3 ss fam-ffw 8.0 lesson 3 - classification-r2.0

8/19/2019 3 SS FAM-FFW 8.0 Lesson 3 - Classification-r2.0

1/14

Lesson 3: Classification


2/14

8.0 File Security & Compliance Training Content

Admin

FAM / FFW Administration

Lesson 1 !ntroduction to FAM / FFW

Lesson " Con#iguration

Lesson $ Classi#ication

Lesson % File Auditing

Lesson '(ners)ip & *ig)ts Management

Lesson + File Security

Lesson , FAM & FFW Management & Tuning


3/14

Li#ecycle Step " Classi#y

-ata Classi#ication Automatic

ey(ords in

Metadata

Customclassi#ication

policies

Manual

C!FS ro(ser

Folderasedin)eritance

File types

Manage

FAM / FFW


4/14

W)y Classi#y t)e -ata

2se#ul #or 3eroing in on sensiti4e data

Audit only access to sensiti4e data

Controls o4er sensiti4e data alert/loc5 unaut)ori3ed access

*e4ie( and manage user rig)ts to sensiti4e data

6ossile (ays to classi#y unstructured data Manually

Automated Scan

7ased on metadata #ilename9 o(ner9 o(ner department9 etc:;

Content ased scan contents #or pattern matc)ing strings; #uture

!mport classi#ication pro


5/14

2se Case

Data

Classification

+

User Department

awareness

=

file security and

auditing thatmaps to

business policy


6/14

-ata Classi#ication

Manual

Wor5s on #iles and #olders

Can remo4e classi#ications #or automatic and manual;

For #olders > (or5s on t)e entire sutree in)eritance;

!n t)is 4ersion9 easiest & most common met)od o# classi#ication

Automatic

'nly (or5s on #iles

?o outo#t)eo@ classi#ication rules yet

Metadata only #ilename9 o(ner9 o(ner department

Filename rules uses #ilename patterns and (ildcards;

Limit is 109000 classi#ications y de#ault can e con#igured;


7/14

File Classification Worflow


8/14

File Classi#ication Wor5#lo(

!ight"clic

#enu

$dd

Classificatio

n

!emo%e &Clear

Details 'age

(nheritance


9/14

Automatic Scan Steps

1. Create a BFile -ataClassi#ication Scan

". Con#igure -ata Type

*ules #or desired

categories Create ?e( and

Ddit icons

Eloal '


10/14

Automatic Scan Steps(continued)

1. Create a BFile -ata

Classi#ication Scan

". Con#igure -ata Type *ules

#or desired categories

$. Apply To

Fetc)ed tople4el Ser4ices)ares precon#iguration;

%. Sc)edule

*un ?o( Sc)edule re#res)


11/14

Classi#ied File -ata File D@plorer

Scan policy runs an acti4e connection Credentials must e con#igured

2ses C!FS et(een t)e MG and t)e #ile ser4er

S)o(s in Audit records i# MG not e@cluded

-isplayed in a #ile e@plorer -ouleclic5ing #olders s)o(s t)eir contents


12/14

Hie(ing Classi#ications

!con indicates i# a #oldercontains classi#ied content

*oot #olders ased on top

le4el s)ares not #ile system;

Io4ering o4er icon s)o(sdata types in sutree

-etails pane in#ormation


13/14

Manual Classi#ication

*ig)tclic5 s)are

-rop do(n list

Classi#ication

-eclassi#ication

Clear JallKClassi#ication

S)o( 2sage

'pens Audit records

(it) #ilter on s)are pat)

Consider copy andpaste #ilter to BFile

criteria instead o#

BFull 6at)


14/14

)uestions*

3 ss fam-ffw 8.0 lesson 3 - classification-r2.0

Documents