selected in the drp-dwn list under the TrueIf attribute, when finding an instance, the check result f this check will be True; If N is selected in the drp-dwn list under the TrueIf attribute: when finding an instance, the check result f this check will be False. Path Enter the file s relative path r full path. FindFile Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the FindFile type check. Create and cnfigure the FindFile check test lgic: Create a FindFile type check. In the Reprt Text step, in the True Result and Message field, select Passed in the True Result drp-dwn list. 340 Cmpliance Guardian Installatin and Administratin User Guide

341 Cnfigure the elements in the check: Select Yes in the drp-dwn list under the TrueIf attribute. Enter fr the Path attribute. Save the check. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the FindFile check test lgic: If the file findthis.txt exists, the result will be Fund. Nte that if yu enter a relative URL file/findthis.txt fr the Path attribute, by default, the full path f this file that Cmpliance Guardian will scan is name (IP address) + relative URL. Fr example: if the URL f the selected site that will be perfrmed a Cmpliance Guardian jb is and the relative URL specified fr the Path attribute in this check is file/findthis.txt, then CCE will scan the URL t check if the file exists. Accrding t the lgic set in the TrueIf attribute, the result f this check will be True. Accrding t the setting in True Result and Message in the Reprt Text step, the returning status is Passed, which will be displayed in the Cmpliance Guardian reprt. LinkValidatin Type Check The LinkValidatin check is a check type that tests fr the validity f links r bkmarks within any cntent that can cntain links r bkmark references. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cnfiguring Attributes fr LinkValidatin Type Check Cnfigure the attributes fr the LinkValidatin type check accrding t the instructins in the fllwing sectins. LinkValidatin Cnfigure the fllwing attributes under this element: ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False. TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. ResultNA Specify a result when n link is fund. If TrueResult is selected, then if n link is fund, the True result will be returned. If FalseResult is selected, then if n link is fund, the False result will be returned. If NAResult is selected, then if n link is fund, Cmpliance Guardian Installatin and Administratin User Guide 341

342 the status f the tested file will be Nt Applicable, which will be displayed in the Cmpliance Guardian reprt. In ther wrds, yu have the ptin t set the result t Nt Applicable if nne f the links are fund. ValidateBkmarks Select True r False fr this attribute. If True is selected, the check will check whether the bkmarks wrk. If False is selected, the check will nt check the bkmarks. GetAllwCallHead Select True r False fr this attribute. If True is selected, the link will be checked using the HEAD methd, if the crrespnding server des nt supprt the HEAD methd, the GET methd will be used. If False is selected, the link will be checked using the HEAD methd, if the crrespnding server des nt supprt the HEAD methd, the GET methd will nt be used. ListLc Cnfigure the fllwing attributes under this element: TextCmpare Type There are tw values fr this attribute, Valid and Invalid. All elements that are cnsidered valid r invalid are stred t the database (the Lcatin). Status This is used t indicate the dispsitin f the element and the severity selected by the user. In the Reprt Text step, if the status set fr True Result r False Result is Failed, the value fr the Status attribute will be Fail, and the value cannt be changed. Cnfigure the fllwing attributes under this element: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, MustNtCntain, MustEqual, MustNtEqual, MustMatch, and MustNtMatch Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the attribute name being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( rule. ) t delete this check rule. Select Add Anther TextCmpare t add anther Attributes Cnfigure the fllwing attributes under this element: Nde Enter the nde that yu want t test. Value Enter the crrespnding nde value. 342 Cmpliance Guardian Installatin and Administratin User Guide

343 Select the delete buttn ( rule. ) t delete this check rule. Select Add Anther Attribute t add anther LinkValidatin Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the LinkValidatin type check. The selected file 1 will be tested. It cntains tw links, ne f the tw links cntain a character A, while the ther ne des nt. Create and cnfigure the LinkValidatin check test lgic: Create a LinkValidatin type check. In the Reprt Text step, in the True Result and Message field, select Passed in the True Result drp-dwn list. Cnfigure the LinkValidatin sectin: Select True in the drp-dwn list under the ValidWhen attribute. Select All in the drp-dwn list under the TrueIf attribute. Select ResultNA in the drp-dwn list under the ResultNA attribute. Select True in the drp-dwn list under the ValidateBkmarks attribute. Cnfigure the ListLc sectin: Select Invalid in the drp-dwn list under the Type attribute. Select Warn in the drp-dwn list under the Status attribute. Cnfigure the TextCmpare sectin: Select MustCntain in the drp-dwn list under the CmpareType attribute. Enter, as the separatr. Select N in the drp-dwn list under the CaseSensitive attribute. Enter A,B in the Value field. Save the check. Run a Cmpliance Scanner jb. The test suite used in this jb cntains the check cnfigured abve. Review the LinkValidatin check test lgic: See the TextCmpare sectin: since we have entered A,B in the Value field in this check, it means that the link that cntains A r B will be tested. S the link that cntains A in the selected file 1 will be tested by this check. See the LinkValidatin sectin and ListLc sectin: we have selected Valid fr the ValidWhen attribute in the LinkValidatin sectin, and have selected Invalid fr the Type attribute in ListLc sectin, s the lcatin f the link will nt be recrded in the Cmpliance Guardian database. Cmpliance Guardian Installatin and Administratin User Guide 343

344 See the ValidateBkmarks attribute in the LinkValidatin sectin: since we have selected True fr the ValidateBkmarks attribute, the check will check whether the bkmarks in the file 1 wrk. If ne f the bkmarks in the file des nt wrk, this check is False. Althugh the check result in ther field is True, if the check result f ValidateBkmarks attribute field is False, the check result f this check is False. FilePrperty Type Check The FilePrperty check is a check type that test fr the file prperties, it is specifically designed fr use with the MbileOK standard. The fllwing sectin prvides a general intrductin abut cnfiguring attributes fr this type f check, as well as a test example fr yu t understand the test lgic. Cnfiguring Attributes fr FilePrperty Type Check Cnfigure the attributes fr the FilePrperty type check accrding t the instructins in the fllwing sectins. FilePrperty Cnfigure the fllwing attributes under this element: ListLc TrueIf There are tw values fr this attribute: All and One. If One is selected, the scan will stp when ne instance is fund (t save scan time). If All is selected, the scan will nly stp when all instances are fund. ValidWhen This is used t indicate if the result is valid when the cnditin is ne f tw values: True r False Cnfigure the fllwing attributes under this element: Size Type There are tw values fr this attribute, Valid and Invalid. All elements that are cnsidered valid r invalid are stred t the database (the Lcatin). Status This is used t indicate the dispsitin f the element and the severity selected by the user. Nte that in the Reprt Text step, if the status set fr True Result r False Result is Failed, the value fr the Status attribute will be Fail, and the value cannt be changed. Cnfigure the fllwing attributes under this element: MaxValue Specify a value as the maximum size, select a unit in the drp-dwn list. 344 Cmpliance Guardian Installatin and Administratin User Guide

345 Type Cnfigure the fllwing attributes under this element: Filter CmpareType Specify a cmpare type. The attributes fr CmpareType are MustCntain, and MustEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the element being tested fr must match the case exactly. Value Define ne r mre Cntent-types fr the test, use the separatr specified befre t separate the values. This element is ptinal. Select the checkbx befre Filter, and cnfigure the fllwing attributes under this element: CmpareType Specify a cmpare type. The attributes fr CmpareType are MustNtCntain, and MustNtEqual. Separatr Specify a separatr if multiple values are specified. CaseSensitive Specify if the element being tested fr must match the case exactly. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this check rule. Select Add Anther Filter t add anther rule. FilePrperty Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the FilePrperty type check. In this example, we are testing file 1. Create and cnfigure the FilePrperty check test lgic: Create a FilePrperty type check. In the Reprt Text step, in the False Result and Message field, select User Review Required in the False Result drp-dwn list. Cnfigure the FilePrperty sectin: Select All in the drp-dwn list under the TrueIf attribute. Select True in the drp-dwn list under the ValidWhen attribute. Cnfigure the ListLc sectin: Select Invalid in the drp-dwn list under the Type attribute. Select Warn in the drp-dwn list under the Status attribute. Cnfigure the Size sectin: Cmpliance Guardian Installatin and Administratin User Guide 345

346 Enter 10 in the MinValue field, select KB as the unit. Enter 20 in the MaxValue field, select KB as the unit. Cnfigure the Type sectin: Select MustCntain in the drp-dwn list under the CmpareType attribute. Enter ; as the separatr. Select N in the drp-dwn list under the CaseSensitive attribute. Enter text/html;text/xml;mage/gif;image/jpeg in the Value field. Select the checkbx befre Filter, cnfigure the Filter sectin: Select MustNtCntain in the drp-dwn list under the CmpareType attribute. Enter ; as the separatr. Select N in the drp-dwn list under the CaseSensitive attribute. Enter A;B in the Value field. Save the check. Run a Cmpliance Scanner jb, the test suite used in this jb cntains the check cnfigured abve. Review the FilePrperty check test lgic: In the Filter sectin, we nly cmpare the values specified with the src attribute s value in the img element, the href attribute s value in the link element, and the data attribute s value in the bject element in the selected file. In this case, we specified A;B in the Value field, and selected MustNtCntain fr the CmpareType value. The img elements whse values f the src attributes d nt cntain the characters A and B will be tested; the link elements whse values f the href attributes d nt cntain the characters A and B will be tested. The bject elements whse values f the data attributes d nt cntain the characters A and B will tested. In the Type sectin, after the check in the Filter sectin, the img elements, link elements, and the bject elements that meet the Filter check sectin (in this case, the img elements whse values f the src attributes d nt cntain the characters A and B, the link elements whse values f the href attributes d nt cntain the characters A and B, and the bject elements whse values f the data attributes d nt cntain the characters A and B meet the Filter check sectin) will be taken t the check in the Type sectin. In this case, if ne f the Cntent-types f the file r the three kinds f attributes (src, href and data) values is nt text/html, text/xml, mage/gif r image/jpeg, the check in the Type sectin will be False. 346 In the Size sectin, the size = the file size + the size f the src attribute s value in the img element in the file (the crrespnding image s size) + the size f the href Cmpliance Guardian Installatin and Administratin User Guide

347 attribute's value in the link element in the file (the crrespnding linked file s size) + the size f the data attribute s value in the bject element in the file (the crrespnding image s size). If the size is nt in the range we specified in the Size sectin f this check, this check result f this sectin will be False. If the result f the Filter check r Size check is False, the check result f this check is False. If the check result f this check is False, see the ValidWhen attribute in the FilePrperty sectin. We have selected Valid, s the result f this attribute is Invalid. In the ListLc sectin, the result fr ValidWhen is Invalid, s the check status will be Warn, and this check status will be recrded in the Cmpliance Guardian database. Users cannt see the status in the Cmpliance Guardian GUI. Redactin Type Check Accrding t the settings in False Result and Message in the Reprt Text step, the returning status is User Review Required, which will be displayed in the Cmpliance Guardian reprt. The Redactin check is used t redact the specified cntent in a file. Cnfiguring Attributes fr Redactin Type Check Cnfigure the attributes fr the Redactin type check accrding t the instructins in the fllwing sectins. Redactin Cnfigure the fllwing attributes under this element: FindText RedactType Select a value fr this attribute: Delete r Replace. If Delete is selected, the fund instance will be deleted directly during the scan; if Replace is selected, yu must specify a value and cnfigure the related attributes, refer t Value Cnfiguratin Field. The fund instance will be replaced with the value yu specified. This element has the fllwing attributes: SearchAll Specify whether r nt t check the cmments and scripts. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be recrded in the Cmpliance Guardian database. If N is selected in the drp-dwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. Cmpliance Guardian Installatin and Administratin User Guide 347

