Advanced Settings

Advanced Settings define the global monitoring parameters applied across audit reports and device policies in GuardWare INSIGHT. They function as the central control point for how monitoring is configured and enforced across the organisation.

These settings determine how INSIGHT operates on end-user devices, including the methods used to monitor the movement of sensitive data, the applications, URLs, and file extensions that are included or excluded from monitoring, and the configuration of communication between devices and the server.

Reference Table

The table below provides an overview of every Advanced Setting and what it does.

Section	What it does
Environment Settings	Controls the intervals, durations, timeouts, and bandwidth settings for uploading reports and downloading policies and commands.
Applications Monitored at Network Level	Lists applications monitored for sensitive data uploads at the network level.
IP Addresses Not Monitored at Network Level	Lists IP addresses that are not monitored for sensitive data.
Websites Monitored at Network Level	Lists certificate common names for which SSL traffic is, or is not, monitored.
Websites Monitored by Chromium Extensions	Lists URLs for which traffic is, or is not, monitored by Chromium Extensions.
Applications Monitored at File System Level	Lists applications monitored for sensitive data uploads at the file system level.
Applications Excluded from Keystroke Monitoring	Lists applications where keystrokes are not monitored for sensitive data.
Websites Excluded from Keystroke Monitoring	Lists websites where keystrokes are not monitored for sensitive data.
Applications Excluded from Copy/Paste Monitoring	Lists applications where copy/paste activity is not monitored for sensitive data.
Websites Excluded from Copy/Paste Monitoring	Lists websites where copy/paste activity is not monitored for sensitive data.
File Extensions Monitored at File System Level	Lists file extensions that are, or are not, monitored at the file system level.
Websites with End-to-End Encryption	Lists websites with end-to-end encryption.

Create an Advanced Setting

Before configuring any monitoring parameters, an Advanced Setting policy must be created first. Once created, it starts in an Inactive state and must be configured before it can be activated and applied to devices.

1. Navigate to INSIGHT > Advanced Settings.
2. Click + New Advanced Setting.

1

Configure Policy Info

1. In the Policy Info tab, fill in the following fields and click Next:

   

   1. Copy Settings From (Optional): Select an existing Advanced Setting to copy its configuration into this new one. Useful for duplicating a baseline policy instead of starting from scratch.
   2. Setting Name: Enter a clear, identifiable name for the setting.
   3. Description: Briefly describe what this setting is for, who it applies to, or how it differs from other settings.
   4. Set as Default Setting (Optional): Marks this as the organisation-wide default. Only one default setting can be active at a time; it is automatically assigned to all newly created users and can be duplicated to create policy variations from a common baseline.

2

Configure Settings

Once created, the Advanced Setting starts in an Inactive state. Configure the required settings, then activate when ready to apply to devices. Each setting can be enabled or disabled. Disabling a setting reverts it to its default state, disabling the associated functionality.

Environment Settings

Controls the intervals, durations, timeouts, and bandwidth settings for uploading reports and downloading policies and commands.

Setting	Default	Description	When to Change
Client Responsiveness	Normal Operation	Determines how frequently agents download commands and settings and upload reports. Very Responsive, Responsive, and Normal Operation correspond to intervals of 1 minute, 5 minutes, and 15 minutes respectively.	Increase responsiveness if near-real-time policy enforcement is required. Be aware that shorter intervals increase network and system overhead.
Enable Chromium Extensions	Disabled	An alternative approach to monitoring browsers at the network level.	Enable if network-level browser monitoring is insufficient or unavailable in the environment.
Incognito / Private Browsing	Incognito / In Private mode browsing allowed	Controls whether users can open private browsing windows. Enable Enable Chromium Extensions to access this setting. Chromium Extensions cannot be forced to load in private windows, except in Microsoft Edge.	Block private browsing to prevent unmonitored activity. Allow it without monitoring only where appropriate. Select the Microsoft Edge option to allow and monitor Edge private windows while blocking private browsing in other browsers. Use network monitoring when users need private browsing in browsers other than Edge.
File System Level Monitoring	Enabled	Uses a file system level driver to monitor uploads through changes in the network information associated with files.	Disable if file system-level monitoring is not required or conflicts with existing endpoint software.
Passive Monitoring of File Uploads to Cloud Drives	Disabled	An alternative approach to monitoring file uploads to cloud drives at the file system level.	Enable if file system-level monitoring does not adequately capture cloud drive upload activity.
Network Level Monitoring	WFP	WFP and LSP are Windows networking technologies used to inspect network traffic.	Switch to LSP if WFP is incompatible with the environment or conflicts with other network drivers.
USB Monitoring	Enabled	Monitors insertions of, and file transfers to, USB devices.	Disable only if USB monitoring is managed by a separate solution or is not required in the environment.
GuardWare File Protection	Enabled	Prevents end users from editing or deleting files within the GuardWare Program Files and Program Data folders.	Disable temporarily for maintenance or troubleshooting only.
GuardWare Process Protection	Enabled	Prevents end users from terminating the main GuardWare processes.	Disable temporarily for maintenance or troubleshooting only.

Applications Monitored at Network Level

List of applications that are monitored for sensitive data uploads at the network level. The proxy can only monitor applications that are explicitly on this list. If an application is not selected, its traffic will not be captured.

