Your suggested change has been received. Thank you.

close

Suggest A Change

https://thales.na.market.dpondemand.io/docs/dpod/services/kmo….

Thales Logo

All

  • All
back

Discovering sensitive information

Local storage

search

Local storage

You can scan Windows and Linux local storage data stores with Data Discovery and Classification application.

Note

  • You cannot scan mounted network shares as local storage.

  • As DDC uses the Hostname/IP to determine the system for scanning, avoid having multiple hosts with identical Hostname/IP combinations, as DDC may randomly choose one.

  • Install DDC ML agent on local host machine to scan local storage data stores for regex and ML infotypes. If you only want to scan regex based infotype, install the DDC agent on the host machine.

  • The DDC ML agent runs as a local system. Ensure that the SYSTEM account has appropriate permissions (typically Full Control) for all files and folders within the data store being scanned. Refer to Microsoft documentation for more information on default SYSTEM account permissions.

This section covers the following topics:

Adding local storage data store

To add the local storage data store:

  1. Log on to the CipherTrust Manager GUI.

  2. Open the Data Discovery & Classification application.

  3. Click Data Stores > Data Stores > Add Data Store.

  4. Complete the following steps:

    1. Select Type & Category

    2. General Info

    3. Configure Connection

    4. Add Access Control & Tags

Select Type & Category

  1. Under Select Data Store Category, select Local.

  2. From Select Data Store Type, select Local Storage.

  3. Click Next.

General Info

  1. Specify the following details:

    • Data Store Name: Name for the data store.

    • Description (Optional): Description for the data store.

    • Location Name: Location of the data store.

    • Add Location: Click Add Location to add new locations to the Location Name drop-down. Refer to Adding Locations for detailed steps.

    • Sensitivity Level (Optional): Sensitivity level for the data store. Refer to Sensitivity Levels for details.

    • Enable Data Store: Whether to enable the newly added data store. Select the check box to enable the data store.

  2. Click Next.

Configure Connection

  1. In the Hostname/IP field, specify a valid hostname, IP address, or Uniform Resource Identifier (URI) of the agent running on the machine where the local storage data store resides. Hostname/IP must be longer than two characters. For example, 10.0.0.1 or agent123.

    Tip

    Make sure the agent can resolve its hostname. If it cannot, include the agent name in the operating system's Hosts file. For example, if the agent's hostname is 'agent123', add the entry '127.0.0.1 localhost agent123' in the Hosts file.

  2. Click Next.

Add Access Control & Tags

  1. (Optional) Grant the All groups (default) access for reports. Alternatively, select a group.

  2. Click Save.

The data store is added to the Data Stores page. If the Ready to Scan column shows Ready, then data store is properly configured.

For more information on Access control and Tags, expand the section below.

Access Control & Tags

The Access Control & Tags tab on the Add Data Store screen allows you to grant access rights to your data store and add tags. More details below:

  • ACCESS CONTROL - select user groups that can access the data store. Access to a data store provides ability to see reports that include scans of that data store. The available options are:

    • All groups: All groups of users can access the data store through reports. This is the default setting.

    • Selected group/s: Specified user defined groups can access the data store through reports. When this option is selected, select a group from the drop-down list. This list shows existing user defined groups. The user defined groups must already exist on CipherTrust Manager. If no user defined groups exist, ask the administrator to create a group. If needed, you can select multiple groups. Start typing the name of the desired group and select from the suggested groups.

  • TAGS - Select a tag from the Add Tag drop-down. See the list of prebuilt tags in Predefined tags section.

    Tip

    • New tags can also be added. Start typing a new tag, and click the New: <new_tag> link that appears below the drop-down.

    • Add as many tags as needed.

    • To remove a tag, click the close icon in the tag name.

Adding local storage Scan

To add a scan for local storage:

  1. In the Data Discovery & Classification application, click Scans > Add Scan.

  2. Complete the following steps:

    1. General Info

    2. Select Data Stores

    3. Add Targets

    4. Select Profiles

    5. Add Filters

    6. Schedule Run

    Refer to Scans for the description of sections of the Add Scan screen.

General Info

  1. Specify a Name for the scan.

  2. (optional) Add a Description for the scan.

  3. Expand Advanced Configuration and specify advanced configurations such Scan Priority, Memory Usage Limit, and Amount of Data Object Volume. Refer to Advanced Configuration for details.