348 ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus will be Fail, and the value cannt be changed. CaseSensitive Specify if the text being tested fr must match the case exactly. CmpareType Select MustCntain r MustEqual fr this attribute. Dictinary Cnfigure the fllwing attributes: Separatr Specify a separatr if multiple values are specified. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this Dictinary check rule. Select Add Anther Dictinary t add anther rule. Regex This element has the fllwing attributes: SearchAll Specify whether r nt t check the cmments and scripts. ListLcatin Specify whether r nt t recrd the instance s lcatin in the Cmpliance Guardian database. If Yes is selected in the drp-dwn list under the ListLcatin attribute, then every lcatin f the instance fund will be recrded in the Cmpliance Guardian database. If N is selected in the drp-dwn list under the ListLcatin attribute, the check cntinues, but the lcatins f the instances fund will nt be recrded in the database. ListLcStatus Specify the status fr the instance that is fund. The status will be recrded in the Cmpliance Guardian database. Nte that if the status set fr True Result r False Result is Failed in the Reprt Text step, the value fr the ListLcStatus attribute will be Fail, and the value cannt be changed. CaseSensitive Specify if the text being tested fr must match the case exactly. CustmCheck Enter a CustmCheck name fr this attribute. The CustmCheck is used t calculate the check digit n the result f the regular expressins, in rder t validate the result. Fr mre infrmatin n CustmCheck, refer t Using CustmScan in Cmpliance Guardian. Dictinary Cnfigure the fllwing attributes: Separatr Specify a separatr if multiple values are specified. Value Define ne r mre values fr the test, use the separatr specified befre t separate the values. Select the delete buttn ( ) t delete this Dictinary check rule. Select Add Anther Dictinary t add anther rule. 348 Cmpliance Guardian Installatin and Administratin User Guide

349 Filter This is ptinal. Select the checkbx befre Filter, the Text sectin and the Regex sectin appear: Text Select the checkbx befre Text, and cnfigure the fllwing attributes: CaseSensitive Specify if the element being tested fr must match the case exactly. Separatr Specify a separatr if multiple values are specified. Value Define ne r mre values fr the test, and use the separatr specified befre t separate the values. If the scanned result that matches the specified regular expressin exactly matches the value specified here, this result will be filtered ut. Select Add Anther Text t add anther Text filter check rule. Select the delete buttn ( ) t delete this filter check rule. Regex Select the checkbx befre Regex, and cnfigure the fllwing attributes: CaseSensitive Specify if the element being tested fr must match the case exactly. Value Define a regular expressin. If the scanned result that matches the specified regular expressin als matches the regular expressin specified here, this result will be filtered ut. Select Add Anther Regex t add anther Text check rule. Select the delete buttn ( ) t delete this Regex filter check rule. Value Cnfiguratin Field If Replace is selected as the value f the RedactType attribute, this field appears. Cnfigure the fllwing attributes: Type Select t redact a wrd r a sectin. BefreCunt If yu select Sectin fr the Type attribute, yu must cnfigure this attribute. Specify the number f the characters befre the value yu specified. The characters in the range f the specified number will als be redacted. AfterCunt If yu select Sectin fr the Type attribute, yu must cnfigure this attribute. Specify the number f the characters after the value yu specified. The characters in the range f the specified number will als be redacted. Repeat Specify whether r nt t repeat the specified value t make sure the replaced result keeping the same length as the riginal value. Value Specify the value that is used t replace the fund instance. Cmpliance Guardian Installatin and Administratin User Guide 349

350 Redactin Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the Redactin type check. The selected file will be tested. It cntains the cntent: Canadian Scial Insurance Number: Create and cnfigure the Redactin check test lgic: Create a Redactin type check. In the Reprt Text step, in the False Result and Message field, select User Review Required in the False Result drp-dwn list. Cnfigure the Redactin sectin: Select Replace in the drp-dwn list under the RedactType attribute. Select the checkbx befre Regex, and cnfigure the Regex sectin: Select Yes in the drp-dwn list under the SearchAll attribute. Select Yes in the drp-dwn list under the ListLcatin attribute. Select Warn in the drp-dwn list under the ListLcStatus attribute. Select N in the drp-dwn list under the CaseSensitive attribute. Select N in the drp-dwn list under the CustmCheck attribute. In the Dictinary sectin, enter the regular expressin (?<=^ \b)\d{3}([- ])\d{3}(\1)\d{3}(?=$ \b) in the Value field. The Scial Insurance Number can match the regular expressin. In the Value Cnfiguratin field, cnfigure the fllwing attributes: Select Wrd in the drp-dwn list under the Type attribute. Select True in the drp-dwn list under the Repeat attribute. Enter * in the Value field. Save the check. Run a Cmpliance Scanner jb, the test suite used in this jb cntains the check cnfigured abve. Review the Redactin check test lgic: In this case: In the Redactin field, we have set Replace as the RedactType, s the fund instance will be replaced. In the Regex field: the Canadian Scial Insurance Number in the tested file match the specified regular expressin. We have set Yes fr the ListLcatin attribute, s the lcatin f the instance is recrded in the Cmpliance Guardian database. The status f the instance in the database is Warn. In the Value Cnfiguratin field: the fund instance is the Canadian Scial Insurance Number: And we have set True fr the Repeat 350 Cmpliance Guardian Installatin and Administratin User Guide

351 attribute. S the Canadian Scial Insurance Number is redacted t ***********. Detailed lgic intrductin abut the Value Cnfiguratin field: If we select Wrd as the Type, and select False as the Repeat attribute. The fund instance will be redacted t *. If we select Sectin as the Type, enter 9 as the value f the BefreCunt attribute, and select True as the Repeat attribute. The fund instance will be redacted, 9 characters befre the instance will als be redacted. S the cntent in the tested file Canadian Scial Insurance Number: will be redacted t Canadian Scial Insurance********************. CustmScan The CustmScan type check is used t implement a custmized check methd n the check level and wrks as an extensin f current check types. It is used in cmbinatin with ther checks t find infrmatin n a file and act n it. Cnfiguring Attributes fr CustmScan Type Check Only the attribute Class needs t be cnfigured fr the check. Specify the Namespace.Class and AssemblyName in the Class attribute field. Use the cmma (,) t separate them. Fr mre infrmatin, refer t Using CustmScan in Cmpliance Guardian. Fingerprinting The Fingerprinting type check allws yu t use the cntent stred in dcuments r files as the search cnditin t find anther dcument r file that has the exact r similar infrmatin. Select the frms f matching: Exact matching Based n file size and the binary signature f the file. This frm is targeted t find duplicated dcuments that have the exact same cntent. Raw matching Based n cmpare result frm RDC Algrithm. RDC divides a file's data int chunks by cmputing the lcal maxima f a fingerprinting functin that is cmputed at every byte psitin in the file. A fingerprinting functin is a checksum functin that can be cmputed incrementally. Cmpliance Guardian des nt cnsider the file frmat r file size using this frm, s this frm can nt nly find different versins f a file but can als identify if different kinds f Micrsft Office files have the same r similar cntent. Text matching Match f discrete passages f extracted and nrmalized file cntents. Cmpliance Guardian extracts 100% f the file cntents, nrmalizes it by remving whitespaces, punctuatin, and frmatting, and then creates a checksum. Cmpliance Guardian Installatin and Administratin User Guide 351

352 The behavir f Text matching is different frm the ther tw frms, in this frm f matching, Cmpliance Guardian detects nly the file cntents that are indexed as the template in the Fingerprinting check. Fr example, cnsider a situatin where yu define a ne-page dcument in the Fingerprinting check as the template, and that ne page dcument is included as part f anther 100 page dcument. The 100-page dcument is cnsidered a 100% match because its cntent matches the ne page dcument. This frm can be used t find a PDF file that is cnverted frm the template file. Select the files that will be used as the templates fr searching. Select Add Anther File, and then select Brwse t select a file. Select Add Anther File t add anther file. Select the delete ( delete a selected template file. ) buttn t Fingerprinting Check Test Lgic Example If yu want t find the filled frms frm multiple files, yu can use this type f check. Select Raw matching, and enter 75% in the Minimum percentage f cntext matches field in the check. Then, select a new frm as the template file. Cnfigure the related test suite fr classificatin and tagging attributes and actin plicy t have the passed files (check result is True) mved t anther lcatin. Fr details abut cnfiguring the test suite fr classificatin and tagging, refer t Test Suite fr Classificatin and Tagging File Bdy Cnfiguratin. The scanned files whse similarity is greater than 75% f the template file will be cnsidered the passed files and then mved t anther lcatin. These mved files will be the filled frms. Cntext The Cntext check is used t discver SharePint site/list/item prperties, file prperties, and AD prperties that match the test cnditins. Cnfiguring Attributes fr Cntext Type Check Cnfigure the attributes fr the Cntext type check accrding t the instructins in the fllwing sectins. NA If any f the cnfigured cnditins cannt find the prperties, the results will be the value selected in the NA drp-dwn list: TureResult, FalseResult r NAResult. Cnditin Surce Enter the macr expressin. Yu can define the search fr SharePint site, list r item prperties, file prperties, AD prperties r prperties in Yammer. The frmat is {$bject.name}. 352 Cmpliance Guardian Installatin and Administratin User Guide

353 SharePint Site, List r Item Prperties If yu want t search a SharePint site, list r item prperties, the bject is $SPSite, $SPWeb, $SPItem. $SPSite Search prperties f the scanned item s crrespnding SharePint site cllectin. The frmat f the Surce is $SPSite.Prperties[Prperty Name]. The Prperty Name can be: URL, Title, Mdified Time, Created Time, Primary Administratr, Template Name, r Template Id. $SPWeb Search prperties f the scanned item s crrespnding SharePint site. The frmats f the Surce can be: $SPWeb.Prperties[Prperty Name] The Prperty Name can be: URL, Title, Mdified Time, Created Time, Primary Administratr, Template Name, Template Id r the custm prperties f the site. $SPWeb.Redirect[Relative Redirected URL].Prps[Prperty Name] Relative Redirected URL means the site s crrespnding Web applicatin s relative URL. Cmpliance Guardian will search the prperties f the redirected URL. The Prperty Name can be: URL, Title, Mdified Time, Created Time, Primary Administratr, Template Name, Template Id r the custm prperties f the site. $SPWebParent.Prperties[Prperty Name] Cmpliance Guardian will scan the item s crrespnding site s prperties as well as the parent sites prperties. Fr example: There is a site cllectin Site Cllectin A. The tp-level site f Site Cllectin A cntains the site prperties: P1; there are tw sites Site 1 and Site 2 under Site Cllectin A. Site 1 cntains the site prperties: P2. Site 2 cntains the site prperties: P3. The scanned item is in Site 1. If Cmpliance Guardian is required t search site prperty P3. Site 1 and Site 1 s parent Site Cllectin A cntains P2 and P1, but d nt cntain P3. In this case, P3 is nt fund. $SPItem Search prperties f an item. The frmat f the Surce is $SPItem.Fields.[Field Name]. Field Name is the item s clumn names. Prperties f Files in File System Search prperties f a file in file system. The frmat f the Surce is $File.Prperties[Prperty Name]. The Prperty Name can be: Name, Created Time, Mdified Time, Type, Size, r Owner. Website Prperties Search website prperties. The frmat f the Surce is: $SPSite.Prperties[Prperty Name]. The Prperty Name can be: Cntent Type, Size, URL, Mdified Time, Hst, Dmain, r Title. AD Prperties Search the AD prperties. The frmat f the Surce is: $AD.Users[User Display Name].Prperties[Prperty Name]. User Display Cmpliance Guardian Installatin and Administratin User Guide 353

