Contents

...

...

Anchor
_heading=h.tyjcwt _heading=h.tyjcwt

Agent Configuration

Login into system and navigate to the agent configuration

Login into the Getvisibilityapplication using the credentials given to you

...

Anchor
_heading=h.2s8eyo1 _heading=h.2s8eyo1

Compliance

Compliance is the act of conforming to a company directive, rule, policy, or standard or law. Some common compliance regulations and labels are: GDPR, PII, HIPAA, PHI, PCI. Getvisbility agent gives the user two options to customise and configure compliance as per their requirements.

...

Anchor
_heading=h.26in1rg _heading=h.26in1rg

Classification

Data classification is broadly defined as the process of organising data by relevant categories so that it may be used and protected more efficiently. On a basic level, the classification process makes data easier to locate and retrieve. By default, the Getvisibility classification is Public, Internal and Confidential.

...

Keep clicking on Next to only change the compliance tags.The Last step of the wizard the agent will be displayed.

Image RemovedImage Added

Click Finish and following message will be displayed

...

Anchor
_heading=h.1ksv4uv _heading=h.1ksv4uv

MS Office Plugins

This functionality will allow the user to select which MS Office application the configuration will be applicable to.

...

To verify the Configuration, open a Excel document, user will see that the Getvisibility icon on the top-right is disabled, and user will not be able to click it

...

MS Office Policies & Visual Tagging

This functionality allows the user to set various policies to enforce on documents in MS Office applications.

...

• Click on Expert Mode

• Scroll down to the OfficeConfiguration section

• The available policies:

  • Header: - This will add a Header to the document. The user can leave it empty or customise it as needed

  • Footer: - This will add a Footer to the document. The user can leave it empty or customise it as needed

  • Watermark: - This will add a Watermark to the document. The user can leave it empty or customise it as needed

  • TagBeforePrint: - This option will Force, Warn or Log & Ignore (allow) the user to classify any document before printing

  • TagDirtyBufferOnSave: - This option will Force, Warn or Log & Ignore (allow) the user to classify any document before saving

  • AllowDescalation: - This option allows the user to lower the classification level of a classified document.

  • ExcelTextForwardingActive: This is a scraping feature, it tells the plugin to scrape the text from within an app like Word or Excel and then forward it to the classifier for a suggestion. This option can be set using True or False.

  • PowerpointSubtitle:- This will add a Subtitle to the PowerPoint. This policy is optional.

  • PowerpointTitle:- This will add a Subtitle title to the PowerPoint. This policy is optional.

• Example of Config:

...

"header": "<span>Classified as {classification} by Getvisibility&reg;</span>",

      "footer": "",

      "watermark": "",

      "tagDirtyBuffersOnSave": "force",

      "tagBeforePrint": "ignore",

      "allowDeEscalation": false,

      "excelTextForwardingActive": false,

       "powerpointSubtitle": "<span style =            \"color:#556b2f;\"><strong>{classification}/{distribution}</strong></span>",

      "powerpointTitle":
""

• Click on the Finish button

• Verify the documents based on the config above

• As per the config the user should be able to see the header and footer. The watermark should be blank.

...

As allowDeEscalation = False is configured, the user will not be allowed to lower the level of classification on the document and all the lower classification options will be disabled:

...

• Image Added

• As excelTextForwardingActive = Falseis configured, text from the MS Office app will not be sent to classifier for suggestions. The PowerPoint Subtitle is displayed and the Title is blank as per the config set above.

...

Wizard Mode

Using Wizard Mode, the user can easily enable/disable the policies related to MS office.

...

Anchor
_heading=h.4i7ojhp _heading=h.4i7ojhp

Outlook Plugins

This functionality will allow users to configure Outlook classification plugin.

...

• Click on Expert Mode

• Scroll down to OutlookConfiguration section

• Add values.

  • It can be seen below that OutlookPluginActive is set to True in expert mode as an example.

• Click on the Finish Button

• Image RemovedImage Added

• Configuration saved successfully’ message will be displayed on screen along with OK button.

• To verify the Configuration, open Outlook, user will see that the Getvisibility icon on the top right is enabled, and user will be able to click it and classify the email, if the OutlookPluginActive = false the same icon will be disabled.

...

Anchor
_heading=h.3whwml4 _heading=h.3whwml4

Outlook Policies & Visual Tagging

This functionality will allow the user to set various polies that the user would like to enforce on documents when using Outlook.