1. Click + Add Setting to open the configuration window.
2. A default set of applications is preselected for monitoring. To add more, use the search field to find the application and select the checkbox next to it.
3. If the application does not appear in the list, enter the executable name (e.g., chrome.exe) in the Add Application field and click Add Application.
4. Once added, select the checkbox next to it to include it in monitoring.

IP Addresses Not Monitored at Network Level

List of IP addresses that are not monitored for sensitive data. The list shows excluded IP addresses used by internal applications that are considered secure and do not need monitoring for the uploading of sensitive data.

1. Click + Add Setting to open the configuration window.
2. Enter the IP address in the Add IP field and click Add IP.
3. Confirm the IP address appears in the list and close the window

Websites Monitored at Network Level

List of SSL certificate common names included in or excluded from network-level monitoring.

1. Click + Add Setting to open the configuration window.
2. Select Include to monitor only listed websites. Select Exclude to monitor every website except those listed.
3. Search for and select a website, or enter its certificate common name and click Add Website.
4. Confirm the website appears in the list.

Websites Monitored by Chromium Extensions

List of URLs included in or excluded from monitoring by Chromium Extensions.

1. Click + Add Setting to open the configuration window.
2. Select Include to monitor only listed URLs. Select Exclude to monitor every URL except those listed.
3. Search for and select a website, or enter its URL and click Add Website.
4. Confirm the website appears in the list.

Applications Excluded from Keystroke Monitoring

List of applications where keystrokes are not monitored for sensitive data.

1. Click + Add Setting to open the configuration window.
2. Search for an application and select its checkbox to include it.
3. To remove an application, click X beside it in the Selected Applications list.

Websites Excluded from Keystroke Monitoring

List of websites where keystrokes are not monitored for sensitive data.

1. Click + Add Setting to open the configuration window.
2. Search for and select a website. Alternatively, enter its URL and click Add Website.
3. To remove a website, click X beside it in the Selected Websites list.

Applications Excluded from Copy/Paste Monitoring

List of applications where copy/paste activity is not monitored for sensitive data.

1. Click + Add Setting to open the configuration window.
2. Search for an application and select its checkbox to include it.
3. To remove an application, click X beside it in the Selected Applications list.

Websites Excluded from Copy/Paste Monitoring

List of websites where copy/paste activity is not monitored for sensitive data.

1. Click + Add Setting to open the configuration window.
2. Search for and select a website. Alternatively, enter its URL and click Add Website.
3. To remove a website, click X beside it in Selected Websites.

File Extensions Monitored at File System Level

List of file extensions included in or excluded from file system-level sensitive data upload monitoring.

1. Click + Add Setting to open the configuration window.
2. Select Include to monitor only listed extensions. Select Exclude to monitor every extension except those listed.
3. Enter the file extension in the Add Extension field (e.g., pdf, xlsx, zip) and click Add.
4. Confirm the extension appears in the list.

Applications Monitored at File System Level

List of applications that are monitored for sensitive data uploads at the file system level.

1. Click + Add Setting to open the configuration window.
2. A default set of applications is preselected for monitoring. To add more, select the checkbox next to the application in the list.
3. If the application does not appear in the list, enter the executable name (e.g., chrome.exe) in the Add Application field and click Add Application.
4. Once added, select the checkbox next to it to include it in monitoring.

Websites with End-to-End Encryption

List of websites with end-to-end encryption monitoring. For websites implementing end-to-end encryption, it is not possible to intercept file uploads using network monitoring alone.

Where end-to-end encrypted websites are permitted, and there is a concern that files containing sensitive data may be uploaded, both file system monitoring (file paths and contents) and network monitoring (destinations) are required in order to produce reports containing URL and file path information for the uploaded sensitive data.

1. Click + Add Setting to open the configuration window.
2. A default set of websites is preselected. To add more, enter the website in the input field using the format URL#Title_Substring (e.g., whatsapp.com#whatsapp) and click Add.
3. To remove a website, click X next to the entry.
4. Close the window.

3

Review & Save

1. Scroll to the top of the page and click Review & Save. A summary of all configured settings will appear in the side panel.

   
2. Review the configurations. To make any changes, close the panel, update the relevant settings, and click Review & Save again.

   
3. Once satisfied, click Save to apply the configuration.

Assign Advanced Settings to Devices

After creating an Advanced Setting, it can be assigned to devices from the Advanced Settings list. Devices assigned to a deleted setting automatically revert to the default setting (if it exists), which cannot itself be deleted.

1. Navigate to INSIGHT > Advanced Settings.
2. Click Assign Devices next to the setting you want to assign to a device.

   
3. Select devices to assign the setting to, or deselect them to remove the setting.
4. Click Add to apply changes.

• A device can have only one advanced setting assigned at a time.
• Multiple devices can be assigned to an advanced setting.
• When a new advanced setting is assigned to a device, the existing advanced setting is automatically removed and replaced.

Edit an Advanced Setting

1. Navigate to INSIGHT > Advanced Settings.
2. Click Edit next to the relevant setting.

   
3. The process follows the same steps as creating a new Advanced Setting. Update the required fields and settings.
4. Click Review & Save to review the changes.
5. Click Update to confirm changes.

Delete an Advanced Setting

1. Navigate to INSIGHT > Advanced Settings.
2. Click Delete next to the relevant setting.

   
3. Click Yes, Delete it! to confirm.