354 Name is the AD user s display name. Prperty Name is the AD user s prperties, like Department, Cmpany, etc. File Prperties Search a SharePint file, website cntent r file system file s wn prperties. The frmat f the Surce is: $Dc.Prperties[Prperty Name]. Prperty Name is the file s wn prperties. Yammer Search prperties in Yammer. The frmat f the Surce is $Yammer.Current[Prperty Name]. This is used t search the current scanned cntent prperties. The Prperty Name can be: CreatrId Search the pst s creatr ID. CreateTime Search the pst s created time. Privacy The value can be Public r Private. SendTGrup Search the ID f the grup t which the pst is sent. MessageType The value can be Message, File r Nte. Tpics Search the pst s tpic. The expressin can als be used t search a user r grup s prperties. The frmat is $Yammer.Users[macr expressin].prperties[prperty Name] r $Yammer.Grups[macr expressin].prperties[prperty Name]. The Prperty Name can be: Id, Name, NetwrkId, FullName, Descriptin and Privacy. FullName is specifically used fr searching user s full name; Descriptin and Privacy are specifically used fr searching grup s descriptin and privacy prperties. Fr example: $Yammer.Users[$Yammer.Current["CreatrId"]].Prperties[Department]: use this macr expressin t search the current scanned pst s creatr ID, and finally search the creatr s department. $Yammer.Grups[$Yammer.Current["SendTGrup"]].Prperties[Descriptin] : use this macr expressin t search the grup t which the pst is sent, and finally search the grup s descriptin. Operatr Select AND r OR as the lgical relatinship. Add a Cmpare Select Add a Cmpare t cnfigure a cmpare cnditin. Select the delete ( ) buttn t delete a cmpare cnditin. The added cmpare cnditins in ne Cnditin grup are using the lgical relatinship selected in Operatr. Select Add a Cnditin t add anther cnditin, and then cnfigure the cnditin. Select the delete ( ) buttn after each Cnditin t delete the Cnditin. 354 Cmpliance Guardian Installatin and Administratin User Guide

355 Operatr Cnditins If multiple Cnditins are cnfigured, yu must specify the lgical relatinship amng the Cnditins. The relatinships are AND and OR. Arrange the peratr cnditin expressin by using the relatinships, Cnditin ID (the sequence f the Cnditin), and parentheses. Fr example, if yu have cnfigured three Cnditins, and yu specify ((1 And 2) Or 3). The prperties that meet bth the Cnditin 1 and Cnditin 2, r meet the Cnditin 3, will be searched ut. Cntext Check Test Lgic Example Refer t the fllwing example t better understand the test lgic f the Cntext type check. Use a check t scan if the SharePint files cntain SSN. The files that cntain SSN will be scanned by the Cntext check. Create and cnfigure the Redactin check test lgic: Create a Cntext type check. In the Reprt Text step, in the True Result and Message field, select Failed in the True Result drp-dwn list. Cnfigure the Cntext sectin: Select NAResult in the drp-dwn list under the NA attribute. Cnfigure the Cnditin sectin: Enter $SPItem.Fields[Created Time] in the Surce text bx. Select AND in the drp-dwn list under the Operatr attribute. Select Add a Cmpare. Select Befre as the Cmpare Type, and select as the Value. Select Add a Cmpare again. Select After as the Cmpare Type, and select as the Value. Select Add a Cnditin. Cnfigure settings in the newly added cnditin: Enter $AD.Users[$SPItem.Fields[Created By]].Prperties[Department] in the Surce text bx. Select AND in the drp-dwn list under the Operatr attribute. Select Add a Cmpare. Select MustEqual as the Cmpare Type, and enter HR as the Value. In the Operatr Cnditins field, enter 1 AND 2. Save the check. Run a Cmpliance Scanner jb, the test suite used in this jb cntains the check cnfigured abve. Review the Cntext check test lgic: Cmpliance Guardian Installatin and Administratin User Guide 355

356 Accrding t the Cnditin 1, if the files r items are created befre and after The Cnditin is true. Accrding t the Cnditin 2, if the files r items whse creatrs belng t the HR department, the Cnditin will be true. Accrding t the Operatr Cnditins field: the lgical relatinship is AND, s if bth f the tw Cnditins are true, the check result will be true. If the matching instance in Cnditin 1 r Cnditin 2 is nt fund, the result will be the value selected in the NA attribute. Cnfiguring Test Suite File Attributes Refer t the fllwing sectins fr cnfiguring the test suite file attributes. Test Suite fr Cmpliance Reprting File Bdy Cnfiguratin Cnfigure the fllwing attributes fr the test suite fr cmpliance reprting file. RiskFrmula Select a Raw Risk Frmula, Stepped Risk Frmula, and a Weighted Risk Frmula in the crrespnding drp-dwn list. Yu can create a new Risk Frmula by selecting New Frmula in the drp-dwn list. A pp-up windw will appear if yu select New Frmula. In the pp-up windw, enter the name and the ptinal descriptin fr the Risk frmula, define yur wn frmula, and select OK. The new Risk Frmula then will be created. RunAsTestGrup Grup the specified checks. The checks can test files accrding t ne checkpint. Select the checkbx befre the RunAsTestGrup element, and cnfigure the fllwing attributes: Name Enter a name fr the test grup. DatabaseField This is the lcatin in the Cmpliance Guardian database where the scan result data is stred. Cmpliance Guardian will autmatically specify the lcatin fr string data. CntentType Select the cntent types that will be scanned. If yu d nt select the cntent types, all the file cntent types that are supprted t be scanned in Cmpliance Guardian will be scanned. Refer t the fllwing steps fr selecting the cntent types: Select the text field under the CntentType attribute, a pp-up windw appears. 356 Cmpliance Guardian Installatin and Administratin User Guide

357 In the pp-up windw, select the checkbx befre the desired cntent types, and select OK. Select the delete buttn ( ) t delete the RunAsTestGrup check rule. Plicy URL Specify a URL that will link t a website defining rules fr hw checks in this check grup will test files. Descriptin Enter the descriptin fr the test grup. In Scan Result f Cmpliance Guardian reprt, the descriptin will display in the file s crrespnding detailed reprt. SubCheck Cnfigure the fllwing attributes fr this element: CheckName Select a check. Refer t the fllwing steps fr selecting the check: Select the text field under the CheckName attribute, a pp-up windw appears. In the pp-up windw, select the radi buttn befre the desired check, and select OK. RunCheck If True is selected fr this attribute, when running a Cmpliance Guardian jb using the test suite, the files will be scanned accrding t the rule set in this check. If False is selected fr this attribute, the crrespnding check will nt be used t scan the files. RiskLevel(r1) The Item Initial Risk value assigned n the initial ccurrence f the cmpliance failure (related t the check being tested fr) in the dcument r stream. Allwed values fr RiskLevel(r1) are RiskLevel(r2) The Item Additinal Risk Level factr that the risk level grws at fr every additinal failure at the check level (fr the same type) fund in the dcument r stream. This number is ptinal where the integer -1 means ignre the value (allwing t use the third value). If the value is -1 then the factr will be 1. Allwed values are -1 t 10. This is ptinal. RiskLevel(r3) The Item risk in relatin t ther checks. This Item is ptinal. If this number is missing then it is assumed that its value is 1. Allwed values are This is ptinal. Accrding t the frmulas selected in the RiskFrmula sectin, the check will have three risk levels after the scan jb. CntentType Select the cntent types that will be scanned. If yu d nt select the cntent types, all the file cntent types that are supprted t be scanned in Cmpliance Guardian will be scanned. Refer t the fllwing steps fr selecting the cntent types: Select the text field under the CntentType attribute, a pp-up windw appears. Cmpliance Guardian Installatin and Administratin User Guide 357

358 In the pp-up windw, select the checkbx befre the desired cntent types, and select OK. Select the delete buttn ( Check t add anther rule. ) t delete the SubCheck check rule. Select Add Anther Operatr If yu select the Operatr checkbx, the SubCheck checkbx abve the Operatr checkbx will be grayed ut. Yu can determine the cnditin f the check grup s result. Cnfigure the fllwing attributes fr this element: Type Depending n the sub checks yu added in the SubCheck field, yu can change the lgical relatinships between the sub check results. There are currently tw lgical relatinships: AND and OR. By default, the lgic is set t And. Result Field Specify the result f the check grup accrding t the check result. The check result will be True, False r NA, the result f the check grup will be the selected value under the crrespnding check result attribute. SubCheck Field Cnfigure the fllwing attributes fr this element: CheckName Select a check. Refer t the fllwing steps fr selecting the check: Select the text field under the CheckName attribute. A pp-up windw appears. In the pp-up windw, select the radi buttn befre the desired check, and select OK. TrueIf Select which check results will be cnsidered True in this check grup. Fr example: if yu just select a check, and then select Pass and HR fr the TrueIf attribute. When the result f the check is Pass r HR, the check result in this check grup is cnsidered True. When all f the checks results in this check grup are True, the result f this check grup is cnsidered True. If yu have selected AND in the Type field: When yu add multiple checks in the SubCheck field, ne f the checks results in this test suite is False, and the check with a False check result is nt the last check yu added in the SubCheck field, the result f the checks added in the SubCheck field is NA. If the check with a False check result is the last check yu added in the SubCheck field, then the result f the checks added in the SubCheck field is False. If yu have selected Or in the Type field: When yu add multiple checks in the SubCheck field, ne f the checks results in this test suite is True, and the check with a 358 Cmpliance Guardian Installatin and Administratin User Guide

