Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Table of Contents
maxLevel6
minLevel1
include
outlinefalse
indent
exclude
typelist
printablefalse
class

Troubleshooting

Classification Issues

Frequently Asked Questions (FAQ)

Expand
titleHow to convert Classification Logs to Database
Info

With the database option from the GEODI classifier settings interface, you can write the classification logs on the database by giving only a table name. Classification logs are automatically written to the table with the given name.

Expand
titleHow to Classify Files that are on Remote PCsCan we store classification logs in a database, syslog, CEF, or CSV format?
Info

The result format is selected from the GEODI classification settings interface.

GEODI Classifier Logs

Expand
titleCan we classify files discovered with GDE on remote PCs in-place?
Info

If you have a Classification license for the documents coming to the GEODI server via through GDE, you can query the and classify documents via through GEODI ES and classify them , performing the classification on the source machine. Our The machine where the classification will take place must have our Classifier and GDE solutions must be installed on the machine to be classifiedinstalled.

Expand
titleHow long does it take for Classifier setting changes to take effect on clients?
Info

It will be updated automatically and within approximately 10 minutes.

Expand
titleDoes the date of the classified documents change?
Info

No, GEODI classification tools preserve the file date.

Expand
titleIs GEODI compatible with the DLP we useCan we exclude data related to organization employees from discovery/classification rules?
Info

Yes, in the GEODI Classification Management Interface, you can exclude email sent by users within the same domain from classification

Expand
titleCan classification be performed in Linux, Mac, or SharePoint environments?
Info

The GEODI works with ForcePoint, Safectica, Trend Micro, McAfee, Symantec and Palo Alto DLP products. It can also work with other DLP products. The flexible labeling structure of GEODI Classifier tools can adapt to any DLP. NTFS Alternate Data Stream (ADS) method is used for file formats that do not support tags.

If there is a compatibility issue you are hesitant about, please contact us.

Expand
titleGEODI Classifier Add-In Cannot View

“Slow and Disabled COM Add-ins” that you should check if the GEODI Classifier Add-In is seen as passive. GEODI Classifier should not be disabled.

Sometimes all add-ins can be disabled automatically by MS Office when very large files are encountered. These features should be checked.

...

Clients will be updated in about 10 minutes when the Classifier settings are changed in the GEODI interface.

...

If office add-ons or Desktop Classification is not active

  • Check that the client installation is complete

  • Must have access to the GEODI server

  • GEODI Token validity must be checked

...

Installation can be performed in an environment without internet / in cases where GEODI cannot be reached. The Classifier plugin is automatically activated when a connection to GEODI is established.

...

ADS is used for classification in other file types except for MS Office and PDF files. In a classified file, whether the classes are preserved or not as a result of the following operations are written.

  • The name of the file has been changed (Class Preserved).

  • The file extension changed. txt → log - mp4 → avi (Class Preserved)

  • The file was copied to another computer without GEODI Classifier and checked (Class Preserved)

  • File copied over RDP connection (Class Not Preserved)

  • Classified, uploaded to Wetransfer, and downloaded. (Class Not Preserved)

  • The file has been classified. Compressed as rar/zip and extracted. (Class Not Preserved)

...

In case there is no access to the GEODI server, manual classification can be used. You can use other classes except for automatic classification through the last meta in communication with GEODI.

  • When connected to the GEODI server, the operations performed are logged.

  • In Shell classification, the automatic option is unavailable if it is not connected to the server.

  • In the Office plugin, "automatic (offline)" is displayed if the server is not reachable.

  • Changes made (adding a class) or falling off the server are checked periodically (5 minutes), not instantly, so as not to slow down your operations. For this reason, the changes made are not instantly reflected on the Add-In and Shell interface.

Suppose many emails are sent for Mail Merge use when the %AutoClass% statement is added to the document to be classified. In that case, it is automatically classified without asking for the class when sending multiple emails.

...

For example, if a mail merge is made over Word when %AutoClass% is written in the document, the classification is created automatically, and the class is not asked for every mailing.

...

classification solution works on Windows computers. Data discovery can be performed on Linux, MacOS, or SharePoint.

Expand
titleCan I use two classification solutions simultaneously?
Info

Yes, GEODI can adapt to the labeling scheme of an existing classification tool. This way, you can continue to use both simultaneously without additional work on the DLP side.

Expand
titleCan Header/Footer and Watermark be multilingual?
Info
  • Yes. It will decide based on the machine language. You can define multiple languages simultaneously.

  • You can use values like usernames in these settings.

  • You can define multiple lines.

  • GEODI Classifier Label/Tag Definitions

Expand
titleCan databases be classified?
Info

There is no concept of writing labels to databases. However, GEODI classification tools can report the classification of a database record and enable you to take action based on this report.

