FAQ | Data443 Cyber Security, Blockchain, GDPR, Data Classification, Identity Governance

Q: What makes ClassiDocs different?A: ClassiDocs is the only product on the market with a wide-ranging, feature-rich capability set that includes:
* all-enterprise scale processing for every data point in your IT estate
* continuously validated and maintained data classification policies and rulesets
* classification of data as it is created, used and forwarded – iceberg (long stored) is also classified (and re-classified on demand)
* classification based on corporate policies and end-user feedback
* a user-first, branded experience that requires no specific training
* multi-steward management and real-time oversight
* fast, cost effective deployment with your existing infrastructures (Cloud or Hybrid)

Q: What types of data files does ClassiDocs classify?A: ClassiDocs inventories and classifies your entire data estate, including structured data; unstructured data; all end points; cloud data drives (any attached/mapped storage); databases; email; blockchain; and data at rest and in flight.

ClassiDocs supports over 200 file types:

ClassiDocs supports over 400 structured databases:

Q: What platforms and other technology solutions does ClassiDocs support?
A: ClassiDocs integrates natively with DLP, CASB, SIEM, cloud solutions, and most any industry-specific software package that supports a RESTful API. The product supports over 200 file types and 400 databases and can deploy within most any existing platform, including Microsoft Office, Windows XP, Outlook, Autodesk, AutoCAD, and related stack.
Q: Can ClassiDocs classify on the Apple/Mac platform?
A: ClassiDocs network scanners can classify any documents stored on network repositories. A native Linux scanner for “data at rest” is in the lab today. This will be used for Mac OS X and other Linux variants. Today, we fully support Microsoft Office on Mac with our universal classification add-in. This allows for classification actions from all parts of the Office for Mac platform.

The Apple platform does not allow or enable local file scanning without significant user interaction; we are working on solutions for this issue.

Q: Does ClassiDocs work with or against Microsoft Azure Information Protection (AIP/MIP)?

A: Many customers receive AIP as part of their existing licensing agreements. We work closely with the technology through the Microsoft Interoperability Program (MIP) to expand its scope and capabilities, including reach across cloud platforms and into the endpoint estate. In short, AIP is a great platform for data protection within a specific platform scope, as outlined below.

1. AIP will only classify data “at rest” if it is stored in Azure.
i. Data on laptop/desktops “at rest” will not be classified thus NOT protected.
ii. Data “at rest” on NAS/SAN will not be classified thus NOT protected.

2. AIP will not register documents for protection if they are created in Office Online (i.e., add-ins don’t yet support AIP).
a. ClassiDocs is the longest standing partner for AIP.
i. We classify ALL data no matter where it is, even on other clouds.
ii. All of this data can be registered with AIP for protection profiles.

3. AIP does not classify any database or cloud web services data (e.g., Salesforce); ClassiDocs supports over 400 database types.

4. AIP does not classify many file types outside of Office-related files; ClassiDocs classifies over 200
file types.

5. ClassiDocs shares classification rules and policies with other platforms such as Web Proxies, CASB,
DLP, and Firewalls directly.

Aside from the administrator console, there is a special interface that is designed to be used primarily by the Classification/Governance Administrator. This person (generally not an IT employee), is able to directly manage policy and rule changes to the classifications themselves. This is a unique feature of the ClassiDocs solution and enables the business to manage directly their security rules, increasing ruleset accuracy and reducing reliance on the IT department for daily changes. Additionally, this allows the Governance Administrator to see direct end-user feedback on the classification policies from the end-users themselves – directly “crowd sourcing” classification rules and policies from data users and creators.

In the event the file type does not support native metadata tagging, ClassiDocs will stamp the filesystem with the same data so it may be still read/parsed by other platforms as well. In all cases, the information is recorded in the ClassiDocs backend repository and is available for direct query at any time. Additionally, all of this information is available via a RESTFul API call from any other platform that may wish to validate the more recent classification for the file or any/all previous classifications for the same file.

Optionally, we also have a Classification WebService available that will receive ANY streamed text information or supported file type and will classify that on the fly. This is important for platforms that either don’t support a rich RESTFul API call (perhaps an older mainframe or AS/400 application that may need a classification for some text) or a security appliance that focusses on recompiling files and needs them classified on the fly such as a web proxy or CASB solution.

ClassiDocs agents will attach to the data repository and discover the database schema, crawl the tables and columns, and take the policies/rules (text patterns, regex) stored in the ClassiDocs backend and compute a classification – right down to the Tuple level. This information is recorded completely (and only) in the ClassiDocs backend repository. This information can then be retrieved or managed as you see fit.

Importantly, this functionality gives you an instance and completely up-to-date classification of your entire database estate – continuously. Every CIO wants a complete inventory of databases – ClassiDocs gives you that PLUS continuously applied classification as the data lives within your organization. So even if a classification changed 30 minutes ago, the new classification is reflected in real-time.

In many cases, however, mail clients that are not native Outlook clients use corporate email, for example, Apple iPhone Mail attached to an Exchange domain for a corporate mailbox. There is no capability for a native add-on in that framework in order to manage classification and any mail egress/blocking rules. This is why we have developed a Native Microsoft Exchange mail transport agent (MTA) that utilizes native Microsoft and ClassiDocs APIs to both classify and apply rules based on classifications to ALL mail transacting any on-premise Microsoft Exchange system or Office365 tenant. This MTA will classify all mail passing through the mail system with the same rules that are applied to normal classification interfaces, e.g., the same rules as Microsoft Word, and then block, notify or add headers to the mail message. So, even if you happen to be using iPhone mail to Exchange, or PC-Eudora on Windows 3.1 with IMAP attachments to Office365, ClassiDocs is still able to classify, tag, and action mail – regardless of the mail client in use. This is an exclusive built-in feature of the ClassiDocs product.

For PDF’s that encase rasterized images such as a fax machine that receives inbound faxes and stores them on a hard drive, ClassiDocs opens the PDF and OCR (Optical Character Recognition) so it can parse the contents, in others words, find all of the letters/characters so the system can read them. We also have options available for native in-line OCR of image files for classification, please contact us to discuss.

Q: Does ClassiDocs classify JPEGs? How?
A: Yes, ClassiDocs classifies these files as described above.
See: Does ClassiDocs classify PDFs? How?

Q: Does ClassiDocs classify scanned documents? How?
A: Yes, ClassiDocs classifies these files as described above.
See: Does ClassiDocs classify PDFs? How?


Article by channel:

Read more articles tagged: Security Governance