359 True check result is nt the last check yu added in the SubCheck field, the result f the checks added in the SubCheck field is NA. If the check with a True check result is the last check yu added in the SubCheck field, the result f the checks added in the SubCheck field is True. RunCheck If True is selected fr this attribute, when running a Cmpliance Guardian jb using the test suite, the files will be scanned accrding t the rule set in this check. If False is selected fr this attribute, the crrespnding check will nt be used t scan the files. RiskLevel(r1) The Item Initial Risk value assigned n the initial ccurrence f the cmpliance failure (related t the check being tested fr) in the dcument r stream. Allwed values fr RiskLevel(r1) are RiskLevel(r2) The Item Additinal Risk Level factr that the risk level grws at fr every additinal failure at the check level (fr the same type) fund in the dcument r stream. This number is ptinal where the integer -1 means ignre the value (allwing t use the third value). If the value is -1 then the factr will be 1. Allwed values are -1 t 10. This is ptinal. RiskLevel(r3) The Item risk in relatin t ther checks. This Item is ptinal. If this number is missing then it is assumed that its value is 1. Allwed values are This is ptinal. Accrding t the frmulas selected in the RiskFrmula sectin, the check will have three risk levels after the scan jb. CntentType Select the cntent types that will be scanned. If yu d nt select the cntent types, all the file cntent types that are supprted t be scanned in Cmpliance Guardian will be scanned. Refer t the fllwing steps fr selecting the cntent types: Select the text field under the CntentType attribute. A pp-up windw appears. In the pp-up windw, select the checkbx befre the desired cntent types, and select OK. Select the delete buttn ( ) t delete the SubCheck check rule. Select Add Anther Check t add anther rule. DRunCheck The specified checks will nt run as a grup, they scan files separately. Select the checkbx befre the RunAsTestGrup element, and then cnfigure the fllwing attributes: Cmpliance Guardian Installatin and Administratin User Guide 359

360 CheckName Select a check. Select the text field under the CheckName attribute. A pp-up windw appears. In the pp-up windw, select the radi buttn befre the desired check, and select OK. DatabaseField This is the lcatin in the Cmpliance Guardian database where the scan result data is stred. Cmpliance Guardian will autmatically specify the lcatin fr string data. RunCheck If True is selected fr this attribute, when running a Cmpliance Guardian jb using the test suite, the files will be scanned accrding t the rule set in this check. If False is selected fr this attribute, the check will nt be used t scan the files. RiskLevel(r1) The Item Initial Risk value assigned n the initial ccurrence f the cmpliance failure (related t the check being tested fr) in the dcument r stream. Allwed values fr RiskLevel(r1) are RiskLevel(r2) The Item Additinal Risk Level factr that the risk level grws at fr every additinal failure at the check level (fr the same type) fund in the dcument r stream. This number is ptinal where the integer -1 means ignre the value (allwing t use the third value). If the value is -1 then the factr will be 1. Allwed values are -1 t 10. This is ptinal. RiskLevel(r3) The Item risk in relatin t ther checks. This Item is ptinal. If this number is missing then it is assumed that its value is 1. Allwed values are This is ptinal. Accrding t the frmulas selected in the RiskFrmula sectin, the check will have three risk levels after the scan jb. CntentType Select the cntent types that will be scanned. If yu d nt select the cntent types, all the file cntent types that are supprted t be scanned in Cmpliance Guardian will be scanned. Select the text field under the CntentType attribute, a ppup windw appears. In the pp-up windw, select the radi buttn befre the desired check, and select OK. Rle Assign a rle t the crrespnding check. MaxRw After scanned by the check that is assigned t the MaxRw rle, the failed files will be reprted in the Cmpliance Guardian File Errrs Reprt, the errr type f the failed file is Maximum Rw Exceptin. DataTable After scanned by the check that is assigned t the DataTable rle, the lcatins f the instances that are recrded will be reprted in the Cmpliance Guardian Data Table Reprt. Ckie The check that is assigned this rle can be used fr the Ckie check. Select the delete buttn ( add anther rule. ) t delete the DRunCheck check rule. Select Add Anther DRunCheck t 360 Cmpliance Guardian Installatin and Administratin User Guide

361 Test Suite fr Classificatin and Tagging File Bdy Cnfiguratin Cnfigure the fllwing attributes fr the test suite fr classificatin and tagging file. RiskFrmula If yu have selected False as the value f the NRisk attribute, yu must cnfigure the RiskFrmula field, r this field will be grayed ut. Select a Raw Risk Frmula, Stepped Risk Frmula, and a Weighted Risk Frmula in the crrespnding drp-dwn list. Yu can create a new Risk Frmula by selecting New Frmula in the drp-dwn list. A pp-up windw will appear if yu select New Frmula. In the pp-up windw, enter the name and the ptinal descriptin fr the Risk frmula, define yur wn frmula, and select OK. The new Risk Frmula then will be created. Test Suite Attributes Tag Specify the name f the metadata element that will be created. PlaceTags Define where the tag will be placed. There are fur values fr this attribute: 0 D nt add tag 1 Add the tag t the file nly 2 Add the tag t the file, and SharePint r Yammer 3 Add the tag t SharePint r Yammer nly OverrideUser If the specified metadata already exists, select whether r nt t verride the riginal metadata. OverrideCG If the value f OverrideUser is Yes, the OverrideCG attribute will nt take effect. If the value f OverrideUser is N, the OverrideCG attribute will take effect. If the value f OverrideCG is True, the tag value f this scan will be used t d the crrespnding Classificatin actin. If the value f OverrideCG is False, the riginal file s tag value will be used t d the crrespnding Classificatin actin. In this case, there are the fllwing cnditins: If there is ne riginal tag value in the file r in SharePint, the value is used t d the Classificatin actin. If there are tw riginal values (ne is in file, ne is in SharePint), the ne that will be used t d the actin depends n the pririty we specified fr the AllwedTagValues attribute in this test suite. If the tw riginal values are als specified fr the AllwedTagValues attribute f this test suite, the ne that will be used t d the actin depends n the pririty we specified fr the AllwedTagValues attribute f this test suite. Cmpliance Guardian Installatin and Administratin User Guide 361

362 If ne f the tw riginal values is specified fr the AllwedTagValues attribute f this test suite, Cmpliance Guardian will cmpare the pririty f the riginal tag value and the tag value in this scan. The ne with the higher pririty will be used t d the crrespnding Classificatin actin. If nne f the tw riginal values is specified in this test suite, the tag value f this scan will be used t d the crrespnding Classificatin actin. Select the delete buttn ( ) t delete the check rule. AllwedTagValues Cnfigure the fllwing attributes fr this element: Pririty Specify the pririty f the tag value. When scanning a file, different checks will return different scan results. This is used t determine which tag value will be added t the file. Type Select Static r Dynamic as the type. Static Select this type t specify a certain value that will be used as the tag value. Dynamic Select this type, and then specify a macr expressin t search the crrespnding value that will be used as the tag value. HlderName This feature is nly available if yu chse Dynamic. If Static is selected as the type, this field will be grayed ut. If Dynamic is selected as the type, yu must enter a hlder name. Yu can enter any value as the hlder name as lng as it is nt duplicated in anther AllwedTagValues ndes. The hlder name is used when the Cmpliance Guardian engine analyzes the macr expressin and finds the crrespnding values. Value If Static is selected as the type, specify the tag value. If yu d nt want t add a tag value t a scanned file, enter Nne r nne. The field is nt case sensitive. If Dynamic is selected as the type, enter a macr expressin t search the crrespnding prperties. The results will be added t the file, SharePint, and/r Yammer. The methd f using the macr expressin here are same as that f the macr expressin specified in the Surce field f the Cntext check. Fr mre details, refer t Cnditin in the Cntext check sectin. NA If Dynamic is selected as the type, yu can enter a value as this attribute. If n prperties are fund accrding t the macr expressin, this value will be used as the tag value t add t a file. The default value is $Empty, then n value will be added. DefaultRiskValue_Raw Enter a value as the raw risk scre f the file. The attribute will take effect when the value f OverrideUser is N. When the riginal file s metadata is nt verridden, the risk scre is nt calculated by the Raw type risk frmula that is selected in the RiskFrmula element field f the test suite. The risk cre is the value yu specified here. 362 Cmpliance Guardian Installatin and Administratin User Guide

363 DefaultRiskValue_Stepped Enter a value as the stepped risk scre f the file. The attribute will take effect when the value f OverrideUser is N. When the riginal file s metadata is nt verridden, the risk scre is nt calculated by the Stepped type risk frmula that is selected in the RiskFrmula element field f the test suite. The risk cre is the value yu specified here. DefaultRiskValue_Weighted Enter a value as the weighted risk scre f the file. The attribute will take effect when the value f OverrideUser is N. When the riginal file s metadata is nt verridden, the risk scre is nt calculated by the Weighted type risk frmula that is selected in the RiskFrmula element field f the test suite. The risk cre is the value yu specified here. Select the delete buttn ( ) t delete the rule. Select Add Anther Tag Value t add anther tag value. CheckIdGrup Cnfigure the fllwing attributes fr this element: CheckName Select a check. Select the text field under the CheckName attribute, a pp-up windw appears. In the pp-up windw, select the radi buttn befre the desired check, and then select OK. True Select a value. If the test f this check evaluates t True, then the tag value will be this ne. False Select a value. If the test f this check evaluates t False, then the tag value will be this ne. N/A Select a value. If the test f this check evaluates t N/A, then the tag value will be this ne. RiskLevel(r1) The Item Initial Risk value assigned n the initial ccurrence f the cmpliance failure (related t the check being tested fr) in the dcument r stream. Allwed values fr RiskLevel(r1) are RiskLevel(r2) The Item Additinal Risk Level factr that the risk level grws at fr every additinal failure at the check level (fr the same type) fund in the dcument r stream. This number is ptinal where the integer -1 means ignre the value (allwing t use the third value). If the value is -1 then the factr will be 1. Allwed values are -1 t 10. This is ptinal. RiskLevel(r3) The Item risk in relatin t ther checks. This Item is ptinal. If this number is missing then it is assumed that its value is 1. Allwed values are This is ptinal. Accrding t the frmulas selected in the RiskFrmula sectin, the check will have three risk levels after the scan jb. Select the delete buttn ( ) t delete a rule. Select Add Anther Check t anther rule. Cmpliance Guardian Installatin and Administratin User Guide 363

364 Operatr Select the checkbx befre Operatr, and cnfigure the attributes fr this element. Yu can determine the cnditin f the check grup s result. Type Depending n the sub checks yu added in the SubCheck field, yu can change the lgical relatinships between the sub check results. There are currently tw lgical relatinships: AND and OR. By default, the lgic is set t And. Result Field Specify the result f the check grup accrding t the check result. The check result will be True, False r NA, the result f the check grup will be the selected value under the crrespnding check result attribute. SubCheck Field Cnfigure the fllwing attributes fr this element: CheckName Select a check. Refer t the fllwing steps fr selecting the check: Select the text field under the CheckName attribute. A pp-up windw appears. In the pp-up windw, select the radi buttn befre the desired check, and select OK. TrueIf Select which check results will be cnsidered True in this check grup. Fr example, if yu just select a check, and then select Pass and HR fr the TrueIf attribute. When the result f the check is Pass r HR, the check result in this check grup is cnsidered True. When all f the checks results in this check grup are True, the result f this check grup is cnsidered True. If yu have selected AND in the Type field: When yu add multiple checks in the SubCheck field, ne f the checks results in this test suite is False, and the check with a False check result is nt the last check yu added in the SubCheck field, the result f the checks added in the SubCheck field is NA. If the check with a False check result is the last check yu added in the SubCheck field, the result f the checks added in the SubCheck field is False. If yu have selected Or in the Type field: When yu add multiple checks in the SubCheck field, ne f the checks results in this test suite is True, and the check with a True check result is nt the last check yu added in the SubCheck field, the result f the checks added in the SubCheck field is NA. If the check with a True check 364 Cmpliance Guardian Installatin and Administratin User Guide

