policy setup guide
4. Deploy your data control policy to a small number of computers to make it easier to analyze data control events triggered by the policy.
5. Use the data control Event Viewer to view data being used, check for any weaknesses in the test configuration (e.g. a rule being too sensitive and generating a higher than anticipated volume of events). You can access the Event Viewer by clicking Events > Data Control
Events.
6. Once the policy has been tested, you can make any required adjustments and roll it out to a larger set of computers within your company. At this stage, you may decide to:
■
■
Change the actions for some rules as necessary to Allow transfer on acceptance by
user and log event or Block transfer and log event.
Create different policies for different groups. For example, you may want to allow computers within the human resources department to transfer personally identifiable information, but prevent all other groups from doing so.
For more information on setting up data control policy, see the Sophos Enterprise Console help.
7.4 Understanding data control scanning within applications
The following is a list of the content or actions that are scanned or not scanned within supported applications.
For a complete list of known limitations with data control, see Sophos support knowledgebase article 63016 ( http://www.sophos.com/en-us/support/knowledgebase/63016.aspx
).
Applications
Web browsers
Email clients
Data Control Scanning Actions
Scanned:
File uploads
Webmail attachments
Microsoft SharePoint uploads
Not scanned
Webmail message content
Blog entries
File downloads
Note: In a small number of cases, files may be scanned when downloaded.
Scanned
Email attachments
Not scanned
Email message content
Forwarded attachments
21
Sophos Enterprise Console
Applications Data Control Scanning Actions
Attachments made using the "Send" email option within applications
(e.g. Windows Explorer and Microsoft Office)
Attachments using the "E-mail this file" option within Windows
Explorer
Attachments copied from one email to another email
Saved attachments
Note: In a small number of cases, files may be scanned when saved.
Instant messaging (IM) clients
Scanned
File transfers
Note: A file may be scanned twice: once upon upload to the IM client and again upon acceptance by the recipient. Both scans occur on the sender's computer.
Not scanned
IM message content
Sent files
22
