Configuring classification tagging

Administrator Help | Forcepoint DLP | Version 8.5.x

Use the Classification Tagging tab of the Settings > General > Services page to enable and configure file tagging on endpoint machines. This allows Forcepoint DLP to add tags to files and modify tags based on discovery policies.

File tagging occurs during the endpoint discovery process.

In order to enable and use this feature, a supported classification tagging system must already be in use on the network.


	Note In version 8.5, Boldon James is the only supported classification tagging system.

To enable and configure classification tagging:

Mark the Enable classification tagging check box.

Under Guidelines, mark one or more check boxes to specify when Forcepoint DLP should add or modify a tag:

When the file has a lower priority tag (upgrade the classification)

When the file has a higher priority tag (downgrade the classification)

When the file has a tag whose priority cannot be compared to the new tag

When the file is not already tagged

In cases where a file does not meet a selected condition, its tagging remains unchanged. This may mean that the file remains untagged, or that the original tag or tags added by the third-party system remain in place.

In incident reports, the incident details provide information about whether tags were found on a file, and whether tags were changed.

Click OK to save the changes.

After classification tagging has been enabled, administrators can configure the specific tags to use on the Discovery tab of each of their action plans. See Action Plans.