365 result is the last check yu added in the SubCheck field: the result f the checks added in the SubCheck field is True. RiskLevel(r1) The Item Initial Risk value assigned n the initial ccurrence f the cmpliance failure (related t the check being tested fr) in the dcument r stream. Allwed values fr RiskLevel(r1) are RiskLevel(r2) The Item Additinal Risk Level factr that the risk level grws at fr every additinal failure at the check level (fr the same type) fund in the dcument r stream. This number is ptinal where the integer -1 means ignre the value (allwing t use the third value). If the value is -1 then the factr will be 1. Allwed values are -1 t 10. This is ptinal. RiskLevel(r3) The Item risk in relatin t ther checks. This Item is ptinal. If this number is missing then it is assumed that its value is 1. Allwed values are This is ptinal. Accrding t the frmulas selected in the RiskFrmula sectin, the check will have three risk levels after the scan jb. Select the delete buttn ( Check t add anther rule. ) t delete the SubCheck check rule. Select Add Anther Select Add Anther Tag t add anther test suite rule. Test Suite fr Redactin Cnfigure the fllwing attributes fr the test suite fr redactin file. RiskFrmula If yu have selected False as the value f the NRisk attribute, yu must cnfigure the RiskFrmula field, r this field will be grayed ut. Select a Raw Risk Frmula, Stepped Risk Frmula, and a Weighted Risk Frmula in the crrespnding drp-dwn list. Yu can create a new Risk Frmula by selecting New Frmula in the drp-dwn list. A pp-up windw will appear if yu select New Frmula. In the pp-up windw, enter the name and the ptinal descriptin fr the Risk frmula, define yur wn frmula, and select OK. The new Risk Frmula then will be created. Test Suite Attributes Cnfigure the fllwing attributes: CheckName Select a check. Select the text field under the CheckName attribute, a pp-up windw appears. All f the Redactin type checks are displayed in the pp-up windw. Select the radi buttn befre the desired Redactin check, and then select OK. Cmpliance Guardian Installatin and Administratin User Guide 365

366 RiskLevel(r1) The Item Initial Risk value assigned n the initial ccurrence f the cmpliance failure (related t the check being tested fr) in the dcument r stream. Allwed values fr RiskLevel(r1) are RiskLevel(r2) The Item Additinal Risk Level factr that the risk level grws at fr every additinal failure at the check level (fr the same type) fund in the dcument r stream. This number is ptinal where the integer -1 means ignre the value (allwing t use the third value). If the value is -1 then the factr will be 1. Allwed values are -1 t 10. This is ptinal. RiskLevel(r3) The Item risk in relatin t ther checks. This Item is ptinal. If this number is missing then it is assumed that its value is 1. Allwed values are This is ptinal. Select the delete buttn ( add anther rule. ) t delete the SubCheck check rule. Select Add Anther DRunCheck t Using CustmScan in Cmpliance Guardian CustmScan is used t implement a custmized check methd n the check level, wrks as an extensin f current check types. It is used in cmbinatin with ther checks t find infrmatin n a file and act n it. Methd Define an Interface ICustmTDF in CCE, all the implementatin classes need t implement the interface. This interface is initially defined as: public interface ICustmTDF { ReprtResult TrueResult { get; set; } ReprtResult FalseResult { get; set; } TDFCntentType CntentType { get; set; } TestResult Scan(ScanCntext cntext, ScanCntent cntent); } ScanCntext and ScanCntent include everything a built-in check needs fr scanning: public class ScanCntent { // File extensin public string FileType; public string Url; 366 Cmpliance Guardian Installatin and Administratin User Guide

367 // Original file path public string FilePath; // including ckie, SSL level, SharePint metadata etc. } public IDictinary<string, bject> Metadata; The fllwing cde is the check: <Tdf TdfID="CustmTDFID"> <ReprtText> <Name>CustmTDF</Name> <PlicyURL> <Descriptin>CustmTDF definitin</descriptin> <True result="pass">passed</true> <False result="fail">failed</false> </ReprtText> <CustmTDF Class="Namespace.Class, DllName" /> </Tdf> Refer t the fllwing helpful ntes: The custm DLL shuld implement the interface defined as abve. When scanning, CCE calls the cnstructr, passing the XML cntent as parameter. Then CCE calls the scan() methd defined in the interface. The result returned by the scan() methd shuld be treated as a regular check result. The fllwing is an example f a regular check result: public class TestResult { public string TdfId; public ReprtResult Status; //Check Result // A list f all vilatins public List<TestResultUnit> ResultList; } Cmpliance Guardian Installatin and Administratin User Guide 367

368 public class TestResultUnit { public string TdfId; public int Line; appear). public int Clumn; vilatins appear). public int StartIndex; public int Length; defining the actual result. // Lcatin f vilatins (which lines the vilatins // Lcatin f vilatins (which clumns the // Lcatin by start index // Start Index and Length are used tgether fr public ListLcStatus Result; public string MatchResult; // Nte, Warn, Fail // The actual matched value. } After writing the check DLL file, yu must put it in \Cmpliance Guardian\Agent\Bin, then the CustmScan check wrks. CustmCheck CustmCheck is used t calculate the check digit n the result f the regular expressins, in rder t validate the result. Using CustmCheck Refer t the fllwing sectin fr using the CustmCheck functin. Methd Define an Interface IValidatin, all the implementatin classes need t implement the interface and expse a public methd Validate fr CCE t use them. This Interface is initially defined as: } public interface IValidatin { string Parameters { get; set; } bl Validate(string id); 368 Cmpliance Guardian Installatin and Administratin User Guide

369 Cnfiguratin Define the DLL and the class cnfiguratin file CntentCmplianceCnfig.xml. The value f Class shuld be the full name f the class and the full name f the DLL, separated by a cmma(,). Name refers t the name f the checksum algrithm. Regex will call the algrithm frm this value. Nde <Parameters> is fr the parameters needed fr specific algrithms, all cntent will be passed internally as a string. <!-- CustmCheck Nde --> <CustmCheck Name="Credit Card Number" Class="DcAve.CntentCmpliance.Engine.Checksum, CmmnChecksum"> <Parameters> <![CDATA[ Parameter as string ]]> </Parameters> </CustmCheck> *Nte: In rder t lad the external DLLs, they must be put either in the agent\bin flder r in GAC. Example <!-- Canadian SIN & Credit Card Number--> <RegEx CaseSensitive="N" ListLcStatus="Fail" ListLc="Yes" SearchAll="True" TrueIf="NtFund" CustmCheck="Credit Card Number"> <![CDATA[(?<=^ \b)\d{3}([- ])\d{3}(\1)\d{3}(?=$ \b)]]> </RegEx>This is an example that hw a checksum is defined in check. Nte the checksum algrithm t the RegEx is defined by CustmCheck="Credit Card Number". A Class example which implements the interface: public class LuhnAlgrithm : IValidatin { { public string Parameters { get; set; } public LuhnAlgrithm(string parameters) } this.parameters = parameters; public bl Validate(string number) { Cmpliance Guardian Installatin and Administratin User Guide 369

370 if (string.isnullorempty(this.parameters)) { return ValidateInternal(number); } else { return ValidateInternal(number, this.parameters); } } public bl ValidateInternal(string number) { // Methd withut parameter } public bl ValidateInternal(string number, string parameters) { // Methd with parameter } } Related Cnfiguratin File The cnfiguratin file CntentCmplianceCnfig.xml prvides several built-in CustmCheck methds. The cnfiguratin file resides in \Cmpliance Guardian\Agent\Bin. Yu can add yur custmized CustmCheck methds in the cnfiguratin file. 370 Cmpliance Guardian Installatin and Administratin User Guide

371 Appendix C: Supprted File Types in Cmpliance Guardian Cnditin Supprted fr Scanning Supprted fr Adding Tag DOC DOCX XLS XLSX PPT PPTX PDF ASP ASPX HTM HTML TXT XML ZIP JSP PHP DOCX XLSX PDF HTM HTML ASPX PPTX PPT DOC XLS File Type *Nte: Cmpliance Guardian currently supprts t scan Micrsft Office 2003 files after installing a cmpatibility pack. In the XLS file and the XLSX file, the hidden sheet whse Visible prperty is set t 2 xlsheetveryhidden is als supprted t be scanned. *Nte: PDFs with unstructured textual cntent are nt supprted t be scanned in Cmpliance Guardian. Cmpliance Guardian Installatin and Administratin User Guide 371

372 Appendix D: Cmpliance Guardian Cnfiguratin File When a user uplads checks r test suites t Cmpliance Guardian, the ZIP file f the checks r test suites will be temprarily unzipped t a default directry. The default directry is \Cmpliance Guardian\Manager\Wrk. The full path f the checks r test suites that will be upladed is \Cmpliance Guardian\Manager\Wrk\Test Suite Name\Check Name r \Cmpliance Guardian\Manager\Wrk\Test Suite Name. Due t the limitatin f Micrsft Windws, the length f the check r test suite s full path cannt exceed 260 characters, r the check r test suite will nt be upladed t Cmpliance Guardian. Cmpliance Guardian has a cnfiguratin file named CmplianceSetting.cnfig that allws yu t custmize the directry where the checks r test suites will be temprarily unzipped thrugh the custmized directry t reduce the length f the check r test suite s full path. T change the default directry where the checks r test suites will be temprarily unzipped, cmplete the fllwing steps: 1. G t the machines with Cmpliance Guardian Manager installed and pen the \Cmpliance Guardian\Manager\Cntrl\Cnfig directry t find the CmplianceSetting.cnfig file. 2. Open the CmplianceSetting.cnfig file and find the CnfigureFilePath nde. 3. Change the value f the IsCnfigured attribute t True. Then specify a path fr the path attribute. Restart the Cmpliance Guardian Timer Service. The checks r test suites will be temprarily unzipped under the specified path. *Nte: The path that yu specified fr the path attribute must exist. 372 Cmpliance Guardian Installatin and Administratin User Guide

373 Appendix E: Using the Scan Engine API Refer t the infrmatin belw t use the Scan Engine API. *IMPORTANT: In this appendix, all references t TDFs refer t checks, and all references t TDF cllectins refer t test suite. Initialize the ScanEngine Class The use f Scan Engine API requires the supprt f the Cmpliance Guardian license. The third-party prject must be cmpiled in the perating system where the Cmpliance Guardian agent is installed, and the third-party prject must reference the CCE.Engine.dll in the bin flder f the Cmpliance Guardian agent installatin path. Currently, the Scan Engine supprts t perfrm the single thread scan. When initializing the ScanEngine class, the cnstructr requires taking ne argument with ScanSetting Class. The fllwing cding sample indicates the cnstructin: Figure 53: Cding sample 1. Parameters f the ScanEngine.Scan Methd The fllwing parameters are used fr this methd fr cmpleting the scan prgress. Figure 54: Parameters used fr the ScanEngine.Scan methd. string xml A string in the XML frmat, it cmbines the CCC/MCC XML string with the TDF XML string. string url The riginal URL f the file that will be scanned. string filepath The physical strage path f the file that will be scanned. IDictinary<string, bject> metadata A dictinary which hlds the scanned file s related metadata infrmatin. Cmpliance Guardian Installatin and Administratin User Guide 373

