Veritas Enterprise Vault™ Classification

Last Published:
Product(s): Enterprise Vault (12.1)
  1. About this guide
    1.  
      Introducing this guide
    2. Where to get more information about Enterprise Vault
      1.  
        Enterprise Vault training modules
  2. Getting started
    1.  
      About classification
    2.  
      Overview of the procedure for setting up classification
    3.  
      Prerequisites for classification
    4.  
      Roles-based administration (RBA) and the classification feature
    5. How Enterprise Vault caches the items that it submits for classification
      1.  
        Limits on the size of classification files
      2.  
        Checking the cache location on the Enterprise Vault storage servers
      3.  
        Configuring Enterprise Vault to keep the classification files in the cache folder
  3. Setting up the classification properties
    1.  
      About the Enterprise Vault classification properties
    2.  
      Setting up the Enterprise Vault classification properties manually
    3.  
      Checking the Folder Usage classification property
    4.  
      How classification property values and retention categories interact
    5.  
      Setting up new values for the Enterprise Vault classification properties
    6.  
      Points to note on setting retention categories
  4. Configuring your classification rules
    1.  
      About classification rules
    2.  
      About the example classification rules
    3.  
      Importing the example rule set
    4.  
      Creating or changing classification rules
    5.  
      Supported configuration parameters for rules that use the Veritas Information Classifier method
  5. Defining and applying classification policies
    1.  
      About classification policies
    2.  
      Defining classification policies
    3.  
      About the PowerShell cmdlets for working with classification policies
    4.  
      Associating classification policies with retention plans
    5.  
      About the PowerShell cmdlets for working with retention plans
    6.  
      Applying retention plans to your Enterprise Vault archives
  6. Running classification in test mode
    1.  
      About classification test mode
    2.  
      Implementing classification test mode
    3.  
      About the PowerShell cmdlets for running classification in test mode
    4.  
      Understanding the classification test mode reports
  7. Publishing classification properties and rules across your site
    1.  
      How to publish the classification properties and rules
  8. Appendix A. Enterprise Vault properties for use in classification rules
    1.  
      About the Enterprise Vault properties
    2.  
      System properties
    3.  
      Attachment properties
    4.  
      Custom Enterprise Vault properties
    5.  
      Custom Enterprise Vault properties for File System Archiving items
    6.  
      Custom Enterprise Vault properties for SharePoint items
    7.  
      Custom Enterprise Vault properties for Compliance Accelerator-processed items
    8.  
      Custom properties for use by policy management software
    9.  
      Custom properties for Enterprise Vault SMTP Archiving
  9. Appendix B. PowerShell cmdlets for use with classification
    1.  
      About the classification cmdlets
    2.  
      Get-EVClassificationPolicy
    3.  
      New-EVClassificationPolicy
    4.  
      Remove-EVClassificationPolicy
    5.  
      Set-EVClassificationPolicy
    6.  
      Import-EVClassificationRules
    7.  
      Publish-EVClassificationRules
    8.  
      Get-EVClassificationTags
    9.  
      Get-EVClassificationTestMode
    10.  
      Set-EVClassificationTestMode
  10. Appendix C. Troubleshooting and performance monitoring
    1.  
      Troubleshooting classification
    2.  
      Checking the classification performance counters

About the example classification rules

Note:

The example rules are for test purposes only and may not deliver the required results in a production environment.

The example rules are in a single XML file, Example Rules.xml, which is in the Classification subfolder of the Enterprise Vault program folder; for example, C:\Program Files (x86)\Enterprise Vault\Classification\Example Rules.xml.

The example rules have the following features in common:

  • They have a scope of "Enterprise Vault": they classify items in the Enterprise Vault classification cache folder only.

  • They use the Veritas Information Classifier method to search for strings and regular expression patterns in items.

  • When the rules find a match, they assign an appropriate value to one of the four Enterprise Vault classification properties on the matching item: evtag.category, evtag.exclusion, evtag.inclusion, or evaction.discard.

