Netwrix Data Classification User Guide Version: 5.6.1 8/12/2021 Stealthbits Data Classification User Guide Table of Contents 1. Overview 9 1.1. Features and Benefits 9 1.2. How It Works 11 1.2.1. QueryServer 11 1.2.2. NDC Collector 11 1.2.3. Indexer 12 1.2.4. NDC SQL Database 12 1.2.5. NDC Index Database 12 1.2.6. Classifier 12 2. Content Configuration Overview 13 2.1. Content Sources 14 2.1.1. Add a Content Source 14 2.1.1.1. Add Box 16 2.1.1.2. Add Database Source 18 2.1.1.3. Add Dropbox 22 2.1.1.4. Exchange Mailbox 23 2.1.1.5. Exchange Server 26 2.1.1.6. File System 29 2.1.1.7. Add Google Drive Source 32 2.1.1.8. Outlook Mail Archive 34 2.1.1.9. SharePoint 35 2.1.1.10. SharePoint Online 36 2.1.2. Narrow Data Collection Scope 36 2.1.3. Use Tagging 37 2.1.3.1. Overview 37 2.1.3.2. Configure tagging for content sources 38 2.1.4. Manage Sources and Control Data Processing 38 2.1.4.1. Modify Source Settings 39 2/246 Stealthbits Data Classification User Guide 2.1.4.2. Box 40 2.1.4.3. Database 43 2.1.4.4. Dropbox 48 2.1.4.5. Exchange Mailbox 50 2.1.4.6. File System 51 2.1.4.7. Google Drive 56 2.1.4.8. SharePoint 60 2.1.4.9. Configure the Product to Crawl an Entire SharePoint Online Tenancy 69 2.1.5. Source Groups 70 2.1.5.1. Dynamic Source Groups 72 2.1.5.2. Dynamic Source Groups — Exchange 72 2.1.5.3. Dynamic Source Groups — File Servers 73 2.1.5.4. Dynamic Source Groups — Google Drive Organization 75 2.1.5.5. Dynamic Source Groups — SharePoint Online 77 2.1.6. View Results 78 2.1.6.1. Data Processing Statistics 78 2.1.6.2. Content Crawling and Classification Results 78 2.2. Taxonomies 80 2.2.1. What are Taxonomies? 80 2.2.2. Built-in Taxonomies Overview 80 2.2.2.1. Core Taxonomies 81 2.2.2.2. Derived Taxonomies 83 2.2.3. Taxonomy Settings 85 2.2.3.1. Taxonomy Settings Levels 86 2.2.3.2. Labels 89 2.2.4. Add a Taxonomy 90 2.2.5. Manage Taxonomies 90 2.2.5.1. Managing Term Sets 95 2.2.5.2. Multi-User Environments 96 2.2.6. Search and Filter Taxonomies 98 2.2.7. Classification Rules (Clues) 101 3/246 Stealthbits Data Classification User Guide 2.2.7.1. Predefined Classification Rules 101 2.2.7.2. Working with Clues 103 2.2.7.3. Documents count 104 2.2.7.4. Suggested Clues 104 2.2.7.5. Types of Clues 105 2.2.7.6. Adding a Clue 114 2.2.7.7. Manage Clues 117 2.2.7.8. Search Documents by Clue 120 2.2.7.9. Browse 122 2.2.7.10. Export Search Results 123 2.2.8. Suggestions 124 2.2.9. Working Set 125 2.2.10. Search Index 125 2.2.11. Related 126 2.2.12. Additional Configuration 127 2.3. Workflows 128 2.3.1. Understanding Workflows 128 2.3.1.1. Managing Workflows 129 2.4. Example 1. Include All Files Classified as PDF 139 2.5. Example 2. Exclude HTML and XML Files 139 2.5.0.1. Workflow Actions 144 3. Modify Email Alert action settings 150 4. Modify Migration action settings 154 4.1. Common settings 154 4.2. Source-specific settings 156 4.3. Delete Email 159 4.4. Move Email 160 5. Update Permissions 162 6. Modify MIP Label 164 7. SharePoint Content Type Hubs 167 7.0.0.1. Workflow Operations Log 168 4/246 Stealthbits Data Classification User Guide 7.0.0.2. Workflow Plugins 168 8. System Configuration 169 8.1. Licensing 169 8.2. Configuration Options 170 8.2.1. Core Configuration 172 8.2.1.1. Classifier 172 8.2.1.2. Indexer 181 8.2.1.3. Collector 182 8.2.1.4. Administration 186 8.2.1.5. System 190 8.2.2. Communication Settings 192 8.2.3. Metadata Configuration 196 8.2.3.1. Document Metadata Fields 196 8.2.3.2. Metadata Field Mappings 196 8.2.3.3. Metadata Value Mappings 196 8.2.4. Redaction 197 8.2.5. System Configuration Settings 198 8.2.5.1. MIP Labels Configuration 201 8.2.6. Text Processing 202 8.2.7. Language Stemming 206 8.2.7.1. Supported Characters 207 8.2.7.2. Supported for Diacritics (accented characters) 209 8.2.7.3. Fuzzy Matching Options 209 8.3. Users and Security Settings 211 8.3.1. Secure Netwrix Data Classification 211 8.3.2. User Management 213 8.3.3. Password Manager 217 8.3.4. Web Service Security 217 8.4. Administrative Tasks 218 8.4.1. Index Maintenance 218 8.4.1.1. Step 1: Maintenance Operation 219 5/246 Stealthbits Data Classification User Guide 8.4.1.2. Step 2: Maintenance Options 