374 Usage Example Refer t the fllwing examples t understand hw t scan files using CCC (the cnfiguratin file f TDF cllectin used fr the Cmpliance Scanner) and MCC (the cnfiguratin file f TDF cllectin used fr the Classificatin Scanner). Scan Files Using CCC T cmbine files using CCC, cmplete the fllwing steps: Cmbine TDFs accrding t the CCC XML file. Figure 55: The CCC XML file. Figure 56: Related TDF ffice.a.1.xml. 374 Cmpliance Guardian Installatin and Administratin User Guide

375 Figure 57: Related TDF ffice.j.xml. With all CCC XML files and TDFs available, by using the GetC3sDefinitin methd in CntentCmplianceCllectinDefinitinUtility class, the required argument string xml required by ScanEngine.Scan can be returned. Refer t Errr! Reference surce nt fund. fr a cding sample. Figure 58: Cding sample 2. Set the riginal URL f the file that will be scanned. Figure 59: Set the riginal URL. Set the physical strage path f the file that will be scanned. Figure 60: Set the physical strage path. Set the scanned file s related metadata infrmatin. Figure 61: Set the scanned file s related metadata infrmatin. Fr detail infrmatin f cnstructing Metadata Dictinary, refer t Errr! Reference surce nt fund.. Cmpliance Guardian Installatin and Administratin User Guide 375

376 Call the ScanEngine.Scan methd. Figure 62: Call the ScanEngine.Scan methd. Result Explanatin The screensht shws the sample wrd dcument cntaining a picture withut Alt Text, which vilates the scan language defined in the TDF 508.ffice.a.1.xml. Figure 63: Screensht f the sample Micrsft Wrd dcument 1. The screensht shws the pages in a sample wrd dcument with a page number set up. This fulfills the TDF 508.ffice.j.xml. 376 Cmpliance Guardian Installatin and Administratin User Guide

377 Figure 64: Screensht f the sample Micrsft Wrd dcument 2. Basing this sample dcument settings, the scan result status fr this wrd dcument shuld be Fail (the GetStatus value in the screensht. Furthermre, when drilling dwn t the details, the status (in the TestResultList) fr the TDF 508.ffice.a.1.xml is Fail, and the status fr TDF 508.ffice.j.xml is Pass. Figure 65: Scanned result 1. Figure 66: Scanned result 2. Cmpliance Guardian Installatin and Administratin User Guide 377

378 Figure 67: Scanned result 3. Scan Files Using MCC T scan files using MCC, cmplete the fllwing steps: Cmbine TDFs accrding t the MCC XML file. Figure 68: The MCC XML file. 378 Cmpliance Guardian Installatin and Administratin User Guide

379 The related TDFs: Figure 69: HAV.xml. Figure 70: HIV.xml. With all MCC and TDF XMLs available, by using the GetMCCDefinitin methd in CntentCmplianceCllectinDefinitinUtility class, the required argument string xml required by ScanEngine.Scan can be returned. Figure 71: Cding sample 3. Set the riginal URL f the file that will be scanned. Figure 72: Set the riginal URL. Cmpliance Guardian Installatin and Administratin User Guide 379

380 Set the physical strage path f the file that will be scanned. Figure 73: Set the physical strage path. Set the scanned file s related metadata infrmatin. Figure 74: Set the scanned file s related metadata infrmatin. Call the ScanEngine.Scan methd. Figure 75: Call the ScanEngine.Scan methd. Result Explanatin Refer t the fllwing screensht fr a sample f the Micrsft Wrd dcument. Figure 76: Screensht f the sample Micrsft Wrd dcument 3. The screen shws the sample wrd dcument cntaining sensitive infrmatin HIV and HAV. Accrding t the Language defined in the MCC s TDF HAV.xml, the true result fr HAV.xml was set with the value Medium, when the scan engine fund HAV, TagValue will be set as Medium. Hwever, as what was defined in the MCC, since the value High fr HIV has a higher pririty, when the scan engine fund HIV in the dcument, the final value fr TagValue was verwritten by High. In this case, the scan result will be shwn as the screensht belw. 380 Cmpliance Guardian Installatin and Administratin User Guide

381 Figure 77: Scanned result 4. Scan Metadata Regarding the TDF language, the user is able t define a custmized TDF t perfrm a custmized scan accrding t their requirements. Amng all kinds f supprted TDF types, the SSL and Ckie Validatin type TDFs will require the scan engine t test the SSL level r Ckie dmain and expiratin. The Cmpliance Guardian SharePint metadata test is supprted in the installatin package. Therefre, fr Scan Engine API, the scan methd requires the SSL level, Ckie infrmatin, r SharePint Metadata fr the surce dcument, t be passed via an argument metadata if the crrespnding SSL/Ckie /Metadata checking is defined and used in MCC/CCC. Dictinary<string, bject> metadata = new Dictinary<string, bject>(); Fr SSL Level infrmatin, if the surce site is under the HTTPS prtcl and SSL level checking TDF is used, the SSL level fr the surce site shuld be set in metadata. The key fr the scan engine t recgnize SSL infrmatin is PublicKeySize, and the security level value shuld be an Integer. Figure 78: The key and value fr SSL Level infrmatin. Fr ckie infrmatin, if the ckie validatin TDF is used in the CCC, the ckie cllectin shuld be passed via the metadata Dictinary. The Key shuld be Ckie and the value shuld be a System.Net.CkieCllectin bject, which cntains all the ckie bjects retrieved frm the surce envirnment. Cmpliance Guardian Installatin and Administratin User Guide 381

382 Figure 79: The key and value fr ckie infrmatin. Fr SharePint Metadata infrmatin, the Key shuld be Metadata, hwever the Value bject shuld be anther Dictinary<string, string> instance, which uses the SharePint clumn name as the key, and uses the SharePint clumn value as the value. *Ntes: Fr SharePint build-in clumns, the key shuld end with \0\0. The indicatr \0\0 tells the scan engine that the clumn is a SharePint build-in clumn, which will be ignred by the scan engine during the scanning prgress. Figure 80: The key and value fr SharePint metadata. 382 Cmpliance Guardian Installatin and Administratin User Guide

383 CCE.EngineWrker.exe Mde Use the parameter f the ScanSetting s bject t mdify the methd f starting CCE.EngineWrker.exe. After the ScanSetting s bject setting is created, the attribute CmmunicatinSetting f the ScanSetting s bject is used t cnfigure the methd f starting CCE.EngineWrker.exe: Figure 81: The cnditin after the ScanSetting s bject setting is created. IsSinglePrcess This attribute is used t cnfigure if the CCE.EngineWrker.exe is started using the singe prcess. The default value is false. If the value f this attribute is set t false: After creating the engine bject, the ScanEngine.Scan methd will be called and the CCE.EngineWrker.exe will start t scan files. Figure 82: The CCE.EngineWrker.exe starts. If the value f this attribute is set t true: The CCE.EngineWrker.exe will nt be started fr scanning files. IsRemte The attribute will take affect when the value f IsSinglePrcess is set t false. It is used t cnfigure whether the CCE.EngineWrker.exe prcess and the user prcess that is creating the engine bject are running in a same machine where the crrespnding agent is installed. If the value f this attribute is set t true, the CCE.EngineWrker.exe prcess can run n anther machine where anther agent (this agent and the agent that is used t create engine bject must cnnect t a same server) is installed. The values f the RemteIp nde and the RemtePrt nde must be specified. The default values are the IP and prt f the machine where the agent that creates the engine bject is installed. The CCE.EngineWrker.exe prcess will run n Cmpliance Guardian Installatin and Administratin User Guide 383

384 the specified machine (accrding t the values yu specified fr the RemteIp nde and the RemtePrt nde). If the value f this attribute is set t false, the CCE.EngineWrker.exe prcess will run n the machine where the agent that creates the engine bject. The values f the RemteIp nde and the RemtePrt nde are invalid, and d nt need t be specified. ScanTimeOut The attribute will take effect when the value f the IsSinglePrcess attribute is false. It is used t cnfigure the timeut perid. The default value is 180. The unit is secnds. RetryTimes The attribute will take effect when the value f the IsSinglePrcess attribute is false. It is used t define the times f retrying when an errr ccurred during scanning a file. The default value is 3. CheckInterval The attribute will take effect when the value f the IsSinglePrcess attribute is false. It is used t define the interval f checking the Keepalive thread. The default value is 60. The unit is secnds. 384 Cmpliance Guardian Installatin and Administratin User Guide

385 Appendix F: Using the CmplianceSetting.cnfig file The CmplianceSetting.cnfig file can be used t realize the fllwing functins. Cnfiguring t Scan User Prfiles Cmpliance Guardian supprts scanning user prperties and scial ntes in user prfiles. Cmpliance Guardian accesses the user prfiles thrugh the persnal site. Hwever, if the persnal site is nt created, yu cannt scan the crrespnding user prfile since there is n persnal site nde in the tree. Cmpliance Guardian prvides a methd t scan the user prfile in Cmpliance Scanner and Scheduled Classificatin Scanner when the persnal site is nt created. The User Prfile Service nde is laded n the farm tree by changing the UserPrfile Used="false" nde in the CmplianceSetting.cnfig file. T change the nde fr displaying the User Prfile Service nde in the tree, cmplete the fllwing steps: G t the machines with Cmpliance Guardian Manager installed. Open the \Cmpliance Guardian\Manager\Cntrl\Cnfig directry t find the CmplianceSetting.cnfig file. Open the CmplianceSetting.cnfig file. Lcate the UserPrfile nde. Change the value f the Used attribute t true. Save the file. The User Prfile Service nde appears in the farm tree in Cmpliance Scanner and Scheduled Classificatin Scanner. Cnfiguring Restricted Attachment Types and Mdifying the Allwed Maximum Size f Upladed Attachments in Incident Manager Incident Manager allws the ptin t uplad attachments when yu add a cmment t a quarantined, encrypted r redacted file. Yu can cnfigure the file types that are restricted t uplad t Classificatin Reprt > Incident Manager as attachments, and mdify the allwed maximum size f the upladed file by cnfiguring the CmplianceSetting.cnfig file. Refer t the fllwing steps: G t the machines with Cmpliance Guardian Manager installed. Open the \Cmpliance Guardian\Manager\Cntrl\Cnfig directry t find the CmplianceSetting.cnfig file. Open the CmplianceSetting.cnfig file. Lcate the IMSAttachmentSetting nde: Cmpliance Guardian Installatin and Administratin User Guide 385

386 SingleFileSizeMax The value is the current allwed maximum size f uplading each attachment. Yu can change the value t the desired size. Yu can als change the unit f the size by change the value f SizeUnit. Blacklist The values are the files that are currently restricted t uplad t Cmpliance Guardian. Add the extensin f the file types that are restricted t uplad t AvePint Privacy Impact Assessment in the nde. Use the cmma (,) as the separatr. Figure 83: The IMSAttachmentSetting nde in the cnfiguratin file. Save the file. 386 Cmpliance Guardian Installatin and Administratin User Guide

