Contents

...

...

Anchor
_heading=h.tyjcwt _heading=h.tyjcwt

Agent Configuration

Login into system and navigate to the agent configuration

Login into the Getvisibilityapplication using the credentials given to you

...

Anchor
_heading=h.2s8eyo1 _heading=h.2s8eyo1

Compliance

Compliance is the act of conforming to a company directive, rule, policy, or standard or law. Some common compliance regulations and labels are: GDPR, PII, HIPAA, PHI, PCI. Getvisbility agent gives the user two options to customise and configure compliance as per their requirements.

...

Anchor
_heading=h.26in1rg _heading=h.26in1rg

Classification

Data classification is broadly defined as the process of organising data by relevant categories so that it may be used and protected more efficiently. On a basic level, the classification process makes data easier to locate and retrieve. By default, the Getvisibility classification is Public, Internal and Confidential.

...

Anchor
_heading=h.1ksv4uv _heading=h.1ksv4uv

MS Office Plugins

This functionality will allow the user to select which MS Office application the configuration will be applicable to.

...

To verify the Configuration, open a Excel document, user will see that the Getvisibility icon on the top-right is disabled, and user will not be able to Select it

...

MS Office Policies & Visual Tagging

This functionality allows the user to set various policies to enforce on documents in MS Office applications.

...

Anchor
_heading=h.4i7ojhp _heading=h.4i7ojhp

Outlook Plugins

This functionality will allow users to configure Outlook classification plugin.

...

Anchor
_heading=h.3whwml4 _heading=h.3whwml4

Outlook Policies & Visual Tagging

This functionality will allow the user to set various policies that they can enforce on emails when using Outlook.

...

Example config:

"outlookPluginActiveOutlookPluginActive": true,

 "header": "<h2 style=\"font-style:italic\"><span style=\"font-     size:14px\">Classified as {classification} by Getvisibility&reg;  Ashima</span></h2>",

      "footer": "",

      "tagOnSend": "force",

      "tagOnPrint": "force",

      "allowUnclassifiedAttachments": "block",

      "minAttachmentsTag": "block",

      "allowDeEscalation": true,

      "autoClassifyReplyForwardEmails": true,

...

When tagOnPrint = forceis configured users cannot print emails without classifying. Select Dismiss to keep editing the email or OK to classify.

...

• If WhentagOnPrint = Warn is configured, the user will be able to can send the email without classifying it. The option to Select Dismiss is to send the email and OK is to classify the email. And if the

• When tagOnPrint = Log&Ignore then is configured no notification will be displayed.

• |With allowUnclassifiedAttachments = Block, the user cannot send any attachment in the email without classifying it.

...

• allowUnclassifiedAttachments = Warn, In this case user will be able to : The user can send the attachment in the email without classifying it but agent will give a warning.

• allowUnclassifiedAttachments = Log&Allow, the user will be able to : The user can send the attachment in the email without classifying without any warning.

• minAttachmentsTag = Block, in : In this case the attachment is highly confidential, and the email is on lower level of classification, so the agent will not allow sending the email. The user will have to change the classification of either the attachment or the email, else otherwise they will not be able to send the email.

...

minAttachmentsTag = Warn, in : In this case the attachment is highly confidential, and the email is on lower level of classification, so the agent will only warn the user, but the user . They will still be able to send the email.

...

• minAttachmentsTag = Log&Allow, the : The user will be able send any attachment in the email without any warning.

• allowDeEscalation = False, the Fa: T: The user will not be allowed to lower the level of classification on the document and all the lower classification options will be disabled.

...

autoClassifyReplyForwardEmails = False, the : The user has the option to set the classification for the forwarding/reply an email and as . As seen below the original email is classified as internal but that is not inherited while forward/reply emailwhen forwarding or replying.

...

autoClassifyReplyForwardEmails = True, : As seen below while forwarding the email, it has inherited the classification from the original email.

...

Using Wizard mode, user can enable/disable policies related to Outlook by making changes on the screen.

• Select the Configuration Wizard ModeBelow we will see the settings on the wizard and the result for the same.

• The Header is selected on wizard and footer is left blank

...

Verify the setting on outlook we can see settings on Outlook: the header can be seen but not the footer.

...

If the user changes the setting settings and footer is added in the config and , the wizard Wizard and outlook Outlook will look as below:

...

Moving on to To set Outlook polices, the user has selected Force to classify and send the email , The user cannot send the email without classifying it. The option to Dismiss is to keep editing the email and OK is to classify the email.

...

If the user Changes it to Warn to classify and send the email, user they will be able to send the email without classifying it but with a warning. The option to Dismiss is to send the email and OK is to classify the email.

...

The last option is of Log & ignore, where the user can send the email without classification and without any or warning.

...

As the user has selected Force to classify and print the email, user they cannot print the email without classifying it. The option to Dismiss is to keep editing the email and OK is to classify the email.

...

The other two options are Warn , and Log&Ignore where the user will be able to print the email without classifying it. The option to Dismiss is to print the email and OK is to classify the email. And with With the LoLog&Ignore there will be no warning at all.

...

As the user has selected Block, the user cannot send the any attachment in the email without classifying it.

...

The other two options are: Warn, where the user will be able send the attachment in the email without classifying it but the agent will give with a warning like shown below , and Log&Allow where the user will be able send the attachment in the email without classifying and without any but with a warning.

...

