This page is a guide for installing server and client-side tools of the GEODI Classifier.

Installation of a Manual/Automatic classification project takes 1 to 2 hours. If GEODI is the first classification tool, you may instantly start with ready classes. These classes are refined with many different user experiences. If you already have a classification tool, then it is also easy to port as well.

You may anytime change the policies after installing the agents. Agents automatically update the policies. GEODI Classification Policy Manager allows you to override policies by groups, persons, client software, IP and more.

We provide ready to use panels to watch agents and classification actions(logs).

After agents distribution users may start classification. GEODI 121 online course is enough for end users to learn classification for Desktop and Office classification.

Installation Roadmap

Checklist

Follow the steps for Classifier installation

GEODI Server must be installed
Activate Classification Module
Activate Default Classes and Policies
Ignore mail signatures (by a dictionary or mail server settings)
Generate Agent MSI Package
Sample Agent installation to selected clients
Activate agent monitor panel
Activate log analysis panel
Interim review
Modify Class and Policies
Closing
Deploy Agents to all clients

Frequently Asked Questions

Classification Issues

Can we disable automatic classification for a specific group?

Yes, with GEODI Classification Policy Manager, you can create variations based on groups, individuals, IP addresses, software (Word, Excel, etc.). It can be set to automatic only for one user group, manual only for others, or disabled for a specific user group if needed.
Changes in rules will take effect on clients approximately 10 minutes after modification.
GEODI Classifier Label/Tag Definitions

Can I perform batch classification?

Yes, query the target and choose “Batch Classification” from GEODI facet area. Files form Folder, FileServer and GDE(PCs) will be included. Labels will be written to the respective files or as alternate data streams (ADS).
GEODI Classifier Batch Classification

What does Semantic Classification mean?

It is the classification of files discovered in GEODI based on query results.

GEODI discovers IBAN, Credit Card and also money, document type, date or and the document type. The class secret rule may contain Money>1M TL. GEODI recognizes money with many different forms. This is a an example of semantic classification. Similarly, the class:classified may contain a rule “if a contract”. GEODI understands whether a document is a contract with AI.

Does the date of the classified documents change?

No, GEODI classification tools preserve the file date.

Can we classify files discovered with GDE on remote PCs in-place?

If you have a Classification license for documents coming to the GEODI server through GDE, you can query and classify documents through GEODI ES, performing the classification on the source machine. The machine where the classification will take place must have our Classifier and GDE solutions installed.

Can databases be classified?

There is no concept of writing labels to databases. However, GEODI classification tools can report the classification of a database record and enable you to take action based on this report.

Can internal e-mails in an organization(same domain) exluded from classifcation?

Yes, in the GEODI Classification Management Interface, you can optionally exclude email sent by users within the same domain from classification

Can Header/Footer and Watermark be multilingual?

Yes. You can define multiple languages.
The language is chosen by machine language.
You can use values like usernames in these settings.
You can define multiple lines.
GEODI Classifier Label/Tag Definitions

Is 'Allow Class Lowering' permitted?

Depending on policies, you can allow or prohibit class lowering for all or specific sets of users.
You can also use the rule that prohibits giving a class below automatic classification.

How do I exclude email signatures?

E-mail signatures contain the PII information of the sender. To ignore this you must either change e-mail server settings or prepare a dictionary. GEODI Classifier - Class and Policy settings - geodi-en - Confluence (atlassian.net) page explains how to to it.

The method used for Exchange servers, please provide https://learn.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/disclaimers-signatures-footers-or-headersthe link.

IT and Licence Issues

What is the format for classification log

The result format is selected from the GEODI classification policy manager. DB, syslog, CEF pr CSV options are available.

You may use a SIEM or Log Analysis Dashboard to monitor and analyse the logs.

GEODI Classifier Log Analysis Panel and Classifier Project

How will the agents deploy?