...

"header": "<span style=\"color:#008004;\"><h2 style=\"font-style:italic\"><span style=\"font-size:14px\">Classified as {classification} by Getvisibility&reg; Ashima<</span></h2></span>",

"footer": "<span style=\"color:#008004;\"><span><strong>Classified as {classification} by Getvisibility&reg; Adding Footer<</strong></span></span>"

...

As tagOnSend = force, the user cannot send the email without classifying it. The option to Dismiss is to keep editing the email and OK is to classify the email.

...

• allowUnclassifiedAttachments = Warn, the In this case user will be able to send the attachment in the email without classifying it but agent will give a warning as shown below.

• allowUnclassifiedAttachments = Log&Allow, the user will be able to send the attachment in the email without classifying without any warning.

...

• minAttachmentsTag = Block, in this case the attachment is highly confidential, and the email is on lower level of classification, so the agent will not allow sending the email. The user will have to change the classification of either the attachment or the email, else will not be able to send the email.

...

minAttachmentsTag = Warn, in this case the attachment is highly confidential, and the email is on lower level of classification, so the agent will only warn the user, but the user will still be able to send the email.

...

• minAttachmentsTag = Log&Allow, the user will be able send any attachment in the email without any warning.

• allowDeEscalation = False, the user will not be allowed to lower the level of classification on the document and all the lower classification options will be disabled.

...

If the user changes the setting and footer is added the config and the wizard and outlook will look as below:

...

Image Added

Moving on to set the Outlook polices, the user has selected Force to classify and send the email, user cannot send the email without classifying it. The option to Dismiss is to keep editing the email and OK is to classify the email.

...

Anchor
_heading=h.3as4poj _heading=h.3as4poj

Configure Emails

Expert Mode

Using the Expert mode, the user can enable/disable default policies related to email by making changes in the JSON file on the agent itself.

...

• The above configuration says that for Public type emails are blocked for sending, except for the recipient aagarwal@getvisibility.com, whom the email can be sent but with a warning message.

• Validating the configuration as below. Since all the Public emails are blocked from sending and the recipient lab user is not on the Allow or Warn list the email can be sent.

...

If we change the recipient to aagarwal@getvisibility.com, agent will give only a warning as the recipient was in the warn list, but the email can still be sent.

...

If we change the recipient to aagarwal@getvisibility.com, agent will give only a warning as the recipient was in the warn list, but the email can still be sent.

...

Anchor
_heading=h.2p2csry _heading=h.2p2csry

Generic Settings

WriteMetadataTags :-

This property will capture the details about the agent in office applications. The below screenshot is from the config file.

...

Additional feature to classify the documents/emails. Few examples are: Internal/Restricted/ External/Limited

AutoLabelling

This optional feature allows to automatically classify with a default label all newly created docs in Word, Excel,Powerpoint and Outlook emails. It is possible to individually set the default label for each plugin individually. User will be able to select the classification label that he wants to apply to documents and email and when there is edit or change in the file and the file is saved the selected classification will be applied. Setting Autolabelling will allow the user to not to classify the documents every time the file is printed or saved, the classification will happen automatically.

...

While using the expert mode the user has to be extra careful about the small details like punctuations and formatting of the file, else the agent will through and error like below.

...

Reports

There are two reports related to Synergy as shown below:

...

For users of Getvisibility Synergy, this report gives an overview of the security related activity undertaken by users of GVClient agents. It visualises data such as: de-escalations, mis-classifications, and confidential data in infographic form to give organisation’s a quick understanding of the data their users are passing through their network.

...

Agent Management

Agent Management gives the user a high-level status of all the agents installed. Details like Name of agent, the IP address and When was the agent last seen is shown on this dashboard. User can also see if the agent is Online or not. The facility to filter the agent based on Name, Health and State also is provided.

...

Administration

Pattern Matching

Using Pattern Matching UI you can view, save, create and edit regex pattern, then the backend will process it and agent give suggestions based on the regex created.

...

User also has the option to Edit/Delete the regex pattenpattern

...

After clicking on Publish, the classification services starts so that the backend can process the new regex pattern

...

User also has the option to ignore the suggestion and use any other values to classify.

User Management

Using the user management users will be able to create new users to access the application. There are 2 ways to create new users:

...

End of Document