The user has selected Block for the 4^th last option, in this case the attachment is highly confidential, and the email is on a lower level of classification, so the agent will not allow to send the email. The user will have to change the classification of either the attachment or the email, else otherwise they will not be able to send the email as shown in the screen shot.:

...

If the user has selects Warn, in this case the attachment is highly confidential, and the email is on a lower level of classification, so the agent will only warn the user, but the user will still be able to send the email.

...

• The final option here also is Log&Allow, where the user will be able send any attachment in the email without any warning.

• The checkbox User lowers classification level of a classified email in is unchecked, the user will not be allowed to lower the level of classification on the document and all the lower classification options will be disabled.

...

Image RemovedImage Added

The checkbox Inherit classification when Reply and Forward emails in is unchecked, the . The user has the option to set the classification for the forwarding/reply email and as seen below the original email is classified as internal but that is not inherited to while forward/reply email is applied.

...

The checkbox Inherit classification when Reply and Forward emails in is checked, . As seen below while forwarding the email, it has inherited the classification from the original email.

...

Anchor
_heading=h.3as4poj _heading=h.3as4poj

Configure Emails

Expert Mode

Using Expert Mode, the user can enable/disable default policies related to email by making changes in editing the agent configuration JSON file on the agent itself.

• Select Expert Mode

• Scroll down to the configurationOverrides section

• The policies that we can set are as below:

  • Classification: - Here the user can select which type of email he they wants to configure. The options are Public/Internal/Confidential/Highly Confidential

  • DefaultEmailPolicy: - Here the user can set the policy to Block/Allow/Warn about the an email.

  • BlockList: - The agent gives the option to create a blocklist of specific recipients. User will just have to Users can add the email id of recipient in the list.

  • WarnList: - The agent gives the option to create a warnlist of specific recipients. User will just have to Users can add the email id of recipient in the list.

  • AllowList: - The agent gives the option to create an allowlist of specific recipients. User will just have to Users can add the email id of recipient in the list.

• Sample config file is as below:

"configurationOverrides": [

   "classification": "Public"

   "defaultEmailPolicy": "block",

   "blockList": [],

   "warnList": ["aagarwal@getvisibility.com],

    "allowList": []

• The above configuration says that for Public type emails are blocked for sending, except for the recipient aagarwal@getvisibility.com, whom the email can be sent to but with a warning message.

• Validating the configuration as below. Since all the Public emails are blocked from sending and the recipient lab user is not on the Allow or Warn list the email cannot be sent.

...

If we change the recipient to aagarwal@getvisibility.com, the agent will give only a warning as the recipient was in the warn list, but the email can still be sent.

...

Wizard Mode

Using the Wizard modeMode, the user can enable/disable the policies related to Outlook by making changes in the on the screen directly.

• Select the Configuration Wizard Mode

• There is total 12 steps in Wizard and Outlook polices starts from 8th step.

• As shown below the Public emails are by default set to Block but 1 recipient is allowed to send the email with a warning.

...

If the recipient is changed to: aagarwal@getvisibility.com, the agent will only give a warning as the recipient was in the warn Warn list, but the email can still be sent.

...

Anchor
_heading=h.2p2csry _heading=h.2p2csry

Generic Settings

WriteMetadataTags :-

This property will capture the details about the agent in office applications. The below screenshot is from the config file.

...

Based on the distribution list, the email addressed addresses in this list will be the once that ones Outlook plugin will allow sending emails to.

...

Based on the distribution list, this property allows to share a file in outlook Outlook irrespective of the distribution value.

MaxNumberOfRecipients:

This property allows to set setting the maximum number of people the user wants to send the email to.

SuggestionOptions:

This tag will allow the user users to configure the options user they want to show while showing the suggestion box on Ms office MS Office or Outlook.

AgentDialogConfiguration

This tag will allow the user to customize customise the options user they want to show while show like showing labels such as compliance, classification etc.

...

Additional feature to classify the documents/emails. Few examples are: Internal/Restricted/ External/Limited

AutoLabelling

This optional feature allows users to automatically classify with a default label all newly created docs documents and emails in Word, Excel, Powerpoint, and Outlook emails. It is possible to individually set the default label for each plugin individually. User Users will be able to select the classification label that he they wants to apply to documents and email and when there is edit or change in the file and the file is saved the selected classification will be applied. Setting Autolabelling will allow the user to not to classify the documents every time the file is printed or saved, the classification will happen automatically.

...

While using Expert Mode the user has to be extra careful about small details like punctuation and formatting of the file. Error will be presented to the user as needed:

...

Reports

There are two reports related to Synergy as shown below:

...

For users of Getvisibility Synergy, this report gives an overview of the security related activity undertaken by users of GVClient agents. It visualises data such as: de-escalations, mis-classifications, and confidential data in infographic form to give organisation’s a quick understanding of the data their users are passing through their network.

...

Agent Management

Agent Management gives the user a high-level status of all the agents installed. Details like Name of agent, the IP address and When was the agent last seen is shown on this dashboard. User can also see if the agent is Online or not. The facility to filter the agent based on Name, Health, and State also is provided.

...

Administration

Pattern Matching

Using Pattern Matching UI you can view, save, create and edit RegEx patterns. These the associated rules for each pattern will be suggested to users of the agents if the RegExs are found.

...

Users also have the option to ignore the suggestion and use any other values to classify.

User Management

In the User Management screen, new users can be created to access the User Interface. There are two ways to create new users:

...

End of Document