Classification Rules
|
Limited Availability: To access inline Classification Editor, contact Skyhigh Support or your account manager for assistance. |
Classification rules allow you to categorize files based on their confidentiality and enforce security policies associated with that confidentiality level. This helps you protect sensitive information and encourage smarter user behavior when handling that content. Classifications for Skyhigh CASB-based policies refer to the Classification tags that are part of the file metadata. These classifications are imported from cloud services and available for use with Azure Information Protection, Box, Trellix Endpoint DLP, and SharePoint.
NOTE: Classifications for UCE-based policies refer to the DLP rules defined for all Skyhigh Security products. These Classifications are created and managed in on-premises ePO or in the Classification editor in Skyhigh CASB.
Edit or Create an Inline Classification Rule
When setting up a classification rule within a DLP policy, the interface allows you to view the details of the Classification Editor. This provides the convenience of editing the existing classification within the DLP policy creation workflow, eliminating the need to navigate back to the Classifications editor to make necessary changes. Additionally, it enables you to create real-time inline classifications as needed.
To create or edit an inline classification rule:
- In the Skyhigh CASB, go to Policy > DLP Policies > DLP Policies.
- Click Actions > Sanctioned Policy > Create New Policy
- On the Description page, enter the Name of the policy, select Deployment Type and Services, and include or exclude Users as applicable.
- On the Rules & Exceptions page, select Classification rule.
The Select Classifications panel appears. - On the Select Classifications panel, click the plus (+) icon to view the classification group. Additionally, you can create a new classification by clicking New. The newly created classification will be available in the list of classifications.
- Click the information (i) icon next to the classification name to see the Classification details.
The Classification editor panel appears. - You can edit the name, description, rules, operators, and rule groups. This helps you modify the classification as required, preventing you from navigating back to the Classification editor and performing the changes.
- Click Save.
The changes are saved.