Send email alerts when BlueXP classification classification finds non-compliant data
BlueXP classification can send email alerts to BlueXP users in your account when certain critical policies return results so you can get notifications to protect your data. You can choose to send the email notifications on a daily, weekly, or monthly basis. You can also choose to send email alerts to any other email address - up to 20 email addresses - not in your BlueXP account.
You can configure this setting when creating the policy or when editing any policy.
Follow these steps to add email updates to an existing policy.
-
From the Policies List page, select Edit for the policy where you want to add (or change) the email setting.
-
In the Edit Policy page:
-
Check the "Email all the users in this account" box if you want notification emails sent to users in your BlueXP account, and choose the interval at which the email is sent (for example, Every Day).
-
Check the "Send Email" box if you want notification emails sent to additional users, choose the interval at which the email is sent, and enter up to 20 email addresses.
-
-
Select Save Policy and the interval at which the email is sent appears in the policy description.
An email is sent if any files meet the policy criteria. No personal information is sent in the notification emails. The email indicates that there are files that match the policy criteria, and it provides a link to the policy results.
Delete source files automatically using policies
You can create a custom Policy to delete files that match the policy. For example, you may want to delete files that contain sensitive information and were discovered by BlueXP classification in the past 30 days.
Only Account Admins can create a policy to automatically delete files.
|
All files that match the policy will be permanently deleted once a day. |
-
From the Data Investigation page, define your search by selecting all the filters you want to use. See Filtering data in the Data Investigation page for details.
-
Once you have all the filter characteristics just the way you want them, click Create Policy from this search.
-
Name the policy and select other actions that can be performed by the policy:
-
Enter a unique name and description.
-
Check the box to "Automatically delete files that match this policy" and type permanently delete to confirm that you want files permanently deleted by this policy.
-
Click Create Policy.
-
The new policy appears in the Policies tab. Files that match the policy are deleted once per day when the policy runs.
You can view the list of files that have been deleted in the Actions Status pane.
Assign AIP labels automatically with policies
You can assign an AIP label to all the files that meet the criteria of the policy. You can specify the AIP label when creating the policy, or you can add the label when editing any policy.
Labels are added or updated in files continuously as BlueXP classification scans your files.
Depending on whether a label is already applied to a file, and the classification level of the label, the following actions are taken when changing a label:
If the file… | Then… |
---|---|
Has no label |
The label is added |
Has an existing label of a lower level of classification |
The higher level label is added |
Has an existing label of a higher level of classification |
The higher level label is retained |
Is assigned a label both manually and by a policy |
The higher level label is added |
Is assigned two different labels by two policies |
The higher level label is added |
Follow these steps to add an AIP label to an existing policy.
-
From the Policies List page, click Edit for the policy where you want to add (or change) the AIP label.
-
In the Edit Policy page, check the box to enable automatic labels for files that match the Policy parameters, and select the label (for example, General).
-
Click Save Policy and the label appears in the policy description.
|
If a policy was configured with a label, but the label has since been removed from AIP, the label name is turned to OFF and the label is not assigned anymore. |