  4. Click Next.

Select Data Stores

  1. Under Data Store Name, select the local data store that is Ready for scanning. You can select multiple data stores, if required.

  2. Click Next.

Add Targets

Note

If no specific target is added, the entire data store will be scanned.

  1. To add a scan target, do one of the following:

    • Under the Add Target field, specify the correct target path and click Apply.

      Note

      Ensure that the target path syntax format matches the local storage directory structure. For example, for Windows, use drive\folder\filename as the path and for Linux, use /directory/subdirectory/filename as the path.

    • Navigate and add target paths.

      1. Click Browse to navigate target paths from the root level.

        Alternatively, provide an initial path in the Add Target Path field and click Browse to navigate targets from that point onward.

      2. In the left pane, navigate and select the desired target path.

      3. Click Add Path to add the target path to the right pane. Similarly, add other target paths.

      4. Click Add.

      Tip

      Either navigate the target paths from the root level (without specifying any path in the Add Target Path field) or make sure you provide the correct path to navigate further locations within it.

  2. Click Next.

Select Profiles

  1. Under Classification Profile Name, select the desired classification profiles to search for in the data store. You can select multiple profiles, if required. Refer to Classification Profiles for details on classification profiles.

  2. Click Next.

Add Filters

This step is optional.

  1. Select the desired filter from the Select Filter drop-down.

    To filter the locations to scan a local storage data store, consider the following syntax.

    Note

    Exclude Path/DO by prefix, suffix, and expression filters support wildcard characters. See Using wildcard characters to learn how wildcards work.

    • Exclude Path/DO by prefix

      Excludes paths or data objects that begin with a given string. It can be used to exclude entire directory trees. Specify <string>.

      Filter ItemWindows SyntaxWindows ExampleLinux SyntaxLinux Example
      Folder<DriveLetter>:\<FolderName>C:\TestData<TopLevelDir>/<FolderName>/mnt/testdata
      Sub Folder<DriveLetter>:\<FolderName>\<SubFolderName>C:\TestData\Tests<TopLevelDir>/<FolderName>/<SubFolderName>/mnt/testdata/tests
      File<DriveLetter>:\<FolderName>\<SubFolderName>\<FileName>C:\TestData\Tests\Data\file.txt<TopLevelDir>/<FolderName>/<SubFolderName>/<FileName>/mnt/testdata/tests/data/file.txt

    • Exclude Path/DO by suffix

      Excludes paths or data objects that end with a given string. Specify <string>.

      Filter ItemWindows SyntaxWindows ExampleLinux SyntaxLinux Example
      Folder<FolderName>\*TestData* — Applies all paths starting with 'TestData' as suffix.<FolderName>*testdata* — Applies all paths starting with 'testdata' as suffix.
      File<FileName>file.txt — Applies all paths ending with 'file.txt' as suffix.<FileName>file.txt — Applies all paths ending with 'file.txt' as suffix.

    • Exclude Path/DO by expression

      This filter is majorly used with wildcard characters.

      Excludes paths or data objects that match the given expression. Specify <string>.

      For example, to exclude locations that contain 'blob' in their path, use expression *blob*.

      Filter ItemWindows SyntaxWindows ExampleLinux SyntaxLinux Example
      Folder*<FolderName>**TestData**<FolderName>**testdata*
      File*<FileName>

      File within specific folder: *<FolderName>\<FileName>      		*file1*<FileName>

      File within specific folder: *<FolderName>/<FileName>      		*file1

    • Include DO modified recently

      Includes data objects modified within N number of days from the current date, where the value of N ranges from 1 to 99 days. After selecting this filter, specify Days from current date.

    • Exclude DO greater than size

      Excludes data objects that are larger than a given file size (in MB). After selecting this filter, specify the file size in MB.

    • Include DO's within modification date

      Includes data objects modified within a given range of dates. After selecting this filter, specify the Start and End dates.

  2. Click Apply.

  3. Repeat the above steps to apply multiple filters. Click Remove to remove any applied filter.

  4. Click Next.

Schedule Run

  1. Specify the scan run frequency. The two options are:

    • Manual: This is the default option. Select this option to run the scan manually. Select the Run Now check box to start the scan run after you save the changes.

    • Scheduled: Select this option to configure the scan to run automatically at the specified time.

    Refer to Schedule Scan for more details on scheduling scan runs.

  2. Click Save.

On this page