Enterprise Vault™ Classification using the Microsoft File Classification Infrastructure

Last Published:
Product(s): Enterprise Vault (14.3)
  1. About this guide
    1. Introducing this guide
      1.  
        Relationship between FCI classification and other classification methods
    2. Where to get more information about Enterprise Vault
      1.  
        Enterprise Vault training modules
  2. Getting started
    1.  
      About classification
    2.  
      Overview of the procedure for setting up classification
    3.  
      Prerequisites for classification
    4.  
      Roles-based administration (RBA) and the classification feature
    5. How Enterprise Vault caches the items that it submits for classification
      1.  
        Limits on the size of classification files
      2.  
        Checking the cache location on the Enterprise Vault storage servers
      3.  
        Configuring Enterprise Vault to keep the classification files in the cache folder
  3. Setting up the classification properties
    1.  
      About the Enterprise Vault classification properties
    2.  
      Setting up the Enterprise Vault classification properties manually
    3.  
      Checking the Folder Usage classification property
    4.  
      How classification property values and retention categories interact
    5.  
      Setting up new values for the Enterprise Vault classification properties
    6.  
      Points to note on setting retention categories
  4. Configuring your classification rules
    1.  
      About classification rules
    2.  
      About the example classification rules
    3.  
      Importing the example rule set
    4.  
      Creating or changing classification rules
    5.  
      Supported configuration parameters for rules that use the Veritas Information Classifier method
  5. Defining and applying classification policies
    1.  
      About classification policies
    2.  
      Defining classification policies
    3.  
      About the PowerShell cmdlets for working with classification policies
    4.  
      Associating classification policies with retention plans
    5.  
      About the PowerShell cmdlets for working with retention plans
    6.  
      Applying retention plans to your Enterprise Vault archives
  6. Running classification in test mode
    1.  
      About classification test mode
    2.  
      Implementing classification test mode
    3.  
      About the PowerShell cmdlets for running classification in test mode
    4.  
      Understanding the classification test mode reports
  7. Publishing classification properties and rules across your site
    1.  
      How to publish the classification properties and rules
  8. Using classification with smart partitions
    1.  
      About smart partitions
    2.  
      How Enterprise Vault determines whether to archive an item to a smart partition
    3.  
      Setting up smart partitions
    4.  
      Verifying that Enterprise Vault has archived items to smart partitions
  9. Appendix A. Enterprise Vault properties for use in classification rules
    1.  
      About the Enterprise Vault properties
    2.  
      System properties
    3.  
      Attachment properties
    4.  
      Custom Enterprise Vault properties
    5.  
      Custom Enterprise Vault properties for File System Archiving items
    6.  
      Custom Enterprise Vault properties for SharePoint items
    7.  
      Custom Enterprise Vault properties for Compliance Accelerator-processed items
    8.  
      Custom properties for use by policy management software
    9.  
      Custom properties for Enterprise Vault SMTP Archiving
  10. Appendix B. PowerShell cmdlets for use with classification
    1.  
      About the classification cmdlets
    2.  
      Disable-EVClassification
    3.  
      Get-EVClassificationFCITags
    4.  
      Get-EVClassificationPolicy
    5.  
      Get-EVClassificationStatus
    6.  
      Get-EVClassificationTestMode
    7.  
      Import-EVClassificationFCIRules
    8.  
      New-EVClassificationPolicy
    9.  
      Publish-EVClassificationFCIRules
    10.  
      Remove-EVClassificationPolicy
    11.  
      Set-EVClassificationPolicy
    12.  
      Set-EVClassificationTestMode
  11. Appendix C. Monitoring and troubleshooting
    1.  
      Auditing
    2.  
      Checking the classification performance counters
    3.  
      Troubleshooting classification

About the Enterprise Vault classification properties

When an item matches a classification rule that you have defined, Enterprise Vault records the fact in the metadata properties of the item. The chosen property and the value that Enterprise Vault assigns to it determine what Enterprise Vault does with the item. As Table: Enterprise Vault classification properties explains, Enterprise Vault can process the classification values that are stored in four predefined properties.

Caution:

Enterprise Vault can assign classification values to the four predefined properties only, and not to any other properties that you might set up in File Server Resource Manager.

Table: Enterprise Vault classification properties

Property

Description

evtag.category

This property assigns one or more category values to an item when the item is added to Enterprise Vault. For example, some of the example classification rules check the contents of items for credit card numbers and assign the category value "PII" (for "personally identifiable information") to those that do.

You can search for the assigned property values in applications such as Enterprise Vault Search, Compliance Accelerator, and Discovery Accelerator.

evtag.exclusion

In environments where you use Compliance Accelerator, this property instructs the random sampling feature of that application to ignore any item that Enterprise Vault has classified with the property. (Where appropriate, however, Compliance Accelerator users can still add these items to their review sets by conducting searches for them.)

For example, the example classification rules use this property to exclude auto-generated news feeds, charity solicitations, and other unimportant items from Compliance Accelerator review sets.

You can search for the assigned property values in applications such as Enterprise Vault Search, Compliance Accelerator, and Discovery Accelerator.

evtag.inclusion

In environments where you use Compliance Accelerator, this property instructs the random sampling feature of that application to capture any item that Enterprise Vault has classified with the property. For the best results, use this property selectively to prevent Compliance Accelerator from randomly sampling an excessive number of items.

For example, the example classification rules use this property to include Company Confidential items and items that contain financial or legal data in Compliance Accelerator review sets.

You can search for the assigned property values in applications such as Enterprise Vault Search, Compliance Accelerator, and Discovery Accelerator.

evaction.discard

By assigning the name of a retention category to this property of an item, you can mark the item for deletion. For example, one of the example classification rules uses this property to delete automated out-of-office messages.

The way in which Enterprise Vault handles such items depends on the point at which it classifies them.

  • During indexing. If an item is classified when Enterprise Vault indexes it, Enterprise Vault sets the retention category of the item to the evaction.discard property value. You can no longer search for the item, but, for a limited number of days, you may be able to recover it. This is the case even if, in the archive settings for your Enterprise Vault site, you have chosen to disable the recovery of user-deleted items.

  • During automatic expiry. If an item is classified because its retention period has expired, Enterprise Vault immediately deletes the item.

  • During user deletion. If an item is classified because a user has tried to delete it then, depending on how you have configured the archive settings for your Enterprise Vault site, the item is either immediately deleted or temporarily recoverable.

This property overrides the other classification properties, such as evtag.inclusion. So, if one classification rule marks an item for deletion then it is deleted, even if a second rule tags the item for inclusion in a Compliance Accelerator review set.

Some items may not be eligible for deletion because, for example, they are on legal hold. Where this is the case, the classification feature updates the item's retention category but does not delete the item.

All four properties are of type Multiple Choice List: you can assign several values to them. For example, an email that the example classification rules have processed could have two values assigned to its evtag.category property, "Many attachments" and "Personal", to indicate that it has ten or more attachments and that its author has assigned a sensitivity level of Personal to it. The evaction.discard property differs slightly because although it too is a Multiple Choice List property, Enterprise Vault uses the first assigned value only.