Safetica ONE can search the properties of Microsoft Office documents for a data classification applied to the document by another software.
Information in this article applies to Safetica ONE 10 or older.
You can learn more about data categories in general here.
Supported third-party tools
Safetica is universally compatible with third-party classification tools that store classification information (tags) in document properties. We have specifically confirmed compatibility with the following classification tools:
- Microsoft Azure Information Protection
- Boldon James
- Tukan GREENmod
In this article, you will learn to:
- Create a data category based on existing classification
- Configure a data category based on existing classification
- Edit a data category
Create a data category based on existing classification1. Open Safetica Management Console and go to the Protection > Data categories section.
2. Click New data category, select Existing classification (metadata) with the slider, and enter the name and description for the category.
3. In the Advanced section, you can adjust Clipboard behavior:
- Moderate – the clipboard is restricted only if it’s used to transmit potentially sensitive content.
- Strict – the clipboard is always restricted based on DLP policies.
The Strict mode may result in unexpected propagation of data categories and limitations. Learn more here.
5. Click in the upper right corner to save the category.
Configure a data category based on existing classification
1. Select the newly created data category in the list on the left.
2. On the right, you will see its name and description as well as further management options. Click Configure data category.
- The Classification identifier column is for specifying the classification type in general.
- The Tag identifier column can be used for specifying the classification’s more specific parameter.
You can specify both fields, or leave one of them empty for more general detection of classified documents.
- The Regex checkbox is an optional setting for cases when you would like to search for regular expressions instead of a specific string.
Configuration using sample documents
In case you have access to sample classified documents from your company, you can use them to find the classification identifiers:
1. Open the document(s) in the Office suite.
2. Click File > Info > Properties > Advanced properties.
3. Under the Custom tab, you will find various properties.
4. Identify the one which is common for your classified files. Then simply copy its name (or a part of it) into the Classification identifier column. Optionally, copy its “value” into the Tag identifier column.
Here are examples of the final configuration parameters:
Microsoft Azure Information Protection
In case of AIP classification, the Tag identifier column may be left empty.
Configuration using Azure Information Protection
If you’re using Azure Information Protection classification capabilities, you can easily obtain the required information from the Azure AD admin center.
1. In the admin center, go to the Azure Information Protection section.
2. There, in the Policies section, you will find all existing policies:
3. Choose the policy you need detected by Safetica and open it. On the very bottom of the configuration window, you will find your Label ID:
4. For Safetica to register your Azure AIP-labeled files, you need to enter the following information into the Third-Party Classification window:
What will Safetica detect
All files classified by AIP, regardless of label ID
Files classified by AIP as “Confidential”
In case of AIP classification, the tag identifier field may be left empty.
How to edit or remove a data category
You can remove an existing data category or edit its name and description by clicking the Edit or Remove links next to the relevant data category in the list on the left.