You can use ManageEngine, PDQ, SCCM or a similar tool. GEODI Classification solution automatically generates the MSI and parameters required for agent deployment. Updating of agents is automatic, checked every 2 days.
If a there is few machine you can manually run the MSI.
Agents are monitored from a panel. Agent Management Panel

GEODI Classifier Windows Client Installation

Can the uninstall or deactivation of agents be prevented?

Yes, by default, Office plugins cannot be removed or deactivated by the Windows user.

Do agents strain the endpoint?

No, the GEODI Classification and GDE (Discovery) agents are designed to impose minimal load on the endpoint/client machines.

How long does it take the policy changes take effect on the clients?

Clients will be updated automatically and within approximately 10 minutes.

Can Classification Add-ons work offline

Yes, offline is possible for add-ons

The add-ons must at least once access to GEODI server to get the policies
Only Manual classification is possible. The automatic classification is not available.
Rules from the last connection are used.
Logs are accumulated and transferred when a connection to the server is established.

How are files without label support classified?

Files without label support are classified using the ADS (Alternate Data Stream) method for file types other than PDF and Office documents.

How can see ADS labels?

ADS(Alternate Data Stream) is an NTFS feature. You may use “dir /r" command to list them.

ADS labels are a feature of the NTFS filesystem and may not be preserved in some cases.

Labels are preserved
1. Rename the file
2. Change file extension txt → log - mp4 → avi
3. Copy the file to another NTFS filesystem with or w/o the GEODI classifier installed.
Labels are not preserved
1. The file is copied through RDP, Wetransfer, or similar ways.
2. The file is copied to non-NTFS filesystem
3. The file is carried in a compressed file (Rar/zip=
4. The file is attached to an e-mail

Compatibility Issues

Can I use two classification solutions simultaneously?

Yes, GEODI can adapt to the labeling scheme of an existing classification tool. This way, you can continue to use both simultaneously without additional work on the DLP side.

Can classification be performed in Linux, Mac, or SharePoint environments?

The GEODI classification solution works on Windows computers. Data discovery can be performed on Linux, MacOS, or SharePoint.

Can GEODI Classifier understand documents classified with a different classification tool?

Yes. As long as the labeling scheme is the same, it doesn't matter which tool was used for the classification. The GEODI classification tool understands the class of a previously classified file and behaves according to policy settings.

Is GEODI Classifier compatible with MIP(Microsoft Information Protection) labels.

Yes. GEODI Classiffier is compatible with MIP and other schemas as well.

Troubleshooting

If office extensions or desktop classification is not active

The client installation should be verified.
Cleints must access to GEODI at least once
The validity of the GEODI token should be checked.

Automatic Classification is not active.

There is no access to the GEODI server, or automatic classification may be disabled in the policy settings.

Classification is taking a long time.

Automatic classification may sometimes take a long time due to network traffic, server load, and file sizes. GEODI reads the file content for auto classification. Opening with Word or Excel may also be taking long.

Email signatures are recognized as personal data

Since e-mail signatures contains PII about he sender, it is is totally expected situation. You must follow the instructions on GEODI Classifier - Class and Policy settings - geodi-en - Confluence (atlassian.net) to avid this situation.
The same method works for header/footer information in Letterheaded Word files.

Classification agents and Add-ins cannot see the GEODI server.

If GEODI is closed,
If the GEODI port is not open

If add-ons at least once accessed the GEODI server and got the policies:

Only Manual classification is possible. The automatic classification is not available.
Rules from the last connection are used.
Logs are accumulated and transferred when a connection to the server is established.

How to send a large number of emails simultaneously, like Mail Merge?

Under normal circumstances, a classification pop-up opens for each email. To prevent this in bulk emails, you just need to add the %AutoClass% expression to the email body or Word document for mail merge. The sent emails will be automatically classified without opening a pop-up.

Alternatively, you can create a separate classification policy for Outlook/OWA.

Classification Agents are not updating automatically.

The classification agents automatically check whether there is an up-to-date version on the server every two days. Access to documents.decesoftware.com should be provided for this control and automatic update process. If access is available but automatic installation is not occurring, firewall settings should also be checked.