Expand
titleCan GEODI Classifier understand documents classified with a different classification tool?
Info

Yes. As long as the labeling scheme is the same, it doesn't matter which tool was used for classification. The GEODI classification tool understands the class of a previously classified file and behaves according to policy settings.

Expand
titleCan we disable automatic classification for a specific group?
Info
  • Yes, with GEODI Classification Policy Manager, you can create variations based on groups, individuals, IP addresses, software (Word, Excel, etc.). It can be set to automatic only for one user group, manual only for others, or disabled for a specific user group if needed.

  • Changes in rules will take effect on clients approximately 10 minutes after modification.

  • GEODI Classifier Label/Tag Definitions

Expand
titleCan I perform batch classification?
Info
  • Data indexed with GEODI can be selected and automatically or manually classified. This applies to data coming from folders and GDE data sources. Labels will be written to the respective files or as alternate data streams (ADS).

  • GEODI Classifier Batch Classification

Expand
titleHow many clients can a GEODI server support simultaneously?
Info

A server specified in the system requirements for automatic classification can support 3000+ users.

Expand
titleDo agents strain the endpoint?
Info

No, the GEODI Classification and GDE (Discovery) agents are designed to impose minimal load on the endpoint/client machines.

Expand
titleIs GEODI Data Discovery necessary for classification?
Info

No, you can use classification independently without data discovery. However, the identifiers and rules that come with GEODI Data Discovery will enhance the performance of automatic classification.

Expand
titleWhat does Semantic Classification mean?
Info

It is the classification of files discovered in GEODI based on query results.

Expand
titleCan we verify the accuracy of manual classification by analyzing the logs?
Info
  • GEODI logs include the given class and potential automatic class. By using this information, situations like class upgrades or downgrades can be analyzed. Permission for class downgrade depends on policy settings.

  • GEODI Classifier Logs

Expand
titleIs 'Allow Class Lowering' permitted?
Info

Depending on policies, you can allow or prohibit class lowering for all or specific sets of users. You can also use the rule that prohibits giving a class below automatic classification.

Expand
titleCan the removal or deactivation of agents and plugins be prevented?
Info

Yes, by default, Office plugins cannot be removed or deactivated by a Windows user.

Expand
titleHow do I exclude email signatures?
Info

The dictionary operations used in personal data detection can be applied to email signatures.

The method of adding email signatures when sending an email can be performed. The method used for Exchange servers, please provide https://learn.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/disclaimers-signatures-footers-or-headersthe link.

Expand
titleHow will the distribution of agents be carried out?
Info

You can use ManageEngine, PDQ, SCCM or a similar tool. Single agent will be distributed. GEODI Classification solution automatically generates the MSI and parameters required for agent deployment. Updating of agents is automatic, checked every 2 days.

A panel can be created to monitor agents. GEODI Agent Management Panel

GEODI Classifier Windows Client Installation

Troubleshooting

Expand
titleIf office extensions or desktop classification is not active
Info
  • The completion of client installation should be verified.

  • Access to the GEODI server must be ensured.

  • The validity of the GEODI token should be checked.

Expand
titleInstallation can be performed in offline/unreachable situations for GEODI
Info

The rules become active when clients connect to GEODI at least once.

Expand
titleIn case of no access to the GEODI server
Info
  • Manual classification can be used. The option for automatic classification is not available.

  • Rules from the last connection are valid.

  • Logs are accumulated and transferred when a connection to the server is established.

  • If the server cannot be reached in office plugins, an 'automatic (offline)' indicator appears.

Expand
titleAutomatic Classification is not active.
Info

There is no access to the GEODI server, or automatic classification may be disabled in the policy settings.

Expand
titleClassification is taking a long time.
Info

Automatic classification may sometimes take a long time due to network traffic, server load, and file sizes. If such situations persist, please consider the upload times of the files you are using in Word and Excel.

Expand
titleEmail signatures are perceived as personal data
Info

The phone numbers and personal names found in email signatures are recognized by GEODI, and therefore, classification is done as personal data. To overcome this, creating a user dictionary and setting classification rules to exclude this dictionary will resolve the issue with email signatures.

Expand
titleClassification agents and Add-ins cannot see the GEODI server.
Info
  • If GEODI is closed,

  • If the GEODI port is not open

Expand
titleHow to send a large number of emails simultaneously, like Mail Merge?
Info

Under normal circumstances, a classification pop-up opens for each email. To prevent this in bulk emails, you just need to add the %AutoClass% expression to the email body or Word document for mail merge. The sent emails will be automatically classified without opening a pop-up.

Alternatively, you can create a separate classification policy for Outlook/OWA.