387 Appendix G: Displaying Only Vilatins in the Errr Highlight Reprt This functin is used fr Cmpliance Guardian Scan Result > Failed Files > Errr Highlight Reprt. If a file size is quite large, it may affect the perfrmance t display the whle file in the Errr Highlight Reprt. Cmpliance Guardian prvides yu with a way t cntrl whether the whle file with the vilatins (nn-cmpliant cntent) is displayed in the Errr Highlight Reprt, r just the file s vilatins (nn-cmpliant cntent) are displayed in the reprt. The cnfiguratin file CntentCmplianceCnfig.xml prvides yu with a nde t prvide this functin. The cnfiguratin file resides in \Cmpliance Guardian\Agent\Bin. Open the file, and find the nde <VilatinSummaryThreshld acunt="20" bcunt="40">600</vilatinsummarythreshld>: acunt The value f this attribute means the number f the characters after the nncmpliant cntent that can be displayed in the errr highlight reprt. The default value is 20. Yu can custmize the value. bcunt The value f this attribute means the number f the characters befre the nn-cmpliant cntent that can be displayed in errr highlight reprt. The default value is 40. Yu can custmize the value. Nde Value If a file size is greater than the nde value, the whle file will nt be displayed in the Errr Highlight Reprt fr the perfrmance cnsideratin, nly the vilatins (nn-cmpliant cntent) alng with the characters next t the vilatins (the characters befre the vilatins and the characters after the vilatins) are displayed in the reprt. The default nde value is 600 KB. Yu can custmize the value. Cmpliance Guardian Installatin and Administratin User Guide 387

388 Appendix H: Cnfiguring fr Supprting Lad Balancing Cnfiguring fr Supprting Netwrk Lad Balancing Cmpliance Guardian supprts Netwrk Lad Balancing. Wrking Prcess Fr the Cmpliance Guardian Agents in agent grup: Users first cnfigure several file share lcatins n the Cmpliance Guardian Agent servers. The Agents run jbs frm Cmpliance Guardian Manager. The Agents send the files that will be scanned t the file share lcatins, and then pass the UNC path f the temprary file in file share lcatins t Cmpliance Guardian engine wrkers (The Cmpliance Guardian Agents added in cluster are used as the Cmpliance Guardian engine wrkers). Fr the Cmpliance Guardian Agents in NLB cluster: The Cmpliance Guardian Agents are used as Cmpliance Guardian engine wrkers. They are nt assigned jbs frm Cmpliance Guardian Manager. The Cmpliance Guardian Agents scan the files in file share lcatins. Installing Netwrk Lad Balancing Feature The Netwrk Lad Balancing feature must be installed in the Cmpliance Guardian Agent servers that yu want t be used as Cmpliance Guardian engine wrkers. Ensure that tw netwrk interface cards must be installed n the machines befre installing the feature. T install the NLB feature, cmplete the fllwing steps: Navigate t Administrative Tls > Server Manager. Select Features in the left pane. Select Add Features in the right pane. In the Add Features Wizard, select the checkbx befre Netwrk Lad Balancing in the Features field f the middle pane. Select Install. 388 Cmpliance Guardian Installatin and Administratin User Guide

389 Editing Netwrk Lad Balancing Cluster Prperties After installing the NLB feature, pen Netwrk Lad Balancing Manager, and then add a cluster. Add the Cmpliance Agent servers that yu want t be used as Cmpliance Guardian engine wrkers t the cluster. Yu must edit the cluster prperties. T edit the cluster prperties, cmplete the fllwing steps: Duble select the cluster. Select Cluster Prperties in the drp-dwn list. The Cluster Prperties windw appears. Select the Cluster Parameters tab, and make sure the Unicast mde is selected. Select the Prt Rules tab. Select Edit. The Add/Edit Prt Rule windw appears. Edit the fllwing settings in the Add/Edit Prt Rule windw: Deselect the checkbx befre All in the Cluster IP address field. Select TCP in the Prtcls field. Select Nne fr Affinity in the Filtering mde field. Select OK in the Add/Edit Prt Rule windw. Select OK in the Cluster Prperties windw. Cnfiguring File Share Lcatins File share lcatins must be cnfigured fr string the files that will be scanned temprarily. All f the Cmpliance Guardian Agents must cnfigure the file share lcatins. T cnfigure file share lcatins n the Cmpliance Guardian Agent servers, cmplete the fllwing steps: Find the CntentCmplianceCnfig.xml file under the path \Cmpliance Guardian\Agent\Bin. Open the CntentCmplianceCnfig.xml file with Ntepad. Find the <FileShares> nde. Specify the username and passwrd t access the file share lcatin. Specify the file share path. Fr example: <FileShares> <FS> <User>bj\administratr</User> <Passwrd>encrypted passwrd</passwrd> Cmpliance Guardian Installatin and Administratin User Guide 389

390 <Path>\\BJ\shared</Path> </FS> </FileShares> Yu can cnfigure several file share lcatins fr the cnsideratin f perfrmance by adding mre <FS> ndes. Als yu can add, edit r delete the ndes thrugh the CCE.EngineWrker.exe file. Refer t Ding Operatins n the <FS> Nde. Fr security cnsideratins, the passwrd must be encrypted. Refer t Encrypting Passwrds fr Accessing File Share Lcatins fr hw t encrypt the passwrd. Save the CntentCmplianceCnfig.xml file. *Nte: The file share settings cnfigured fr each Cmpliance Guardian agent servers must be same. Using CCE.EngineService.exe file t Encrypt Passwrds and D Operatins n the <FS> Nde Refer t the fllwing sectin fr using CCE.EngineService.exe file t encrypt passwrds and d peratins n the <FileShares> nde. Encrypting Passwrds fr Accessing File Share Lcatins Fr security cnsideratins, the passwrd used t access the file share lcatin must be encrypted. Refer t the fllwing steps t encrypt the passwrd. Find the cmd.exe n the servers where Cmpliance Guardian Agents (added in the agent grup) install. Select cmd.exe, and then select Run as administratr. The cmmand line interface appears. Enter cd and the path f the CCE.EngineWrker.exe: \Cmpliance Guardian\Agent\Bin. If the file is nt in the disk C, yu must add \disk befre the path, fr example: cd /d d:\avepint\cmpliance Guardian\Agent\bin. Press Enter. Enter \Cmpliance Guardian\Agent\Bin\CCE.EngineWrker.exe, and then enter the cmmand encrypt. Press Enter. The passwrd will be encrypted. Figure 84: Using CCE.EngineWrker.exe and the cmmand encrypt t encrypt the passwrd. 390 Cmpliance Guardian Installatin and Administratin User Guide

391 *Nte: Yu must use CCE.EngineWrker.exe and the cmmand encrypt t encrypt the passwrd in all f the servers where Cmpliance Guardian Agents (added in the agent grup) install. Ding Operatins n the <FS> Nde Yu can use the CCE.EngineWrker.exe file t add, edit and delete the <FS> nde. After yu encrypt the passwrd (refer t Encrypting Passwrds fr Accessing File Share Lcatins), the message Please select the peratin <A=Add; M=Mdified; D=Delete; L=List; E=Exit; H=Help> appears in the cmmand line. A=Add Enter A t add anther <FS> nde. M=Mdified Enter M t mdify the <FS> nde. D=Delete Enter D t delete a <FS> nde. L=List Enter L t list all f the <FS> ndes. E=Exit Enter E t exit the cmmand line interface. H=Help Enter H t get the help infrmatin. Figure 85: Ding Operatins n the <FS> Nde. Cnfiguring Cmmunicatin Settings All f the Cmpliance Guardian Agents must cnfigure the cmmunicatin settings fr supprting Netwrk Lad Balancing. T cnfigure the cmmunicatin settings, cmplete the fllwing steps: Find the CntentCmplianceCnfig.xml file under the path \Cmpliance Guardian\Agent\Bin. Open the CntentCmplianceCnfig.xml file with Ntepad. Cmpliance Guardian Installatin and Administratin User Guide 391

392 Find the <Cmmunicatin> nde. Fr the agent server that has been added in the cluster, the first line f the nde is: <Cmmunicatin IsSinglePrcess="False" IsRemte="False" InCluster="True"> Fr the agent server that has been added int the agent grup, the first line f the nde is: <Cmmunicatin IsSinglePrcess="False" IsRemte="True" InCluster="False"> Cnfigure the fllwing attributes fr the <Cmmunicatin> nde t supprt Netwrk Lad Balancing: RemteIP Enter the cluster IP address as the attribute s value. RemtePrt Enter the cluster IP address crrespnding prt. ScanTimeOut Enter the timeut value fr a scan. This is ptinal. The default value is 180 secnds. RetryTimes Enter the value f the retrying scan times. This is ptinal. The default value is 3 times. CheckInterval Enter the interval f checking scanning jb. This is ptinal. The default value is 60 secnds. *Nte: The value f the RemteIP attribute and the value f the RemtePrt attribute cnfigured fr each server must be same. Cntrl Service Lad Balancing Refer t the fllwing sectins fr details abut the Cmpliance Guardian Cntrl Service lad balancing. Installing Cmpliance Guardian Manager Cntrl Service Lad Balancing Envirnment T install the Cmpliance Guardian Manager Cntrl Service Lad Balancing envirnment, cmplete the fllwing steps: Prepare the envirnment. a. Cnfigure Windws Netwrk Lad Balancing. There are tw ndes in the envirnment, which are nde A and nde B. Nde A s IP address is IP02 and nde B s IP address is IP03. b. The public IP address is IP01: c. Nde A s IP address IP02 is , its hstname is PerfA7. d. Nde B s IP address IP03 is , its hstname is PerfB Cmpliance Guardian Installatin and Administratin User Guide

393 Install Cmpliance Guardian Manager Cntrl service Cntrl01 n nde A with its wn IP02/Hstname. Figure 86: Cntrl Service Cnfiguratin. Install Cmpliance Guardian Manager Cntrl service Cntrl02 n nde B with its wn IP03/Hstname. *Nte: Make sure that the Database Server and Cntrl Service database names entered in the Cntrl Database Server and Cntrl Service Database Name fields are the nes used when installing Cmpliance Guardian Manager Cntrl service Cntrl01 and the passphrase is the ne used when installing Cmpliance Guardian Manager service Cntrl01. Cmpliance Guardian Installatin and Administratin User Guide 393

394 Figure 87: Cntrl Service Cnfiguratin. When installing Cmpliance Guardian Agents t cnnect t Cntrl Service hst, ensure using the public IP IP01 as Cntrl Service Hst. 394 Cmpliance Guardian Installatin and Administratin User Guide

395 Figure 88: Cmmunicatin Cnfiguratin. The installed Cmpliance Guardian Manager Cntrl Service Lad Balancing envirnment is based n the lad balancing f the Windws Netwrk Lad Balancing envirnment. Cmpliance Guardian Manager Cntrl Service Lad Balancing fulfills Lad Balancing and Cntrl Service High Availability. Cmpliance Guardian Manager Cntrl Service Lad Balancing supprts t access and perate Cmpliance Guardian Manager by using the public IP address IP01. Windws Netwrk Lad Balancing will autmatically handle the received requests and send them t the ptimal nde. The Cmpliance Guardian Manager Cntrl service f the nde that is chsen by Windws Netwrk Lad Balancing will then handle the request. When turning ff the netwrk f ne nde that has installed Cmpliance Guardian Manager Cntrl Service, ther Cntrl Services will cntinue wrking as usual. *Nte: In a Cmpliance Guardian Manager Cntrl Service Lad Balancing envirnment, all f the Cntrl services will perate cperatively and are regarded as ne Cntrl service fr the end users; s issues may ccur when invlving the lcal files and lcal machine s memry status. Therefre, it is recmmended cnfiguring a UNC path as the Jb Reprt Path befre running any jb. Cmpliance Guardian Installatin and Administratin User Guide 395

