Creating Data Discovery Policies

Procedure

1. Select Enable Data Discovery.
2. Click Add.
   The Data Discovery Policy Settings screen appears.
3. Select Enable this rule.
4. Specify a name for the rule.
5. Configure the target folder settings:
   1. Click the Target Folder tab.

      Note The root folder cannot be a Windows shared folder or removable device (USB device or DVD).

   2. In the File Path section, specify the scan location for files.

      Note Data Discovery does not scan autoexec.bat files located in the following directories: \Documents and Settings\*\Application Data\ \Documents and Settings\*\Local Settings\ \Documents and Settings\*\Cookies\ \Program Files\ \Windows\ \Winnt\ \Users\*\AppData\ \ProgramData\

   3. In the File Type Exceptions section, specify scanning exceptions.
      • Scan: Specify specific files or file types to scan.
      • Do not scan: Specify specific files, file types, or folders that Data Discovery will not scan.

      Note Data Discovery supports the following wildcard characters: *: Substitute for any and all characters before or after the * ?: Substitute for a single character or a single double-byte character Separate multiple entries with pipes ( | ) and use the following format: For files: *.<file extension> (for example: *.exe|*.doc) For folders: Specify a file path (for example: *\Test\*|C:\My-Docs\)

6. Configure the template settings:
6. Configure the template settings:
   1. Click the Template tab.
   2. Select templates from the Available templates list and then click Add.
      When selecting templates:

      • Select multiple entries by clicking the template names which highlights the name.
      • Use the search feature if you have a specific template in mind. You can type the full or partial name of the template.

      Note Each rule can contain a maximum of 500 templates. your preferred template is not found in the Available templates list, go to Policies → Policy Resources → DLP Templates and create a new template.

7. Configure the action settings:
   1. Click the Action tab.
   2. Select Monitor to record detections for analysis.
   3. (Optional) Select Encrypt to encrypt sensitive files using one of the following methods:
      • User key
      • Group key
      • Encryption password: The encryption password is a global password for all Apex One servers. Click Create encryption password to configure a password.

      Important The File Encryption feature in Endpoint Encryption is deprecated and may not be available for new installation instances.

8. Configure the schedule for the scan:
   1. Click the Schedule tab.
   2. Specify the frequency of the scan.
   3. Specify the time that the scan starts.
9. Click Save to apply settings.