Enterprise Vault™ Classification using the Veritas Information Classifier

Last Published:
Product(s): Enterprise Vault (12.5)
  1. About this guide
    1. Introducing this guide
      1.  
        Relationship between the Veritas Information Classifier and other classification methods
    2.  
      What's in this guide
    3. Where to get more information about Enterprise Vault
      1.  
        Enterprise Vault training modules
  2. Preparing Enterprise Vault for classification
    1.  
      About the preparatory steps
    2.  
      What you need
    3.  
      Checking the cache location on the Enterprise Vault storage servers
    4.  
      Setting up the Data Access account
    5.  
      Enabling the Veritas Information Classifier on all Enterprise Vault servers
    6.  
      Configuring the Veritas Information Classifier for secure client connections
  3. Setting up Veritas Information Classifier policies
    1.  
      Introducing the Veritas Information Classifier
    2.  
      Opening the Veritas Information Classifier
    3.  
      Finding your way around
    4.  
      Analyzing sample content for policy matches
    5. About policies
      1.  
        Creating or editing policies
      2.  
        About policy conditions
      3.  
        Enabling or disabling policies
      4.  
        Exporting or importing policies
      5.  
        Resetting policies
      6.  
        Deleting policies
    6. About patterns
      1.  
        Creating or editing patterns
      2.  
        Exporting or importing patterns
      3.  
        Deleting patterns
    7. About tags
      1.  
        Creating or editing tags
      2.  
        Exporting or importing tags
      3.  
        About the Enterprise Vault index properties
      4.  
        How classification property values and retention categories interact
      5.  
        Points to note on setting retention categories
      6.  
        Deleting tags
  4. Defining and applying Enterprise Vault classification policies
    1.  
      About Enterprise Vault classification policies
    2. Defining classification policies
      1.  
        Configuring classification policies to assign retention categories with the shortest duration
    3.  
      About the PowerShell cmdlets for working with classification policies
    4.  
      Associating classification policies with retention plans
    5.  
      About the PowerShell cmdlets for working with retention plans
    6.  
      Applying retention plans to your Enterprise Vault archives
  5. Running classification in test mode
    1.  
      About classification test mode
    2.  
      Implementing classification test mode
    3.  
      About the PowerShell cmdlets for running classification in test mode
    4.  
      Understanding the classification test mode reports
  6. Using classification with smart partitions
    1.  
      About smart partitions
    2.  
      How Enterprise Vault determines whether to archive an item to a smart partition
    3.  
      Setting up smart partitions
    4.  
      Verifying that Enterprise Vault has archived items to smart partitions
  7. Appendix A. Enterprise Vault properties for use in custom field searches
    1.  
      About the Enterprise Vault properties
    2.  
      System properties
    3.  
      Attachment properties
    4.  
      Custom Enterprise Vault properties
    5.  
      Custom Enterprise Vault properties for File System Archiving items
    6.  
      Custom Enterprise Vault properties for SharePoint items
    7.  
      Custom Enterprise Vault properties for Compliance Accelerator-processed items
    8.  
      Custom properties for use by policy management software
    9.  
      Custom properties for Enterprise Vault SMTP Archiving
  8. Appendix B. PowerShell cmdlets for use with classification
    1.  
      About the classification cmdlets
    2.  
      Disable-EVClassification
    3.  
      Get-EVClassificationPolicy
    4.  
      Get-EVClassificationStatus
    5.  
      Get-EVClassificationTestMode
    6.  
      Get-EVClassificationVICTags
    7.  
      Initialize-EVClassificationVIC
    8.  
      New-EVClassificationPolicy
    9.  
      Remove-EVClassificationPolicy
    10.  
      Set-EVClassificationPolicy
    11.  
      Set-EVClassificationTestMode
  9. Appendix C. Classification cache folder
    1.  
      How Enterprise Vault caches the items that it submits for classification
    2.  
      Limits on the size of classification files
    3.  
      Configuring Enterprise Vault to keep the classification files in the cache folder
  10. Appendix D. Migrating from FCI classification to the Veritas Information Classifier
    1.  
      Converting FCI classification rules for use with the Veritas Information Classifier
  11. Appendix E. Monitoring and troubleshooting
    1.  
      Auditing
    2.  
      Checking the classification performance counters
    3.  
      Troubleshooting classification
    4.  
      Searching archives for items that the Veritas Information Classifier has classified

About the Enterprise Vault index properties

When an item matches a Veritas Information Classifier policy that you have defined, Enterprise Vault records the fact in the metadata properties of the item. The chosen property and the tag that Enterprise Vault assigns to it determine what Enterprise Vault does with the item. You can search for the assigned tags in applications such as Enterprise Vault Search, Compliance Accelerator, and Discovery Accelerator.

As Table: Enterprise Vault index properties for classification explains, Enterprise Vault can process the tags that are stored in four predefined properties only.

Table: Enterprise Vault index properties for classification

Property

Description

evtag.category

This property assigns one or more category values to an item when the item is added to Enterprise Vault. For example, you may want to assign the category value "US-PII" to items that contain U.S.-centric personally identifiable information, such as a North American telephone number or postal address.

evtag.exclusion

In environments where you use Enterprise Vault Compliance Accelerator, this property instructs the random sampling feature of that application to ignore any item that Enterprise Vault has classified with the property. (Where appropriate, however, Compliance Accelerator users can still add these items to their review sets by conducting searches for them.)

For example, you may want to use this property to exclude auto-generated news feeds, charity solicitations, and other unimportant items from Compliance Accelerator review sets.

evtag.inclusion

In environments where you use Enterprise Vault Compliance Accelerator, this property instructs the random sampling feature of that application to capture any item that Enterprise Vault has classified with the property. For the best results, use this property selectively to prevent Compliance Accelerator from randomly sampling an excessive number of items.

For example, you may want to use this property to include company-confidential items and items that contain financial or legal data in Compliance Accelerator review sets.

evaction.discard

By assigning the name of a retention category to this property of an item, you can mark the item for deletion.

The way in which Enterprise Vault handles such items depends on the point at which it classifies them.

  • During indexing. If an item is classified when Enterprise Vault indexes it, Enterprise Vault assigns to the item the retention category that you have chosen in the Veritas Information Classifier. You can no longer search for the item, but, for a limited number of days, you may be able to recover it. This is the case even if, in the archive settings for your Enterprise Vault site, you have chosen to disable the recovery of user-deleted items.

  • During automatic expiry. If an item is classified because its retention period has expired, Enterprise Vault immediately deletes the item.

  • During user deletion. If an item is classified because a user has tried to delete it then, depending on how you have configured the archive settings for your Enterprise Vault site, the item is either immediately deleted or temporarily recoverable.

This property overrides the other classification properties, such as evtag.inclusion. So, if one Veritas Information Classifier policy marks an item for deletion then it is deleted, even if a second policy tags the item for inclusion in a Compliance Accelerator review set.

Some items may not be eligible for deletion because, for example, they are on legal hold. Where this is the case, the classification feature updates the item's retention category but does not delete the item.

You can assign several tags to each of the four properties. For example, an email that the built-in Veritas Information Classifier policies have processed could have two values assigned to its evtag.category property, "Intellectual-Property" and "Corporate-Ethics", to indicate that it may contain both intellectual property source code and terms that deviate from your corporate code of conduct. The evaction.discard property differs slightly because, although you can assign several tags to it, Enterprise Vault uses the first assigned tag only.