Cmpliance Guardian 4 User Guide Issued September 2015
Table f Cntents What's New in this Guide... 3 Abut Cmpliance Guardian... 4 Cmplementary Prducts... 5 Submitting Dcumentatin Feedback t AvePint... 6 Using Incident Management Center... 7 Launching Mdules in Incident Management Center... 7 Test Suite and Check Overview... 8 Using Access Plicy... 8 Managing Access Plicy... 9 Creating and Editing Access Plicies... 9 Managing Scpe Mapping Prfiles... 10 Creating and Editing Scpe Mapping Prfiles... 10 Managing My Tasks... 16 Reslving Incidents... 16 Dismissing Incidents... 22 Escalating Incidents... 23 Exprting t Datasheet... 23 Viewing and Managing All Scan Recrds... 23 Managing Files Under the Test Suite Tab... 24 Managing Files Under the Actins Taken Tab... 24 Dispsing Files... 28 Using Incident Manager... 34 Viewing Reprts in Reprt Center... 34 Viewing Scan Reprts in Dashbard... 35 Viewing Heatmap... 38 Viewing Trend Reprt... 39 Viewing and Managing Feedbacks... 39 Exprt Requests... 39 Ntices and Cpyright Infrmatin... 42 2 Cmpliance Guardian User Guide
What's New in this Guide Added Incident Management Center. Using Incident Management Center the user can view scan recrds, reprts, and track r perfrm actins t thse files that are cnsidered t be tracked after a scan. Cmpliance Guardian User Guide 3
Abut Cmpliance Guardian Cmpliance Guardian is designed t ensure that infrmatin is available and accessible t the peple wh shuld have it and prtected frm the peple wh shuld nt. Cmpliance Guardian helps Chief Privacy Officers, Chief Infrmatin Security Officers, Cmpliance Managers, Recrds Managers, SharePint Administratrs, and Cmpany Executives practively prtect their IT envirnments frm harmful infrmatin leaks, cntaminatin, r misuse while simultaneusly ensuring that all activities and cntent residing in their envirnments are cmpliant, accessible, and manageable. Cmpliance Guardian is designed t empwer rganizatins t cmply with regulatry, statutry, r rganizatin specific requirements t manage and versee access t sensitive data. Cmpliance Guardian wrks with AvePint's extended Cmpliance Slutins t prvide a "heat map" that prvides additinal actinable cntext abut the dcument including: hw ld is the dcument, wh authred it, hw many times has it been accessed, wh can access it, wh has accessed it, and what have they dne with it. In this way, rganizatins can take specific steps t prtect and mitigate their risk. By identifying, classifying, and taking actin n cmpliance risks, and presenting this infrmatin in easily digestible frmats fr varius stakehlders, rganizatins can mre effectively build and maintain a cmpliant framewrk. 4 Cmpliance Guardian User Guide
Cmplementary Prducts Many prducts and prduct suites n the Cmpliance Guardian platfrm wrk in cnjunctin with ne anther. The DcAve Auditr Reprts are recmmended fr use with Cmpliance Guardian. Auditr Reprts are available in DcAve 6 Reprt Center under Cmpliance Reprts. Cmpliance Guardian User Guide 5
Submitting Dcumentatin Feedback t AvePint AvePint encurages custmers t prvide feedback regarding ur prduct dcumentatin. Yu can Submit Yur Feedback n ur website. 6 Cmpliance Guardian User Guide
Using Incident Management Center Incident Manager Center allws the user t view scan recrds, reprts, and track r perfrm actins t files that the user selected t be tracked after a scan. Yu can cnfigure permissins fr users t limit which features r actins a user can access and use in the Incident Manager Center. There are the fllwing mdules in Incident Management Center: My Tasks Refer t Managing My Tasks. All Scan Recrds Refer t Viewing and Managing All Scan Recrds. Incident Manager Refer t Using Incident Manager. Reprt Center Refer t Viewing Reprts in Reprt Center. Access Plicy Refer t Using Access Plicy. Feedback Center Refer t Using Feedback. Exprt Requests Refer t Exprt Requests. Launching Mdules in Incident Management Center T launch the Incident Manager Center mdules, cmplete the fllwing steps: 1. Lg int Cmpliance Guardian. Select the mdules in the Incident Management Center. 2. If yu are already in the sftware, select Incident Manager Center frm the tp navigatin. The Hme interface fr Incident Management Center appears. There are three parts in the Hme interface: My Tasks Displays the mst recent tasks that have been assigned t yu. Select View All t view all tasks. Heatmap Includes Test Suite Heatmap and Platfrm Heatmap. Select the link t g int each heatmap interface. Trend Reprt Includes Check Trend Reprt and Test Suite Trend Reprt. Select the link t g int each reprt. Dashbard Select G t Dashbard t g int the Dashbard t view each type f reprt. 3. Yu can als select the mdules frm the appeared navigatin n the tp f the screen t launch each mdule. Cmpliance Guardian User Guide 7
Figure 1: Incident Management Center Start interface. Test Suite and Check Overview A check is an XML file that defines the lgic that Cmpliance Guardian uses t check files. Checks identify the purpse fr the check (the type f check t run, such as a pattern f characters), the cnditin fr the check (such as a scial security number pattern), and the pssible result f the check (true r false). Users can change the values in the checks t determine the check cnditins, but the elements specific frmat defined by Cmpliance Guardian in the checks must stay the same. A test suite is a lgical gruping f test definitin files, r a set f checks, that define hw t present the scanned data. Test suites allw yu t build scan plans fr yur specific regulatins and requirements. These cllectins are the basis f Cmpliance Guardian scans. A test suite cntains ne r mre checks and a cnfiguratin file that is used t define hw t cmbine these checks and set risk levels fr scan results. Using Access Plicy Access Plicy allws yu t give specific permissins t users t use functins in Incident Management Center. Yu must first create scpe mapping prfiles t define the mappings between data surces and the users wh have access t these data surces. 8 Cmpliance Guardian User Guide
