> For the complete documentation index, see [llms.txt](https://docs.guardware.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.guardware.com/protect/encryption-and-policies/protect-and-mip.md).

# PROTECT and MIP

{% hint style="info" %}
To use MIP integration with Guardware, your organisation must have a Microsoft licence that includes Microsoft Purview Information Protection (sensitivity labelling) capabilities, such as Microsoft 365 Business Premium, Microsoft 365 E3, Microsoft 365 E5, Azure Information Protection P1/P2.
{% endhint %}

For Microsoft Office files, PROTECT works with Microsoft Purview Information Protection (MIP) to apply protection based on the file's classification. All other file types are protected with GuardWare PROTECT. 

Based on the file classification selected by users while adding or changing the file protection, the protection mode is applied, determining whether the file is protected using only MIP or both MIP and GuardWare PROTECT.

For example, the following protection modes are configured in [PROTECT Settings](#protect-settings):

| Classification | Protection mode |
| -------------- | --------------- |
| Public         | MIP Only        |
| Confidentail   | PROTECT and MIP |

Now, when a user adds or changes file protection through the [Windows Explorer right-click menu](/protect/protect-features/protect-features.md#add-file-protection):

* Selecting **Public** applies MIP protection only.
* Selecting **Confidential** applies both PROTECT and MIP protection.

## How MIP works

For MIP only protection setting, Microsoft Office files are protected with Microsoft Purview Information Protection (MIP). MIP secures Office files by applying classification labels and enforcing encryption and access controls at the file level. When a file is classified (for example, Confidential or Highly Sensitive), MIP:

* Encrypts the file using Azure-based protection.
* Assigns permissions to specific users or groups.
* Verifies the user’s identity when the file is opened.
* Enforces usage rights such as view, edit, copy, or print.

This protection travels with the file, ensuring that only authorised users can access it, even if it is shared outside the organisation. 

## How MIP and GuardWare PROTECT work together 

For PROTECT and MIP protection setting, GuardWare PROTECT and MIP work together to apply protection based on the sensitivity of the file. MIP first applies its classification-based encryption and permission controls, after which PROTECT adds an additional layer of encryption and access control. It:

* Controls whether a file can be accessed at all.
* Enforces access based on Security Groups.
* Prevents unauthorised tools or environments from opening the file.
* Allows access to be revoked at any time.

| Protection Mode     | Office Documents                                       | Non-Office Files                  | Key Benefits                                                                                                                                                                                                    | Typical Use Cases                                                                                                                            |
| ------------------- | ------------------------------------------------------ | --------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- |
| **MIP Only**        | Protected using Microsoft Information Protection (MIP) | Protected using GuardWare PROTECT | Delivers a native Microsoft Office experience while leveraging existing Purview labels, policies, and workflows. Simplifies adoption for organisations already invested in the Microsoft security ecosystem.    | Organisations using Microsoft Purview, Microsoft 365-centric environments, and compliance-focused deployments.                               |
| **PROTECT and MIP** | Protected using both MIP and GuardWare PROTECT         | Protected using GuardWare PROTECT | Combines Microsoft classification and compliance capabilities with GuardWare's persistent protection model. Helps organisations maintain consistent protection across a wider range of collaboration scenarios. | Security-conscious organisations, regulated industries, critical infrastructure, engineering and intellectual property-focused environments. |

## Selecting a Protection Mode

The appropriate protection mode depends on your organisation's security strategy and existing technology investments.

* **Choose MIP only** if you already use Microsoft Purview sensitivity labels and want Microsoft Office documents to remain protected through Microsoft's native protection framework while using GuardWare PROTECT for other file types.
* **Choose PROTECT and MIP** if you want to combine Microsoft classification and compliance capabilities with GuardWare protection for Office documents, providing additional control over sensitive information throughout its lifecycle.

## PROTECT Settings

PROTECT Settings determine how protection is applied to Microsoft Office files. This allows you to use MIP protection for Office documents while continuing to apply GuardWare PROTECT's encryption to all other files.

1. Navigate to **ORGANISATION** > **Integrations**.
2. For each file classification, select **MIP Only** or **PROTECT and MIP a**ccording to your requirement.
3. Click **Submit**.<br>

   <figure><img src="/files/ToVD5SHbrJpt76p1yS0I" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.guardware.com/protect/encryption-and-policies/protect-and-mip.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.