Data At Rest triggers include settings that let you specify which types of document you want the CFSA to scan. For example, you can edit the triggers to detect specific file formats (such as Microsoft Word documents) and analyze a file’s text content. This section focuses on the key Data At Rest settings for the CFSA.
In each Data At Rest trigger, this setting instructs the trigger to analyze files or documents captured by various CA DataMinder agents.
Important! Verify that the Client File System Agent check box is selected! This enables the trigger to analyze local files scanned by the CFSA.
All Data At Rest triggers include Top Level File Lists. Use these lists to detect normal files or zip files. You edit these lists to identify the names of files that you want to apply policy to when a scan runs. For example, you can specify:
For each trigger, you can choose whether to use an Included, Excluded, or Ignored file list.
If required, Data At Rest triggers can look for files contained within a zip file or embedded in a master file. To do this, edit the Individual/Embedded File Lists. For each trigger, you can choose to use an Included or Excluded file list.
Using these lists in conjunction with the Top Level File Lists, you can feasibly search all .zip files for a specific file. For example, set Included Top Level Names to *.zip and Included Individual/Embedded File Names to *.doc to search for all .doc files contained within .zip files.
Data At Rest control actions also support ‘copy’ actions, permitting you to copy scanned files to an alternative location. When used in combination with a ‘delete’ actions (see below), a copy action effectively becomes a ‘move file’ action.
In each Data At Rest control action, the Intervention setting determines how CA DataMinder handles scanned files. The available options allow you to categorize or delete scanned files. If necessary, you can specify DoD deletions; these ensure that deleted files cannot be recovered (see below). You can also replace deleted files with an explanatory stub file to alleviate any user concerns or categorize the resulting file event.
Note: DoD deletion is forensic deletion, so called because the storage media are purged to ensure that a file cannot be recovered and used to obtain evidence in legal discovery. ‘DoD’ is a reference to Department of Defense approved methods for purging storage media.
|
Copyright © 2014 CA.
All rights reserved.
|
|