Managing Access Plicy In the Access Plicy interface, yu will see a list f previusly cnfigured access plicies. In the Access Plicy interface, yu can create a new access plicy, view details abut an access plicy, edit a previusly cnfigured access plicy, r delete a previusly cnfigured access plicy. Fr mre infrmatin abut creating r editing an access plicy, refer t Creating and Editing Access Plicies. Select Edit t change the cnfiguratins fr the selected access plicy. Fr mre infrmatin abut editing cnfiguratins fr the access plicy, refer t Creating and Editing Access Plicies. T view an access plicy, select it frm the list f previusly cnfigured plicies, and then select View Details. T delete an access plicy, select it frm the list f previusly cnfigured access plicies, and then select Delete. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected access plicy, r select Cancel t return withut deleting it. Creating and Editing Access Plicies Refer t the fllwing steps t create r edit an access plicy: 1. Select Create n the Access Plicy interface. If yu edit an access plicy, select the access plicy, and then select Edit. 2. The Create Access Plicy r Edit Access Plicy interface appears. 3. In the General Settings step, select ne r mre scpe mappings frm the scpe mapping prfiles table. Yu can enter a keywrd in the search bx and then select the search ( ) buttn t search fr the desired mapping prfiles. Yu can select the link in the message Please create a new scpe mapping prfile belw the table t create a new scpe mapping. Fr mre infrmatin n creating a scpe mapping prfile, refer t Creating and Editing Scpe Mapping Prfiles. Select Refresh t refresh the scpe mapping table. Select Next. 4. In the Access Rule step, select if yu want t cnfigure cnditins t limit access. Use this settings t limit users t manage nly specific actins r files that match specific regulatins and test suites. Only files that match these cnditins fund in the scpe mapping prfiles will be shwn t the users. If yu d nt want t cnfigure cnditins, select N, allw users t prcess all incidents in the scpe mapping prfile. Select Yes, limit access t the fllwing cnditins t cnfigure the fllwing cnditins: Have been affected by actins Select this ptin in Step 1, Have been affected by Actins appears in Step 2. Select the Actins link, all f the actins are displayed in the windw. Select the actins and then select OK. The files that have been affected by the selected actins will be shwn. Scanned by Test Suites Select this ptin in Step 1, scanned by Test Suites appears in Step 2. Select the Test Suites link, all f test suites are displayed in the windw. Select Cmpliance Guardian User Guide 9
Select Next. the test suites and then select OK. The files that are scanned by the selected test suites will be shwn t the users. 5. In the Permissin Rule step, grant access t specific functins by selecting the ptins in View and Manage tab. Select/deselect the checkbx f the each field title t select/deselect all f the functins in the field under the View and Manage tab. 6. Select Finish t finish the creatin. A pp-up windw appears. Enter the access plicy name and an ptinal descriptin. Then, select OK. At any step, select Back t return t the previus step; select Cancel t exit the interface and return t the access plicy interface withut any changes. Managing Scpe Mapping Prfiles Select Scpe Mapping Prfile n the Access Plicy interface t access the Scpe Mapping Prfile interface. Yu will see a list f cnfigured scpe mapping prfiles. In the Scpe Mapping Prfile interface, yu can create a new scpe mapping prfile, view details abut a scpe mapping prfile, edit a previusly cnfigured scpe mapping prfile, exprt a scpe mapping prfile infrmatin t a CSV file, r delete a previusly cnfigured scpe mapping prfile. Fr mre infrmatin abut creating r editing a scpe mapping prfile, refer t Creating and Editing Scpe Mapping Prfiles. Select Edit t change the cnfiguratins fr the selected scpe mapping prfile. Fr mre infrmatin abut editing cnfiguratins fr the scpe mapping prfile, refer t Creating and Editing Scpe Mapping Prfiles. T view a scpe mapping prfile, select it frm the list f previusly cnfigured prfiles, and then select View Details. T delete a scpe mapping prfile, select it frm the list f previusly cnfigured prfiles, and then select Delete. A cnfirmatin windw will pp up and ask if yu are sure yu want t prceed with the deletin. Select OK t delete the selected authenticatin prfile, r select Cancel t return withut deleting it. T exprt the scpe mapping prfile infrmatin t a CSV, select ne r mre scpe mapping prfiles, and then select Exprt. Select Sync t synchrnize the data in each scpe mapping prfiles, the data in each scpe mapping prfile will be updated t be the latest. Creating and Editing Scpe Mapping Prfiles Refer t the fllwing steps t create r edit a scpe mapping prfile: 10 Cmpliance Guardian User Guide
1. Select Create n the Scpe Mapping Prfile interface. If yu edit a scpe mapping prfile, select the prfile, and then select Edit. 2. The Create Scpe Mapping Prfile r Edit Scpe Mapping Prfile interface appears. 3. In the General Settings step, select hw t create the mapping prfile: Creating a mapping using the user interface Select this ptin t cnfigure the mapping settings in the Cmpliance Guardian interface. Yu must cnfigure the fllwing setting in this step and the settings in the next Mapping Settings step: Which data surce d yu want t include in this prfile Select the data surce that the users in this scpe mapping prfile has access. Imprting a pre-cnfigured scpe mapping frm yur rganizatin Select this ptin t uplad a pre-cnfigured scpe mapping file. Select Uplad and then select the desired file. Yu can select Dwnlad an example template t dwnlad a template. Then, edit the template file and uplad it back t the General Settings step. If yu cnfigure scpe mapping settings thrugh the file, yu are nt required t g t the next step, yu can select Finish t finish the prfile creatin directly. If yu chse t use the user interface t cnfigure scpe mapping settings, select Next. 4. In the Mapping Settings step, cnfigure the mapping settings. Fr mre infrmatin n cnfiguring the mapping settings, refer t Cnfiguring Mapping Settings. 5. Select Finish t finish the plan creatin. A windw appears. Enter the name f prfile and an ptinal descriptin in the windw. Then, select OK. At any step, select Back t return t the previus step, and select Cancel t cancel the creatin. Cnfiguring Mapping Settings Refer t the fllwing sectins fr cnfiguring mapping settings fr different data surces selected in the General step. Selecting SharePint r SharePint Online as the Data Surce If yu select SharePint r SharePint Online as the data surce: 1. Cnfigure settings in Step 1 t define the scpe f data: Simple Search Mde Enter a URL in the text bx, and press Enter n yur keybard r select Search t test if the entered URL is valid. If the URL is valid, it will be displayed under the text bx. Select the URL, and then the URL will be added int the text bx. Yu can add multiple URLs. Select the delete ( ) buttn t delete a scpe URL. If yu d nt want t enter the URL, yu can select Search directly. The SharePint farms r SharePint Online Registered Sites nde are displayed. Expand the tree and then select the scpe nde. Then, select Add. The selected scpe URL is displayed n the text bx abve Search. Cmpliance Guardian User Guide 11
