Export or Import a Classification
You can export and import classifications across different tenants within the Data Loss Prevention (DLP) framework. This feature enables you to extract complex classification definitions—including regex patterns and dictionaries—from a source tenant and seamlessly apply them to a target tenant. By facilitating the movement of these classifications, the platform eliminates the need for manual recreation, significantly reducing administrative overhead and human errors. This functionality ensures consistent data protection and unified policy enforcement across your organization.
Export Classifications
This section details how you can export Classifications. You can export Classifications from two locations:
From the Classifications page
- Log in to SSE and go to Policy > DLP Policies > Classifications.
The Classifications page opens. - From the Classifications table, select all the required Classifications checkboxes that you want to export.
NOTE:
-
You can only export Custom Classifications. The Export Classifications option is enabled when one or more Custom Classifications are selected. If you select both Custom and Pre-Canned Classifications, only the Custom ones will be exported. Note that you cannot export Pre-canned Classifications.
-
The Classification Categories, if any, assigned to a Classification marked for export, will not be exported.
-
From the Actions drop-down, select Export Classifications.
This exports Classifications successfully in a .zip format. The export is validated by a green bar displaying the message Classifications exported successfully at the bottom of the page.
From the Classification Cloud Card
- Log in to SSE and go to Policy > DLP Policies > Classifications.
The Classifications page opens. - From the Classifications table, click the required Classification that you want to export.
The Classification Cloud Card opens.
NOTE:
-
You can only export Custom Classifications. The Export Classifications option is enabled when one or more Custom Classifications are selected. If you select both Custom and Pre-Canned Classifications, only the Custom ones will be exported. Note that you cannot export Pre-canned Classifications.
-
The Classification Categories, if any, assigned to a Classification marked for export, will not be exported.
-
From the three-dots icon, select Export.
This exports Classifications successfully in a .zip format. The export is validated by a green bar displaying the message Classifications exported successfully at the bottom of the page.
Import Classifications
This section details how you can import Classifications.
NOTE:
-
Exact Data Matching (EDM) criteria are currently not supported.
-
If there are multiple criteria, including EDM, then the EDM criterion will not be included during the import. If the Classification rule includes only one criterion and it is EDM, then the classification will not be imported.
To import Classifications:
-
Log in to SSE and go to Policy > DLP Policies > Classifications
The Classifications page opens. -
From the Actions drop-down, select Import Classifications.
-
On the Import Classifications dialog box, click Browse to upload an applicable .zip file and click Import.
This imports the Classification successfully. The import is validated by a green bar displaying the message Classifications imported successfully at the bottom of the page.
Use Cases
Multi-tenant Configuration
For example, you are an admin of a large organization who has defined complex custom data classifications in one of your tenants. When you want to export preferred classifications to the desired destination tenant, you can select single or multiple classifications within your tenant and ensure that all dictionaries, patterns, and associated resources are captured in the export file. Once exported, you can log in to the destination tenant and import the file. The destination tenant will now have identical classifications without the need for manual recreation.
Validate Policy Integration
Suppose you, as an admin, intend to perform a backup or migration of both policies and classifications separately. During migration or backup, it is anticipated that there would be a data loss or a break in synchronization of policy and classifications. However, the DLP policy continues to function correctly with the classification references remaining intact post-import/migration, validating the policy and classification integration.
Update Existing Classifications
For instance, an admin has previously imported a classification into a destination tenant. In the source tenant, they subsequently make a few changes with regard to dictionaries, patterns, etc. Later, the modified source classification is re-imported to the destination tenant. You must note that all the imported data will be updated, including any referenced dictionaries or patterns that have changed. If these changed components are referenced by other classifications in the destination tenant, then their behavior will also be updated following the re-import.
If the Classification name is changed in the source tenant, then when re-imported into the destination tenant, the existing classification will not be updated, but a new classification will be additionally created. Any references to the classification in policy should be updated.