Encrypt by Data Type

A Data Type defines the type of information GuardWare recognises as sensitive, such as personal details, financial data, or confidential business information. For details on Data Type, see here.

PROTECT automatically encrypts files when their contents match a configured Data Type. Data Types identify sensitive information using:

• Sensitive Words
• Regular Expressions
• Filename Expressions

When a match is detected, PROTECT encrypts the file and applies the classification assigned to the Data Type.

You must assign Security Groups to each Data Type to control who can access or decrypt the files that match that Data Type.

1. Sensitive Words

GuardWare scans files for pre-defined sensitive keywords or phrases. If any of the words or phrases are detected, PROTECT automatically encrypts the file. Example:

1. Data Type: Payroll Documents
2. Data Identifier: Sensitive Words
3. Phrases: PAYSTUB In this example, if PROTECT finds the word PAYSTUB in any file, the file is automatically encrypted.

2. Regular Expression

Regular expressions are used to detect structured data patterns such as credit card numbers or identification numbers. If PROTECT finds a matching pattern, it automatically encrypts the file.

Example:

1. Data Type: Card Number Regex
2. Data Identifier: Regular Expression
3. Expression: (?:\d[ -]*?){13,19} In this example, if a file contains a number that matches this pattern, PROTECT encrypts it.

3. Filename Expression

PROTECT can automatically encrypt files based on their folder paths or file-name patterns. These expressions can include:

1. Folder expression: Encrypt files stored in a specific directory or path.
2. File expression: Encrypt files that match certain naming patterns, regardless of where they are saved.

When a user creates, moves, or saves a file that matches any defined Filename Expression, PROTECT applies encryption even if the file content does not contain sensitive words or detection patterns.

Examples:

1. Folder expression: *\Desktop*\Confidential* *\Desktop\Confidential* \192.168.0.5\Public\PROTECT\Confidential* In this example, any file stored in or moved to a folder path containing the word “Confidential”, whether on a local desktop or network location, will be automatically encrypted by PROTECT.
2. File expression: *_salary.xlsx In this example, any file that ends with “_salary.xlsx”, no matter where it is saved, will be automatically encrypted.

Select Data Types

Select the Data Types that PROTECT should use to identify sensitive information. Only selected Data Types are available for Security Group assignment and automatic file protection.

1. Go to PROTECT > Encrypt by Data Type and click Add Data Types.
2. In the available Data Types list, select the Data Types you want PROTECT to monitor and click Add Selected Data Type.

   

The selected Data Types will appear on the list with status Enabled. You can then assign one or more Security Groups to control access to files that match that Data Type.

Assign Security Group to a Data Type

1. Go to PROTECT > Encrypt by Data Type. You’ll see a list of Data Types (both pre-defined and custom).
2. Search for the Data Type you want to assign. Enable the data type from the STATUS column if it is disabled. You’ll only be able to assign Security Groups once the Data Type is enabled.
3. For Filename Expression, select Encrypt or Decrypt in Folder Rule.

   • Select Encrypt to automatically encrypt all files that match the specified filename expression when they are moved to the designated folder.
   • Select Decrypt to automatically decrypt all files that match the specified filename expression when they are moved to the designated folder.

     
4. Click +Assign Security Group in the ACTIONS column.

   
5. Select the Security Groups you want to assign and click Assign Security Group. Only the assigned Security Group members can access the protected files.

   

Assign Data Type to a Security Group

1. Go to PROTECT > Encrypt by Data Type. You’ll see a list of pre-defined Data Types.
2. Select the Security Groups tab.
3. Search for the Security Group you want to assign and click +Assign Data Types in the ACTIONS column.

   
4. Select the Data Types you want to assign and click Assign Data Types. Only the assigned Security Group members can access the protected files.