Advanced Search Mde Select a farm under Search fr lcatins that match the fllwing cnditins. Then, cnfigure cnditins t define the scpe. Select Site Cllectin Cnfigure cnditin rules t filter the site cllectins as the data surce scpe. After yu select this ptin, yu can select the rule t define which site cllectin prperty will be used fr the filter. Then, select a cnditin. Enter a value in the text field after the cnditin. Select Add a Cnditin t add anther filter cnditin rule. Select the delete ( ) buttn t delete a cnditin rule. The site cllectins that match the cnditin rules will be used as the data surce scpe. Select Site Cnfigure cnditin rules t filter sites as the data surce scpe. Yu can use the fllwing tw methds t find the desired sites as the data surce scpe: Yu can select In site cllectins that match the fllwing criteria t find the desired site cllectins first, and then select Where t find sites in these fund site cllectins. Yu can select Where t find sites directly. Yu can als use Simple Search Mde and Advanced Search Mde tgether. The scpes specified in the Simple Search Mde and Advanced Search Mde will all be used as the data surce scpes in which the data can be managed by the users cnfigured belw. 2. Cnfigure settings in Step 2 t define the mapped users r grups t manage the lcatins defined in Step 1: Simple Search Mde Select dmains/lcal System where yu want t find the users r grups frm the Find users and grups in drp-dwn list. Select the Lcal System r the AD dmains. Enter user r grup name in the text bx, and press Enter n yur keybard r select Search t test if the entered user r grup is valid. Yu can add multiple users r grups. If yu d nt want t enter the user r grup name, yu can select Search directly. A search bx appears. Enter a keywrd and then select Search beside the search bx t search fr the desired users r grups. All f the searched ut users r grups are displayed in the table, and yu can view the infrmatin f Jb Title, Department, and Dmain where the users r grups belng. Select the user r grup checkbxes and then select Add t add the users r grups int the text bx. Yu can select the delete ( ) buttn t delete a user r grup. Advanced Search Mde Select dmains/sharepint/lcal System where yu want t find the users r grups frm the Search fr users and grups that match the fllwing cnditins drp-dwn list. Select the Lcal System, SharePint, r the AD dmains. Then, select Add t add cnditins fr finding users r grups in the selected dmains/sharepint/lcal System. Fr finding grups frm SharePint (can nly find grups frm the data surce scpe fund in Step 1), yu can use the grup Name, Permissin r Custm Prperty as the rule, select a cnditin, and then enter a value; Fr finding users r grups frm lcal system r dmains, yu can use the grup name 12 Cmpliance Guardian User Guide
r user prperty as the rule, select a cnditin, and then enter a value. Select Add a Cnditin t add anther cnditin; Select the delete ( rule. ) buttn t delete a cnditin *Nte: The users r grups fund thrugh dmains and lcal system can manage all data f scpes fund by Simple Search Mde and Advanced Search Mde. The grups fund in SharePint can nly manage the site cllectins t which the grups belng. Fr example, there are tw site cllectins S1 and S2 are fund, and there are tw grups G1 and G2 are fund frm SharePint. G1 exists in the site cllectin S1, and G2 exists in the site cllectin S2. In this case, the users in G1 can nly manage data frm site cllectins S1 in Cmpliance Guardian, and the users in G2 can nly manage data frm site cllectins S2 in Cmpliance Guardian. Select Add Anther Mapping t add anther mapping. Selecting File System as the Data Surce If yu select File System as the data surce: 1. Cnfigure settings in Step 1 t define the scpe f data: Enter a file system flder path URL in the text bx, and press Enter n yur keybard r select Search t test if the entered URL is valid. If the URL is valid, it will be displayed under the text bx. Select the URL, and then the URL will be added int the text bx. Yu can add multiple URLs. Select the delete ( ) buttn t delete a scpe URL. If yu d nt want t enter the URL, yu can select Search directly. The file system cnnectins are displayed. Select file system cnnectins r expand the cnnectin and then select the flder ndes. Then, select Add. The selected scpe URL is displayed n the text bx abve Search. 2. Cnfigure settings in Step 2 t define the mapped users r grups t manage the lcatins defined in Step 1: Simple Search Mde Select dmains/lcal System where yu want t find the users r grups frm the Find users and grups in drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin. Advanced Search Mde Select dmains /Lcal System where yu want t find the users r grups frm the Search fr users and grups that match the fllwing cnditins drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin abve. Selecting Website as the Data Surce If yu select Website as the data surce: 1. Cnfigure settings in Step 1 t define the scpe f data: Cmpliance Guardian User Guide 13
Enter a website URL in the text bx, and press Enter n yur keybard r select Search t test if the entered URL is valid. If the URL is valid, it will be displayed under the text bx. Select the URL, and then the URL will be added int the text bx. Yu can add multiple URLs. Select the delete ( ) buttn t delete a scpe URL. If yu d nt want t enter the URL, yu can select Search directly. The website URLs that are specified in the website scanner plans are displayed. Select the URL. Then, select Add. The selected scpe URL is displayed n the text bx abve Search. 2. Cnfigure settings in Step 2 t define the mapped users r grups t manage the lcatins defined in Step 1: Simple Search Mde Select dmains/lcal System where yu want t find the users r grups frm the Find users and grups in drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin. Advanced Search Mde Select dmains /Lcal System where yu want t find the users r grups frm the Search fr users and grups that match the fllwing cnditins drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin abve. Selecting Yammer as the Data Surce If yu select Yammer as the data surce: 1. Cnfigure settings in Step 1 t define the scpe f data: Enter a Yammer cnnectin name in the text bx, and press Enter n yur keybard r select Search t test if the entered name is valid. If the cnnectin name is valid, it will be displayed under the text bx. Select the name, and then the name will be added int the text bx. Yu can add multiple cnnectin names. Select the delete ( ) buttn t delete a name. If yu d nt want t enter the name, yu can select Search directly. The Yammer cnnectins are displayed. Select the cnnectin, and select Add. The selected Yammer cnnectin is displayed n the text bx abve Search. 2. Cnfigure settings in Step 2 t define the mapped users r grups t manage the lcatins defined in Step 1: Simple Search Mde Select dmains/lcal System where yu want t find the users r grups frm the Find users and grups in drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin. Advanced Search Mde Select dmains /Lcal System where yu want t find the users r grups frm the Search fr users and grups that match the fllwing cnditins drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin abve. 14 Cmpliance Guardian User Guide
