Encrypt by Data Type

A Data Type defines the type of information GuardWare recognises as sensitive, such as personal details, financial data, or confidential business information.

PROTECT automatically encrypts files when their contents match a configured Data Type. Data Types identify sensitive information using:

• Sensitive Words
• Regular Expressions
• Filename Expressions

When a match is detected, PROTECT encrypts the file and applies the classification assigned to the Data Type.

You must assign Security Groups to each Data Type to control who can access or decrypt the files that match that Data Type.

1. Sensitive Words

GuardWare scans files for predefined sensitive keywords or phrases. If it detects a word or phrase, PROTECT automatically encrypts the file.

Example:

1. Data Type: Payroll Documents
2. Data Identifier: Sensitive Words
3. Phrases: PAYSTUB

In this example, if PROTECT finds the word PAYSTUB in any file, it encrypts the file automatically.

2. Regular Expressions

Regular expressions are used to detect structured data patterns such as credit card numbers or identification numbers. If PROTECT finds a matching pattern, it automatically encrypts the file.

Example:

1. Data Type: Card Number Regex
2. Data Identifier: Regular Expression
3. Expression: (?:\d[ -]*?){13,19}

In this example, if a file contains a number that matches this pattern, PROTECT encrypts it.

3. Filename Expressions

PROTECT can automatically encrypt files based on their folder paths or filename patterns. These expressions can include:

1. Folder expression: Encrypt files stored in a specific directory or path.
2. File expression: Encrypt files that match certain naming patterns, regardless of where they are saved.

When a user creates, moves, or saves a file that matches a defined Filename Expression, PROTECT applies encryption even if the file content does not contain sensitive words or detection patterns.

Examples:

1. Folder expression:

   *\Desktop*\Confidential*
   *\Desktop\Confidential*
   \\192.168.0.5\Public\PROTECT\Confidential*

   In this example, PROTECT automatically encrypts files stored in or moved to a folder path containing “Confidential”.
2. File expression:

   *_salary.xlsx

   In this example, PROTECT automatically encrypts any file ending with _salary.xlsx.

Select Data Types

Select the Data Types that PROTECT should use to identify sensitive information. Only selected Data Types are available for Security Group assignment and automatic file protection.

1. Go to PROTECT > Protection Scope > Active Data Types.
2. Click Add Data Types.

   
3. In the available Data Types list, select the Data Types you want PROTECT to monitor and click Add Selected Data Type.

   

The selected Data Types appear in the list with the status Enabled. You can then assign one or more Security Groups to control access to files that match each Data Type.

Assign Security Group to a Data Type

1. Go to PROTECT > Protection Scope > Active Data Types. You’ll see a list of Data Types, including predefined and custom Data Types.
2. Search for the Data Type you want to assign. Enable the Data Type from the STATUS column if it is disabled. You can assign Security Groups only after the Data Type is enabled.
3. Click +Assign Security Group in the ACTIONS column.

   
4. Select the Security Groups you want to assign and click Assign Security Group. Only members of the assigned Security Groups can access the protected files.

   

Assign Data Type to a Security Group

1. Go to PROTECT > Protection Scope > Active Data Types. You’ll see a list of predefined Data Types.
2. Select the Security Groups tab.
3. Search for the Security Group and click +Assign Data Types in the ACTIONS column.

   
4. Select the Data Types you want to assign and click Assign Data Types. Only members of the assigned Security Groups can access the protected files.