    For example, some of the rules search for strings in the form of credit card numbers. If the rules find an item that contains such a string, they assign the value "PII" to the item's evtag.category property, to indicate that the item contains personally identifiable information.

Table: Example classification rules describes the classification rules in the example rule set.

Table: Example classification rules

Rule name

Description

Property used

Assigned value

American Express Card

Detects items that may contain American Express credit card numbers.

evtag.category

PII

Auto-generated News Feeds

Detects items from the email domains of known news and research providers (alerts.yahoo.com, cnn.com, news.google.com, and so on).

evtag.exclusion

Auto-generated

Auto-Reply

Detects out-of-office messages.

evaction.discard

Default Retention Category

Charity Solicitations

Detects items containing terms and phrases that are commonly associated with charitable solicitations.

evtag.exclusion

Charity solicitations

Company Confidential

Detects items that were tagged in Microsoft Outlook as being Company Confidential.

evtag.inclusion

Company Confidential

CPF Number (Brazil)

Detects items that may contain Brazilian CPF numbers and associated words or phrases.

evtag.category

PII

Current Retention Category Name

Detects items that had an Enterprise Vault retention category named "1 Month" when they were submitted for classification.

evtag.category

Short retention

Date range

Detects items that were sent within a specified date range.

evtag.inclusion

Sensitive project

Discover Card

Detects items that may contain Discover Card credit card numbers.

evtag.category

PII

Driving License (UK)

Detects items that may contain UK driving license numbers.

evtag.category

PII

Email Containers (Attachments)

Detects items that have an attachment of type PST or NSF.

evtag.category

Email containers

Faxes (Attachments)

Detects fax attachments.

evtag.category

Fax

Financial Data

Detects items containing terms and phrases that are commonly associated with financial transactions.

evtag.inclusion

Financial

Identity Card (Germany)

Detects items that may contain current identity card numbers (issued in Germany since 2010).

evtag.category

PII

Large Items

Detects items that are 1000 KB or larger.

evtag.category

Large item

Large Number of Attachments

Detects items that have 10 or more attachments.

evtag.category

Many attachments

Legal

Detects items containing terms and phrases that are commonly associated with legal documents.

evtag.inclusion

Legal

Low Importance

Detects items that were tagged in Microsoft Outlook as being of low importance.

evtag.exclusion

Low importance

MasterCard

Detects items that may contain MasterCard credit card numbers.

evtag.category

PII

Message Sent to External Domain

Detects items that were sent to an external recipient.

evtag.inclusion

Sent externally

Message Sent to Specific External Domain

Detects items that were sent externally to a specific domain.

evtag.inclusion

Sent externally

National Insurance Number (UK)

Detects items that may contain UK national insurance numbers.

evtag.category

PII

National Registry Identification Number (Singapore)

Detects items that may contain Singaporean national registry identification numbers.

evtag.category

PII

Partial Content

Detects items for which Enterprise Vault was only able to supply partial content for classification (because, for example, their content was encrypted).

evtag.category

Partial content

Permanent Account Number (India)

Detects items that may contain Indian permanent account numbers and associated words or phrases.

evtag.category

PII

Personal

Detects items that were tagged in Microsoft Outlook as being Personal.

evtag.category

Personal

Productivity Documents

Detects items that have attachments in Microsoft Word or Excel format.

evtag.category

Productivity documents

Sensitive Project Code Names

Detects items that contain the user-defined code name of a project that is considered sensitive.

evtag.inclusion

Sensitive project

Social Security Number (US)

Detects items that may contain US social security numbers.

evtag.category

PII

VAT/TVA number (France)

Detects items that may contain French VAT/TVA numbers.

evtag.category

PII

Visa Card

Detects items that may contain Visa credit card numbers.

evtag.category

PII

Web Links

Detects items that include web links.

evtag.category

Web links