Selecting Lync as the Data Surce If yu select Lync as the data surce: 1. Cnfigure settings in Step 1 t define the scpe f data: Enter a Lync server name in the text bx, and press Enter n yur keybard r select Search t test if the entered name is valid. If the name is valid, it will be displayed under the text bx. Select the name, and then the name will be added int the text bx. Yu can add multiple Lync server names. Select the delete ( ) buttn t delete a name. If yu d nt want t enter the name, yu can select Search directly. The Lync servers are displayed. Select a Lync server, and select Add. The selected Lync server name is displayed n the text bx abve Search. 2. Cnfigure settings in Step 2 t define the mapped users r grups t manage the lcatins defined in Step 1: Simple Search Mde Select dmains/lcal System where yu want t find the users r grups frm the Find users and grups in drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin. Advanced Search Mde Select dmains /Lcal System where yu want t find the users r grups frm the Search fr users and grups that match the fllwing cnditins drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin abve. Selecting Database as the Data Surce If yu select Database as the data surce: 1. Cnfigure settings in Step 1 t define the scpe f data: Enter a database cnnectin name in the text bx, and press Enter n yur keybard r select Search t test if the entered name is valid. If the name is valid, it will be displayed under the text bx. Select the name, and then the name will be added int the text bx. Yu can add multiple database cnnectins. Select the delete ( ) buttn t delete a cnnectin name. If yu d nt want t enter the database cnnectin name, yu can select Search directly. The database cnnectins are displayed. Select the cnnectin then, select Add. The selected database cnnectin is displayed n the text bx abve Search. 2. Cnfigure settings in Step 2 t define the mapped users r grups t manage the lcatins defined in Step 1: Simple Search Mde Select dmains/lcal System where yu want t find the users r grups frm the Find users and grups in drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin. Cmpliance Guardian User Guide 15
Advanced Search Mde Select dmains /Lcal System where yu want t find the users r grups frm the Search fr users and grups that match the fllwing cnditins drp-dwn list. Fr detailed infrmatin, refer t the infrmatin intrduced in Selecting SharePint r SharePint Online as the Data Surce sectin abve. Managing My Tasks My Tasks displays all f the incidents that are assigned t yu. Yu can track and perfrm actins t these incidents. In the My Tasks interface, yu can see a brief list displaying the incidents that are assigned t yu in the left pane; yu can see the list displaying the incidents that are escalated t yu in the right pane. Select Shw All t view the detailed list. All f the incidents will be displayed in a table. Select the file name in the Name clumn t view the file s detailed scan infrmatin. Fr mre infrmatin n the file infrmatin, refer t Viewing Infrmatin. *Nte: If yu select a name t view the detailed scan infrmatin here, yu can edit the prperties if the selected SharePint file r item is the latest versin. Reslving Incidents If a file needs t be reslved, select the file, and then select Reslve. The Reslve windw appears, and then cnfigure crrespnding settings in the windw. Refer t the fllwing sectins. Reslving Files Affected by the Encrypt Actin Cnfiguring the fllwing settings in the Reslve windw t reslve a file affected by the Encrypt actin: Reslutin Select a reslutin: Replace and Decrypt Select this ptin t uplad a file (the uplad file is nt an encrypted file) whse name must be same as the encrypted ne. The riginal encrypted file will be replaced with the upladed file. Select Brwse and then select a file t uplad. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. If yu select this ptin, yu can cnfigure the Advanced setting. Select Advanced: Cnflict Reslutin Select hw t deal with the cnflict that the destinatin already exists a file whse name is same as the uplad ne. 16 Cmpliance Guardian User Guide
Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Delete Delete the encrypted file directly. Cmment Add a cmment. Send feedback Select this ptin t send a feedback abut the incident. Then cmplete the fllwing settings: Subject Enter a subject abut the feedback. Pririty Select a pririty fr the feedback. Bdy Enter the detailed infrmatin abut yur feedback. Attachment Enter an attachment abut yur feedback. All f the feedback recrds can be viewed and managed in Feedback Center. Fr details, refer t Viewing and Managing Feedbacks. Select Reslve in the windw, r select Cancel t cancel the changes. Reslving Files Affected by the Quarantine (Still in SharePint) Actin Cnfiguring the fllwing settings in the Reslve windw t reslve a file affected by the Quarantine (still in SharePint) actin: Reslutin Select a reslutin: Replace and Restre Select this ptin t uplad a file whse name must be same as the quarantined ne. Select Brwse and then select a file t uplad. The upladed file will be restred t SharePint and replaced the riginal ne. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. If yu select this ptin, yu can cnfigure the advanced setting. Select Advanced: Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Delete Delete the quarantined file directly. Cmment Add a cmment. Cmpliance Guardian User Guide 17
Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Reslving Files Affected by the Quarantine (Quarantined t Exprt Lcatin) Actin Cnfiguring the fllwing settings in the Reslve windw t reslve a file affected by the Quarantine (quarantined t an exprt lcatin) actin: Reslutin Select a reslutin: Replace and Restre Select this ptin t uplad a file whse name must be same as the quarantined ne. Select Brwse and then select a file t uplad. The upladed file will be restred. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. If this ptin is selected, the Restre Type ptin appears. In Place Select this ptin t restre the upladed file t the riginal place f the quarantined file. Out f Place Select this ptin t restre the upladed file t anther lcatin. The farms are displayed. Expand the farm and select a desired destinatin nde n the tree. Restre t Anther Lcatin Select this ptin t restre the quarantined file. Then, expand the farm and select a desired destinatin nde n the tree. Delete Delete the quarantined file directly. Advanced If Replace and Restre r Restre t Anther Lcatin is selected, yu can cnfigure the advanced settings. Select Advanced: Cnflict Reslutin Select hw t deal with the cnflict that the destinatin already exists a file whse name is same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Reslving Files Affected by the Redact Actin Cnfiguring the fllwing settings in the Reslve windw t reslve a file affected by the Redact actin: 18 Cmpliance Guardian User Guide
Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Reslving Files Affected by the Quarantine Befre Redact Actin Cnfiguring the fllwing settings in the Reslve windw t reslve a file affected by the Quarantine Befre Redact actin: Reslutin Select a reslutin: Replace and Restre Select this ptin t uplad a file whse name must be same as the quarantined ne. Select Brwse and then select a file t uplad. The upladed file will be restred. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. If this ptin is selected, the Restre Type ptin appears. In Place Select this ptin t restre the upladed file t the riginal place f the quarantined file. Out f Place Select this ptin t restre the upladed file t anther lcatin. The farms are displayed. Expand the farm and select a desired destinatin nde n the tree. Restre t Anther Lcatin Select this ptin t restre the quarantined file t a desired lcatin. Then, expand the farm and select a desired destinatin nde n the tree. Delete Delete the quarantined file directly. Advanced If Replace and Restre r Restre t Anther Lcatin is selected, yu can cnfigure the advanced settings. Select Advanced: Cnflict Reslutin Select hw t deal with the cnflict that the destinatin already exists a file whse name is same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Cmpliance Guardian User Guide 19
Reslving Files Affected by the Mve Actin Cnfiguring the settings in the Reslve windw t reslve a file affected by the Mve actin. Fr details, refer t Reslving Files Affected by the Redact Actin. Reslving Files Affected by the Encrypt and Quarantine (Still in SharePint) Actin Cnfiguring the fllwing settings in the Reslve windw t reslve a file affected by the Encrypt and Quarantine (still in SharePint) actin: Reslutin Select a reslutin: Replace and Decrypt Select this ptin t uplad a file (the uplad file is nt an encrypted file) whse name must be same as the encrypted ne. The riginal encrypted file will be replaced with the upladed file. Select Brwse and then select a file t uplad. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. If yu select this ptin, yu can cnfigure the advanced setting. Select Advanced: Cnflict Reslutin Select hw t deal with the cnflict that the destinatin already exists a file whse name is same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Delete Delete the encrypted file directly. Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Reslving Files Affected by the Encrypt and Quarantine (Quarantined t Exprt Lcatin) Actin Cnfiguring the fllwing settings in the Reslve windw t reslve a file affected by the Encrypt and Quarantine (quarantined t an exprt lcatin) actin: Reslutin Select a reslutin: 20 Cmpliance Guardian User Guide
Replace and Decrypt Select this ptin t uplad a file whse name must be same as the quarantined ne. Select Brwse and then select a file t uplad. The upladed file will be restred. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. If this ptin is selected, the Restre Type ptin appears. In Place Select this ptin t restre the upladed file t the riginal place t replace the riginal encrypted file. Out f Place Select this ptin t restre the upladed file t anther lcatin. The farms are displayed. Expand the farm and select a desired destinatin nde n the tree. Decrypt and Mve t Anther Lcatin Select this ptin t restre the quarantined file t a desired lcatin. Then, expand the farm and select a desired destinatin nde n the tree. Delete Delete the riginal file directly. Advanced If Replace and Restre r Restre t Anther Lcatin is selected, yu can cnfigure the advanced settings. Select Advanced: Cnflict Reslutin Select hw t deal with the cnflict that the destinatin already exists a file whse name is same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Cmment Add a cmment. Send Feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Reslving Files Affected by the Change Permissin Actin Cnfiguring the settings in the Reslve windw t reslve a file affected by the Change Permissin actin. Fr details, refer t Reslving Files Affected by the Redact Actin. Reslving Files Affected by the Delete Actin Cnfiguring the settings in the Reslve windw t reslve a file affected by the Delete actin. Fr details, refer t Reslving Files Affected by the Redact Actin. Cmpliance Guardian User Guide 21
Reslving Files Affected by the Permanently Delete Actin Cnfiguring the settings in the Reslve windw t reslve a file affected by the Permanently Delete actin. Fr details, refer t Reslving Files Affected by the Redact Actin. Reslving Files Affected by the Lck Actin Cnfiguring the settings in the Reslve windw t reslve a file affected by the Lck actin. Fr details, refer t Reslving Files Affected by the Redact Actin. Reslving Files Affected by the Alert Only Actin Cnfiguring the settings in the Reslve windw t reslve a file affected by the Alert Only actin. Fr details, refer t Reslving Files Affected by the Redact Actin. Reslving Files Affected by the Add Tag Actin Cnfiguring the fllwing settings in the Reslve windw t reslve a file affected by the Add Tag actin: Change Tag Select this ptin, then yu can change the tag value t a specified ne. Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Reslving Files Affected by the Blck Actin Cnfiguring the settings in the Reslve windw t reslve a file affected by the Blck actin. Fr details, refer t Reslving Files Affected by the Redact Actin. Reslving Files Only Scanned by Test Suites Cnfiguring the settings in the Reslve windw t reslve a file nly scanned by test suites (nt affected by any actin). Fr details, refer t Reslving Files Affected by the Redact Actin. Dismissing Incidents Select Dismiss t dismiss the actin result f a file. After yu select a file that is affected by the Encrypt actin, Quarantine actin, Quarantine Befre Redact actin, Encrypt and Quarantine actin, a windw appears. Cnfigure the fllwing settings: Advanced Select Advanced and cnfigure the fllwing settings: Cnflict Reslutin Select hw t deal with the cnflict that the destinatin already exists a file whse name is same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. 22 Cmpliance Guardian User Guide
Ignre this file until the rule r file changes ptin appears. Select the ptin, then the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Mark as false psitive Select this ptin t mark the incident, which means that yu d nt think the file has any cmpliance vilatin. Cmment Add a cmment. Send feedback Fr details, refer t the instructin in Reslving Files Affected by the Encrypt Actin. Select Dismiss in the windw t dismiss the file, r select Cancel t cancel any changes. The changes t the file (quarantined r encrypted) will be dismissed and the files will be restred r decrypted t be the riginal ne. Escalating Incidents If yu want ther user t track and research the incidents, select an incident, and then select Escalate. A windw appears. Enter a user r grup, and then put the cursr n ther place f the windw. If the user r grup exists, it will be listed, select the user r grup t add it. Yu can enter multiple users r grups. Select the delete ( ) buttn t delete a user r grup. Select Send an e-mail t assignee with the fllwing cmment, and then enter a cmment. The assignee will receive the crrespnding e-mail. Select OK t save the settings in the windw, r select Cancel t cancel changes. Exprting t Datasheet Select Exprt t Datasheet, enter a request name, and then select OK and the detailed infrmatin displayed n this page will be exprted t a CSV file fr further use. Viewing and Managing All Scan Recrds All f the scanned recrds are displayed in All Scan Recrds. Yu can view the last updated time and the next update time at the upper-right crner f the screen. Yu can view the general infrmatin in the table. There are tw tabs in the All Scan Recrds interface. Test Suite The files that are scanned by test suites are displayed under this tab. Yu can select a file, and then select Start Incident Investigatin t start an incident if the file is required t be tracked and reviewed in the future. A windw appears. Enter a user r grup, and then put the cursr n ther place. If the user r grup exists, it will Cmpliance Guardian User Guide 23