396 Appendix I: Cmpliance Guardian Cntrl Service Disaster Recvery Refer t the fllwing sectins fr details abut Cmpliance Guardian Cntrl Service disaster recvery. Preparatins and Cnfiguratin The fllwing sectins prvide a slutin fr the Cmpliance Guardian Manager Cntrl service disaster recvery. Prerequisite Prepare a prductin (PROD) envirnment and a disaster recvery (DR) envirnment fr simulating the Cntrl service disaster recvery prcess in yur testing envirnment. Make sure a DNS Alias Recrd fr the machine where the Cmpliance Guardian Manager Cntrl Service n the PROD is installed has been created n yur DNS server. SQL Express is unsupprted fr the Cmpliance Guardian Manager Cntrl Service disaster recvery. Cmpliance Guardian Installatin Install the Cmpliance Guardian platfrm using SQL databases n bth PROD and DR envirnments respectively: Install Cmpliance Guardian Manager Cntrl Services fr bth PROD and DR envirnments. Make sure the name f Cmpliance Guardian Manager Databases f the PROD and DR envirnments are the same. Cntrl Database name: CmplianceGuardian_CntrlDB *Nte: The Cmpliance Guardian Cntrl database must have the same passphrase in PROD and DR envirnments. Create the Cmpliance Reprt Database f the PROD envirnment. Reprt Database name: CmplianceGuardian_ReprtDB Install Cmpliance Guardian Agents n bth PROD and DR envirnments and have all f them cnnected t the Cmpliance Guardian Manager Cntrl service where installed n PROD. 396 Cmpliance Guardian Installatin and Administratin User Guide

397 Figure 89: Cmpliance Guardian Agent Cnfiguratin. *Nte: Make sure all f the Cmpliance Guardian Agents are cnnected t the same DNS Alias recrd fr the machine where Cmpliance Guardian Manager Cntrl Service n the PROD is installed. Synchrnizing Databases frm PROD Envirnment t DR Envirnment Refer t the fllwing sectins fr details abut synchrnizing databases frm the PROD envirnment t the DR envirnment. Deleting the Specified Databases frm the SQL Instance at the DR Side In rder t set up SQL mirrring r lg shipping, the empty database f the DR envirnment needs t be deleted first. Stp the Cmpliance Guardian Manager Cntrl Service at the DR side and delete the fllwing database: Cntrl Database: CmplianceGuardian_CntrlDB *Nte: This step is preparing fr synchrnizing the prductin Cmpliance Guardian Manager databases t the SQL instance f the DR side. Setting Up Database Synchrnizatin PROD SQL Instance DR SQL Instance CmplianceGuardian_CntrlDB CmplianceGuardian_CntrlDB CmplianceGuardian_ReprtDB CmplianceGuardian_ReprtDB There are three ways t d database synchrnizatin: Database SQL Lg Shipping, SQL Mirrring, and Availability Grup (if SQL 2012). *Nte: Change the Recvery Mde f the Cmpliance Guardian databases t full befre setting up the Synchrnizatin. Simulating the Disaster Recvery Prcess T simulate the disaster recvery prcess, cmplete the fllwing steps: Shut dwn the PROD envirnment (fr testing purpses). Start up the database n DR envirnment. Start the Cmpliance Guardian Manager Cntrl Service at the DR side. Start all f the Cmpliance Guardian Manager Cntrl Services within the DR envirnment. Make sure Cmpliance Guardian Installatin and Administratin User Guide 397

398 all f the Cmpliance Guardian Manager Cntrl Services are started befre prceeding t the next step. Switch t the DR Cmpliance Guardian Manager Cntrl Service in DNS Alias Recrd. G t the DNS server and change the IP address f the DNS alias recrd. Mdify the IP address t the ne f the machine where the Cmpliance Guardian Manager Cntrl Service is installed n DR envirnment. 398 Cmpliance Guardian Installatin and Administratin User Guide

399 Appendix J: Limitatins f Scanning Oracle Database and SQL Server Prerequisite and Limitatin f Scanning Oracle Database Cmpliance Guardian supprts scanning Oracle Database. Befre yu can begin a scan in Oracle yu have t cmplete the prerequisites. There are sme limitatin t this feature. Prerequisite Befre yu run an Oracle Database scan make sure the.net framewrk versin 4.0 r abve is installed and ODF.NET Prvider is installed. Installing ODP.NET Prvider Refer t the fllwing steps t install ODP.NET Prvider: *Nte: Yu must have the lcal administratr permissin fr installing ODP.NET Prvider. Open the hyperlink If yur cmputer is 32-bit, select 32-bit ODAC Xcpy Dwnlads; if yur cmputer is 64-bit, select 64-bit ODAC Dwnlads in the pened webpage. Figure 90: Oracle Data Access Cmpnents (ODAC) fr Windws Dwnlads interface. The Dwnlads interface appears after yu select 32-bit ODAC Xcpy Dwnlads r 64-bit ODAC Dwnlads. Select ODP.NET_MangedSerialNumber.zip t dwnlad. Cmpliance Guardian Installatin and Administratin User Guide 399

400 Figure 91: 32-bit Oracle Data Access Cmpnents (ODAC) Dwnlads interface. Figure 92: 64-bit Oracle Data Access Cmpnents (ODAC) Dwnlads interface. After dwnlad the Zip file, unzip it t a specified lcatin, fr example: C:\ODP.NET_Managed Open the unzipped flder ODP.NET_ManagedSerialNumber\dp.net\managed\64 r ODP.NET_Managedxxx\dp.net\managed\32, and then find cnfigure.bat. Right-click cnfigure.bat, and select Run as administratr t install ODP.NET Prvider. 400 Cmpliance Guardian Installatin and Administratin User Guide

401 Figure 93: Finding cnfigure.bat. Limitatin f Scanning Oracle Database There are sme limitatins fr scanning Oracle database: The table must include primary key r index t be scanned in Cmpliance Guardian. A table that des include a primary key r index will nt be scanned. Functin-based Indexes are nt supprted. The field in the bject type cannt be defined as index. If yu want t perfrm the incremental scan jb, Change Data Capture must be enabled. Fr details abut hw t enable Change Data Capture and the related perfrmance details, refer t Nte that Oracle 9i nly supprts Synchrnus Change Data Capture. The captured clumns must include a cmplete unique index list, r include the primary key clumns. Befre enabling Change Data Capture, make sure the time zne f the database is same as the hst where the database service resides. When enabling Change Data Capture, pass the parameter "timestamp=>'y'" t DBMS_CDC_PUBLISH.CREATE_CHANGE_TABLE t generate the timestamp clumn. After enabling Change Data Capture, if yu use a user (fr example, user1) t cnnect t the Oracle database, but the Change Data Capture publisher is anther user (fr example, user2), yu must run the fllwing cmmand t grant the user1 the SELECT permissin t the captured table, r the result f querying the table will nt return: GRANT SELECT ON publisher user name. captured table name t the user used t cnnect t the Oracle database. Fr example: GRANT SELECT ON "user2". table1 t user2. Cmpliance Guardian Installatin and Administratin User Guide 401

402 Limitatin f Scanning SQL Server There are sme limitatin when scanning SQL server in Cmpliance Guardian. The table must include primary key r unique index t be scanned in Cmpliance Guardian. The clumn whse type is CLR is nt supprted. If the table cntains multiple unique indexes and als cntains the primary key, the key has the pririty t be picked up t identify the table rw; if the table des nt have key, Cmpliance Guardian will select the index whse size is the smallest ne t identify the table rw. If yu want t perfrm the incremental scan jb, Change Data Capture must be enabled. Fr details abut hw t enable Change Data Capture, refer t fr details abut the perfrmance details after enabling Change Data Capture, refer t fr details abut the increase f the disk space, refer t the Remarks sectin in The captured clumns must include a cmplete unique index list, r include the primary key clumns. Yu must adjust the schedule f Change Data Capture cleanup jb and adjust the Cmpliance Guardian incremental jb schedule. Fr details abut the Change Data Capture cleanup jb schedule, refer t If yu have enabled multiple Change Data Capture instances (nly tw Change Data Capture instances can be enabled n ne table at mst) n a table, Cmpliance Guardian first selects the Change Data Capture instance that cntains the clumns f the unique index (whse size is the smallest) t scan cntent; if bth f the Change Data Capture instances cntain the clumns f the unique index, the instance that captured mre clumns will be used. SQL Server 2005 des nt supprt Change Data Capture. The incremental scan jb will fail if Cmpliance Guardian scans SQL Server 2005 database. 402 Cmpliance Guardian Installatin and Administratin User Guide

403 Appendix K: Custmizing the Interval f Retrieving Scial Reprt Data Cmpliance Guardian retrieves scial reprt data frm the reprt database and updates the scial reprt every hur. Yu can custmize the interval by mdifying the related cnfiguratin file. Cmplete the fllwing steps t mdify the interval: G t the machines with Cmpliance Guardian Manager installed. Open the \Cmpliance Guardian\Manager\Cntrl\Cnfig\CastleCnfigs directry t find the CntrlActinReprtsCastle.cnfig file. Open the CntrlActinReprtsCastle.cnfig file with Ntepad. Lcate the Interval nde. The value f Interval is 3600 secnds. Yu can mdify t meet yur requirement. The unit is secnds. Save the file. Cmpliance Guardian Installatin and Administratin User Guide 403

404 Appendix L: Using the Discvery Functin Cmpliance Guardian supprts a discvery functin t achieve the fllwing requirements: There are tw methds: Discver the number f files and items in the SharePint scpes (site cllectin, site r list). Calculate the number f file types and the number f files in each file type. Discver the number f files scanned by the Cmpliance Guardian engine, and the number f files scanned by ifilter. Calculate the ttal size f files and items in each SharePint scpe (site cllectin, site r list). Calculate the size f files in each file type. Using the EXE File Using the BAT File Using the EXE File G t the machines with Cmpliance Guardian Agent installed and pen the \Cmpliance Guardian\Agent\Bin directry t find the CCS.Tlkit.v2.exe r CCS.Tlkit.v4.exe file. In the SharePint 2007 r SharePint 2010 envirnment, select CCS.Tlkit.v2.exe; in the SharePint 2013 envirnment, select CCS.Tlkit.v4.exe. Select Run as administratr. The cmmand line interface appears. Enter spd t select the Discvery SharePint functin. Enter the jb mde. 1 Enter 1 and then enter the URL f the site cllectin, site r list that will be discvered. Then, enter the scpe level. 2 Enter 2 and then enter a path f a CSV file cntaining the URLs that will be discvered. Yu can discvery multiple site cllectins, sites r lists by entering 2. Fr details n cnfiguring the CSV file, refer t Cnfiguring the CSV File. Figure 94: Enter the jb mde. 404 Cmpliance Guardian Installatin and Administratin User Guide