220 8.4.1.3. Step 3: Summary 221 8.4.1.4. Step 4: Process 221 8.4.2. Configuration Backup 221 9. Data Analysis 223 9.1. Reporting Capabilities 223 9.1.1. Sensitive Documents Dashboard 224 9.1.1.1. Review Sensitive Documents Dashboard 225 9.1.1.2. Customize Dashboard 226 9.1.2. Content Distribution Map 227 9.1.3. Review Built-in Reports 227 9.1.3.1. Top Reports and Charts 228 9.1.3.2. Classification Reports 229 9.1.3.3. Clue Building Reports 229 9.1.3.4. Document Reports 230 9.1.3.5. System Reports 230 9.1.4. Queued and Custom Reports 231 9.1.4.1. Queued Reports 231 9.1.4.2. Plugins for Custom Reports 231 9.1.5. Manage Reports 232 9.1.5.1. Generating and Exporting Reports 232 9.1.5.2. Save Report Configuration 233 9.1.6. Report Subscriptions 234 9.2. Data Subject Access Requests 235 9.2.1. DSAR Roles 236 9.2.2. DSAR Settings 237 9.2.2.1. Run now 238 9.2.3. Create Search Requests 238 9.2.3.1. Example 239 9.2.4. Manage Search Requests 240 9.2.4.1. Customize View 240 6/246 Stealthbits Data Classification User Guide 9.2.4.2. Cancel Search 241 9.2.4.3. Template Search 241 9.2.5. View Search Query Results 241 10. Review Operations and Health Dashboards 244 10.1. Dashboard view 244 10.2. System Health 245 10.3. Netwrix Data Classification Service Viewer 246 7/246 Legal Notice The information in this publication is furnished for information use only, and does not constitute a commitment from Netwrix Corporation of any features or functions, as this publication may describe features or functionality not applicable to the product release or version you are using. Netwrix makes no representations or warranties about the Software beyond what is provided in the License Agreement. Netwrix Corporation assumes no responsibility or liability for the accuracy of the information presented, which is subject to change without notice. If you believe there is an error in this publication, please report it to us in writing. Netwrix is a registered trademark of Netwrix Corporation. The Netwrix logo and all other Netwrix product or service names and slogans are registered trademarks or trademarks of Netwrix Corporation. Microsoft, Active Directory, Exchange, Exchange Online, Office 365, SharePoint, SQL Server, Windows, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks and registered trademarks are property of their respective owners. Disclaimers This document may contain information regarding the use and installation of non-Netwrix products. Please note that this information is provided as a courtesy to assist you. While Netwrix tries to ensure that this information accurately reflects the information provided by the supplier, please refer to the materials provided with any non-Netwrix product and contact the supplier for confirmation. Netwrix Corporation assumes no responsibility or liability for incorrect or incomplete information provided about non-Netwrix products. © 2021 Netwrix Corporation. All rights reserved. 8/246 Stealthbits Data Classification User Guide 1. Overview 1. Overview 1.1. Features and Benefits Netwrix Data Classification is a platform that identifies data that’s important for your organization and enables you to reduce risk and unleash the true value of this data. Powered by unique compound term processing technology, it enriches your enterprise content with accurate and consistent metadata empowering you to work with data more confidently. By seeing which data is valuable, you can organize it in a way that promotes productivity and collaboration. By knowing where sensitive or regulated data is, you can reduce the risk of breaches and satisfy security and privacy requirements with less effort and expense. And by locating and getting rid of redundant and obsolete data, you can reduce storage and management costs. Netwrix Data Classification includes applications for Windows File Servers , Nutanix Files, Dell EMC, NetApp, and SharePoint, Office 365, Exchange, SQL Server, Oracle Database, Box, Dropbox, Google Drive, and MySQL. The platform provides a single panoramic view of your enterprise content, whether it’s located in structured or unstructured data stores, on premises or in the cloud.