be listed, select the user r grup t add it. Yu can enter multiple users r grups. Select the delete ( ) buttn t delete a user r grup. Select Exprt t Datasheet, enter a request name in the appeared windw, and then select OK and the detailed infrmatin displayed n this page will be exprted t a CSV file fr further use. Actins Taken The files that are affected by actins are displayed under this tab. Yu can select a file, and then select Start Incident Investigatin t start an incident if the file is required t be tracked and reviewed in the future. A windw appears. Enter a user r grup, and then put the cursr n ther place. If the user r grup exists, it will be listed, select the user r grup t add it. Yu can enter multiple users r grups. Select the delete ( ) buttn t delete a user r grup. Select Send an e-mail t assignee with the fllwing cmment, and then enter a cmment. The assignee will receive the crrespnding e-mail. Select Dispse t dispse a file. Fr details, refer t Dispsing Files. Select Exprt t Datasheet, enter a request name in the appeared windw, and then select OK and the detailed infrmatin displayed n this page will be exprted t a CSV file fr further use. Managing Files Under the Test Suite Tab Select a file under the Test Suite tab. The details interface appears. Yu can filter the displayed infrmatin in the FILTER BY field by selecting the Start Time, Test Suite, Versin Histry (nly appears when yu select a SharePint item r file), and Object (nly appears when yu select a SharePint item. Yu can select All Objects, r just select the item r its attachment t view details). Then, select Display. Managing Files Under the Actins Taken Tab Select a file under the Actins Taken tab. The details interface appears. Yu can filter the displayed infrmatin in the FILTER BY field by selecting Start Time. Then, select Display. If the file is als affected by test suite, yu can als filter the displayed infrmatin by selecting Test Suite, Versin Histry, Object (nly appears when yu select a SharePint item. Yu can select All Objects, r just select the item r its attachment t view details). Viewing Infrmatin Under the Test Suite tab r Actins Taken tab, yu can view the fllwing infrmatin: Summary Display the summary. Test Suite Display the test suite name used t scan the recrd. 24 Cmpliance Guardian User Guide
Original Lcatin The full URL f the selected recrd. Select the dwnlad ( ) buttn t dwnlad the file. Data Type The scanned data type. Risk Scre The risk scre f the test suite. The field nly appears if yu use the test suite t scan data. A scre f a check = (hw damage f the infrmatin)*(hw many vilatins)*(hw accuracy we are sure n the fund instance) = (severity level)*(the vilatin cunt)*(cnfidence level) A scre f a test suite = The ttal risk scres f all f the checks in the test suite (check 1+ check 2 + check 3 ) A ttal scre f a file = The ttal risk scres f all test suites used t scan the file (test suite 1 + test suite 2 + test suite 3 ) Scan Status The status f this file regarding this specified check. Passed The file beys the selected regulatin (check). Failed The file disbeys the selected regulatin (check). User Review Required The file needs the user t review it t decide its final status. Nt Applicable The file des nt cntain the elements defined in the selected regulatin (check). Nt Tested The specified regulatin (check) is nt checked fr the file. When a regulatin (check) is included in the test suite f the scan plicy used fr scanning this file, but the specified regulatin (check) is nt enabled in the crrespnding test suite, this status will be displayed. Incident ID If the recrd has started an incident, the incident ID will be displayed. Scan Time The time when this file was scanned. Scan Details The tab nly appears if yu use a test suite t scan data. Yu can view the scan details under the tab. The checks r check grups that are used t scan the file are displayed. Yu can change a check s initial scan status if the check status is nt Nt Tested and Nt Applicable. Select the change status ( ) buttn. Cnfigure the fllwing settings after yu select the change status ( ) buttn in the Change Status windw. Cmpliance Guardian User Guide Select a status in the Change status t drp-dwn list. If yu select t change the status t Failed, yu must enter a number in Hw many vilatins have yu fund in this bject field. If yu select t change the status frm Failed, User Review Required, Nt Applicable, r Nt Tested t Passed, the risk scre f this check will be changed t 0. 25
Add an ptinal cmment fr this change. If yu select the Ignre this file until the rule r file changes checkbx, the file will nt be scanned until the scan rule r file is changed. Select OK t save the changes r select Cancel t exit the Change Status windw. If the cntent is scanned by a FilePrperty type check, if the check is nt Passed, the All Vilatins link is displayed under the check. Select the link, the All Vilatins windw appears, yu can view the vilatin infrmatin in the windw. Figure 2: The All Vilatins windw. If the cntent is scanned by a LinkValidatin type check, if the check is nt Passed, the View Link Validatin link is displayed under the check. Select the link, the Link Validatin windw appears. The fllwing infrmatin is displayed n this page: Link Details Field This field can list fur cnditins: 4XX Client Errr, 5XX Server Errr, Unknwn Errrs, and List f Redirects. 4XX Client Errr If there are sme links in the file with a 4XX status cde, they will be gruped in this field. This field als displays the link s errr type, the link lcatin in the file, and the errr descriptin. 5XX Server Errr If there are sme links in the file with a 5XX status cde, they will be gruped in this field. This field als displays the link s errr type, the link lcatin in the file, and the errr descriptin. Unknwn Errrs If there are sme links with status cdes that cannt be btained due t sme unknwn exceptins, the links will be listed in 26 Cmpliance Guardian User Guide
