These definitions determine how classification is performed, including whether automatic classification is enabled and how e-mail attachments are handled.

After defining the default rules, you can override them based on users, user groups, applications, IPs, and other criteria. Default classification rules are configured here.

These rules are automatically updated on all clients within approximately 10 minutes.

Open

• Auto Classify Behaviour:
  Determines how auto-classification works.

  • Use as a suggestion → The user may or may not use auto.

  • Disabled → Automatic classification is off.

  • Do not select the class under auto → Users cannot choose classes lower than the auto. You can bypass this setting by checking “Allow Class Lowering”. This option mainly exists for policy overrides.

• Ask Classes on Save:
  MS Office add-ins open a dialog to choose classes when saving/closing or printing. This option determines when the dialog opens.

  • Show when necessary → If auto-classification is possible or the document already has a class, the dialog does not open.

  • Always → The dialog opens after each change.

  • Never – Manual Only → User can open the dialog manually.

• Log Format:
  Can be CSV, CEF, syslog or DB you choose. By checking the reason, the automatic classification reason can be written to the log (only if auto-classification is activated). Default 0000-Classifier project has a built in Log Analysis panel Classifier Logs and Log Analysis Panel

• Use HTML Table:
  Header, footer, and watermark are determined by class. With HTML table, you can build more complex views. Please refer to:
  Visual Markers - Header/Footer/Watermark

• Do not use images for Header/Footer and Watermark:
  By default, header, footer and watermark are used as images in Excel. If this option is selected, headers and footers will be used as text in Excel.

• Use OS Meta:
  Microsoft Office, LibreOffice, and PDF formats can be tagged with ADS. These tags are only created by the Shell/Desktop classification tool.

• Allow Class Lowering:
  Determines if a user can choose a lower class for an already classified document. This is an important setting and may be overridden by user, group, or IP.

• Attachment Control:
  When Passive is selected, attachment classifications are not checked.

  Attachment controls apply only to file types that support classification, such as Office, PDF, and LibreOffice documents. Other file types are ignored by these controls.

  If Check Classes is selected, the e-mail cannot be sent if it contains any supported but unclassified files. Classify and reattach these files, or select Automatically Classify Unclassified.

  If Automatically Classify Unclassified is selected, supported unclassified files are automatically classified before the e-mail is sent.

  The effective e-mail classification is determined by the highest classification assigned to the e-mail body or any supported attachment.

  As a best practice, classify all documents before they are used or shared. For legacy documents, use workflows to classify existing content in advance. GEODI DSPM can classify documents across almost all data sources, including endpoints.

• Classifying internal emails:
  When enabled, if the sending and target domain addresses are the same, the email can be sent without asking for classification.

• User Can Select 'Write Header/Footer/Watermark':
  Provides an option for users to uncheck visual markings.

• H/F Text Cleanup:
  GEODI Classifier attempts to remove old visual markings when reclassifying legacy documents. In some cases, this may not work (especially with older software), but you can define specific words or phrases here to ensure they are removed.

Policy Overrides/Customizations

• With customization, default rules can be changed based on User, Group, IP, Class, or Application. For example, you can limit some groups to only auto-classification and allow class lowering for others.

• Each rule is defined as a customization, and you can add as many as needed. If rules overlap, the first matching rule is applied.

Open

• Area 1 → Create New Customization
  You can add as many customizations as needed. Customizations are evaluated from top to bottom. Use the Active checkbox to disable a customization without deleting it.

• Area 2 → Activation Conditions
  These options determine when the customization is applied.

  • Users:
    Define the users or groups affected by the customization. Multiple users/groups can be selected.

  • Macro:
    You can define advanced conditions using macros (e.g., IP-based or time-based rules).

    Examples:

    c.Client != null && c.Client.GetClientIPAddress() == "192.168.1.14"

    Applies the customization for a specific IP address.

    DateTime.Now.Hour > 8 && DateTime.Now.Hour < 18

    Applies the customization within specific hours.

    Available objects: https://service.decesoftware.com/api

  • Applications:
    Select the applications affected by the customization. Multiple selections are allowed. If none is selected, the customization applies to all applications.

• Area 3 → Override Settings
  Allows overriding the default settings described above.

  • Disable Classification:
    Overrides all settings and completely disables classification for matching users.

• Area 4 → Class List Customization
  You can define different class lists for different users or departments.
  Select from previously defined classes and assign them per customization.
  Use Ctrl + Click to select multiple classes.

• Area 5 → Class Item Customization
  Allows you to modify visual markings (header, footer, watermark) for a specific group without changing the default class definitions.

Synchronizing Policy Configuration Across Cluster Environments

When deploying multiple Classification Servers behind a load balancer, all servers should use an identical policy configuration. After configuring one server, export its configuration and import it into the remaining servers to ensure consistent policy enforcement across the cluster.

Open

**