this field. The lcatin f the link and the crrespnding errr message will als display in this field. List f Redirects This field lists all the links that redirect t ther URLs. The lcatins f these links will als display in this field. *Nte: If the file des nt cntain the cnditin 4XX Client Errr, 5XX Server Errr, Unknwn Errrs, r List f Redirects, the crrespnding field will nt be displayed in the windw. Anchrs This field displays all the anchrs that are fund in the file, as well as the invalid anchrs. *Nte: If there are n anchrs fund in the file, this field will nt be displayed in the windw. Figure 3: The Link Validatin windw. Taken Actins If the file is affected by actins, this tab appears. Yu can view the actins that have affected the file, and the related infrmatin. View Prperties The tab appears if the fllwing cnditins are met: Yu have selected the latest Scan Time n the tp f the screen. The selected recrd is a SharePint item r file. The file r item des nt exist in SharePint after it is affected by the actin. Yu can view prperties f the recrd under the tab. Cmpliance Guardian User Guide 27
View Cnversatin If the data surce is Lync r Yammer, this tab appears. Yu can view the related cnversatin and message related infrmatin. Auditr The tab appears if the fllwing cnditins are met: Yu have selected the SharePint item r file The selected SharePint item r file is the latest versin. View the auditing infrmatin frm the cnfigured Auditr database. If yu want t view the auditing infrmatin, yu must first cnfigure t cnnect t DcAve envirnment fr using DcAve Auditr. Fr mre infrmatin, refer t the Database Manager sectin in Cmpliance Guardian Installatin User Guide. Issue Highlight Reprt If the recrd s scan status is nt Passed, and the recrd is scanned using a test suite, this tab appears. The cntent that is nt cmpliant is highlighted in yellw s the users can lcate quickly and fix any cmpliance issues. There are tw tabs under this tab: Vilatin Summary and Vilatins in Surce: Vilatin Summary Only display the vilatins. Vilatins in Surce This appears when yu have selected the latest Scan Time n the tp f the screen. The tab displays all cntent. Permissins The tab appears if the fllwing cnditins are met: Yu have selected the SharePint item r file The selected SharePint item r file is the latest versin. View the user r grups wh have permissins t the file. The permissins are als displayed. Cmments Add a cmment by selecting Add Cmment. Histry Recrd the actins perfrmed n the file in the details interface. Select Next r Previus n the upper-right crner t view the next r previus recrd. Dispsing Files Under the Actins Taken tab, nly yu select a file that has been affected by the Encrypt actin, Quarantine actin, Quarantine Befre Redact actin, Encrypt and Quarantine actin, the Dispse ptin is enabled. Select Dispse, then cnfigure settings in the appeared Dispse windw. Refer t the fllwing sectins. Dispsing Files Affected by the Encrypt Actin Cnfiguring the fllwing settings in the Dispse windw t dispse a file affected by the Encrypt actin: Reslutin Select a reslutin: 28 Cmpliance Guardian User Guide
Replace and Decrypt Select this ptin t uplad a file (the uplad file is nt an encrypted file) whse name must be same as the encrypted ne. The riginal encrypted file will be replaced with the upladed file. Select Brwse and then select a file t uplad. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. Delete Delete the encrypted file directly. Decrypt Original File The changes t the file will be dismissed and the files will be decrypted t be the riginal ne in the riginal lcatin. If this ptin is selected, the Mark as false psitive ptin appears. Select this ptin t mark the incident, which means that yu d nt think the file has any cmpliance vilatin. Advanced If Replace and Decrypt r Restre Original File is selected, yu can cnfigure the advanced settings. Select Advanced: Cnflict Reslutin Select hw t deal when the destinatin already has a file whse name is the same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Select Dispse in the windw t dispse the file, r select Cancel t cancel all changes. Dispsing Files Affected by the Quarantine (Still in SharePint) Actin Cnfiguring the fllwing settings in the Dispse windw t dispse a file affected by the Quarantine (still in SharePint) actin: Reslutin Select a reslutin: Replace and Restre Select this ptin t uplad a file whse name must be same as the quarantined ne. Select Brwse and then select a file t uplad. The upladed file will be restred t SharePint and replaced the riginal ne. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple Cmpliance Guardian User Guide 29
attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. Delete Delete the quarantined file directly. Restre Original File The changes t the file will be dismissed and the files will be restred t be the riginal ne in the riginal lcatin. If this ptin is selected, the Mark as false psitive ptin appears. Select this ptin t mark the incident, which means that yu d nt think the file has any cmpliance vilatin. Advanced If Replace and Restre r Restre Original File is selected, yu can cnfigure the advanced settings. Select Advanced: Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Select Dispse in the windw t dispse the file, r select Cancel t cancel all changes. Dispsing Files Affected by the Quarantine (Quarantined t Exprt Lcatin) Actin Cnfiguring the fllwing settings in the Dispse windw t dispse a file affected by the Quarantine (quarantined t an exprt lcatin) actin: Reslutin Select a reslutin: Replace and Restre Select this ptin t uplad a file whse name must be same as the quarantined ne. Select Brwse and then select a file t uplad. The upladed file will be restred. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. If this ptin is selected, the Restre Type ptin appears. In Place Select this ptin t restre the upladed file t the riginal place f the quarantined file. Out f Place Select this ptin t restre the upladed file t anther lcatin. The farms are displayed. Expand the farm and select a desired destinatin nde n the tree. 30 Cmpliance Guardian User Guide
Restre t Anther Lcatin Select this ptin t restre the quarantined file. Then, expand the farm and select a desired destinatin nde n the tree. Delete Delete the quarantined file directly. Restre Original File The changes t the file will be dismissed and the files will be restred t be the riginal ne in the riginal lcatin. If this ptin is selected, the Mark as false psitive ptin appears. Select this ptin t mark the incident, which means that yu d nt think the file has any cmpliance vilatin. Advanced If Replace and Restre, Restre t Anther Lcatin, r Restre Original File is selected, yu can cnfigure the advanced settings. Select Advanced: Cnflict Reslutin Select hw t deal when the destinatin already has a file whse name is the same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Select Dispse in the windw t dispse the file, r select Cancel t cancel all changes. Dispsing Files Affected by the Quarantine Befre Redact Actin Cnfiguring the fllwing settings in the Dispse windw t dispse a file affected by the Quarantine Befre Redact actin: Reslutin Select a reslutin: Replace and Restre Select this ptin t uplad a file whse name must be same as the quarantined ne. Select Brwse and then select a file t uplad. The upladed file will be restred. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. If this ptin is selected, the Restre Type ptin appears. In Place Select this ptin t restre the upladed file t the riginal place f the quarantined file. Cmpliance Guardian User Guide 31
Out f Place Select this ptin t restre the upladed file t anther lcatin. The farms are displayed. Expand the farm and select a desired destinatin nde n the tree. Restre t Anther Lcatin Select this ptin t restre the quarantined file t a desired lcatin. Then, expand the farm and select a desired destinatin nde n the tree. Delete Delete the quarantined file directly. Restre Original File The changes t the file will be dismissed and the files will be restred t be the riginal ne in the riginal lcatin. If this ptin is selected, the Mark as false psitive ptin appears. Select this ptin t mark the incident, which means that yu d nt think the file has any cmpliance vilatin. Advanced If Replace and Restre, Restre t Anther Lcatin, r Restre Original File is selected, yu can cnfigure the advanced settings. Select Advanced: Cnflict Reslutin Select hw t deal when the destinatin already has a file whse name is the same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Select Dispse in the windw t dispse the file, r select Cancel t cancel all changes. Dispsing Files Affected by the Encrypt and Quarantine (Still in SharePint) Actin Cnfiguring the fllwing settings in the Dispse windw t dispse a file affected by the Encrypt and Quarantine (still in SharePint) actin: Reslutin Select a reslutin: Replace and Decrypt Select this ptin t uplad a file (the uplad file is nt an encrypted file) whse name must be same as the encrypted ne. The riginal encrypted file will be replaced with the upladed file. Select Brwse and then select a file t uplad. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. 32 Cmpliance Guardian User Guide
Delete Delete the encrypted file directly. Decrypt and Restre Original File The changes t the file will be dismissed and the files will be restred and decrypted t be the riginal ne in the riginal lcatin. If this ptin is selected, the Mark as false psitive ptin appears. Select this ptin t mark the incident, which means that yu d nt think the file has any cmpliance vilatin. Advanced If Replace and Decrypt r Decrypt and Restre Original File is selected, yu can cnfigure the advanced settings. Select Advanced: Cnflict Reslutin Select hw t deal when the destinatin already has a file whse name is the same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Cmment Add a cmment. Send feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Select Dispse in the windw t dispse the file, r select Cancel t cancel all changes. Dispsing Files Affected by the Encrypt and Quarantine (Quarantined t Exprt Lcatin) Actin Cnfiguring the fllwing settings in the Dispse windw t dispse a file affected by the Encrypt and Quarantine (exprt t an exprt lcatin) actin: Reslutin Select a reslutin: Replace and Decrypt Select this ptin t uplad a file whse name must be same as the quarantined ne. Select Brwse and then select a file t uplad. The upladed file will be restred. *Nte: If yu want t restre an attachment, yu must uplad a file with the same name as the riginal attachment; if yu want t restre multiple attachments, yu must uplad a ZIP file in which the file names are the same as the riginal attachment names. If this ptin is selected, the Restre Type ptin appears. In Place Select this ptin t restre the upladed file t the riginal place t replace the riginal encrypted file. Cmpliance Guardian User Guide 33
Out f Place Select this ptin t restre the upladed file t anther lcatin. The farms are displayed. Expand the farm and select a desired destinatin nde n the tree. Decrypt and Mve t Anther Lcatin Select this ptin t restre the quarantined file t a desired lcatin. Then, expand the farm and select a desired destinatin nde n the tree. Delete Delete the riginal file directly. Decrypt and Restre Original File The changes t the file will be dismissed and the files will be restred and decrypted t be the riginal ne in the riginal lcatin. If this ptin is selected, the Mark as false psitive ptin appears. Select this ptin t mark the incident, which means that yu d nt think the file has any cmpliance vilatin. Advanced If Replace and Restre, Restre t Anther Lcatin, r Decrypt and Restre Original File is selected, yu can cnfigure the advanced settings. Select Advanced: Cnflict Reslutin Select hw t deal when the destinatin already has a file whse name is the same as the uplad ne. Select Replace t replace the existing file, r select Skip t skip t uplad the file. Ignre this file until the rule r file changes Select this checkbx, the file will nt be scanned after it is restred until the scan rule is changed, r until the file is changed. Cmment Add a cmment. Send Feedback Refer t the intrductin in Reslving Files Affected by the Encrypt Actin. Select Dispse in the windw t dispse the file, r select Cancel t cancel all changes. Using Incident Manager All f the incidents are displayed in Incident Manager. Yu can perfrm the Reslve, Dismiss, Escalate, and Exprt t Datasheet actins. Fr mre infrmatin n the actins, refer t Managing My Tasks. Viewing Reprts in Reprt Center Reprt Center cllects the scan reprts in different view. It includes the fllwing three sectins: Dashbard Refer t Viewing Scan Reprts in Dashbard. Heatmap Refer t Viewing Heatmap. Trend Reprt Refer t Viewing Trend Reprt. 34 Cmpliance Guardian User Guide
Select Reprt Center, and then select the sectin frm the drp-dwn list t g t each sectin. Viewing Scan Reprts in Dashbard Dashbard displays the scan results in different graphs based n different cnditins. Yu can view the last updated time and the next update time at the upper-right crner f the screen. Figure 4: The Dashbard interface. Dashbard cntains ten reprts. Yu can select which reprts are displayed n the interface by selecting Add Gadget. The Gadget Directry windw appears. All reprt gadgets are displayed. The status f the reprts that have already been displayed n dashbard is Selected. Select Deselect after a reprt, the reprt area will be remved frm the dashbard. Select Check, the reprt will be displayed n the dashbard again. Select OK t save the changes, r select Cancel t cancel changes and clse the Gadget Directry windw. In each reprt area, yu can perfrm the fllwing actins: Maximize the reprt Select the maximize ( ) buttn, and the reprt diagram will be maximized and displayed in the appeared windw. Remve the reprt area frm dashbard Select the remve ( ) buttn, and the reprt area will be remved frm the dashbard. Refer t the fllwing details f each reprt in the dashbard: Cmpliance Guardian User Guide 35