How to Create a Policy Using the Wizard - Additional Settings

The Additional Settings page controls what menus to show in the Windows shell extension, such as Help, Search, and Encrypt menus. Options for the Search wizard, Results wizard, Specify the user experience when a search completes, preview pane behavior, how to display search results, and how to display search match strings in the Spirion console.

Additional Settings

Additional settings control what menus to show in the Windows shell extension, such as Help, Search, and Encrypt menus. Options for the Search wizard, Results wizard, Specify the user experience when a search completes, preview pane behavior, how to display search results, and how to display search match strings in the Spirion console.

Use the following steps to set your Agent Additional Settings options:

  1. After completing the Agent OperationsAdvanced Options page of the Create Policy wizard, click the Next button to proceed to the Additional Settings page to input more detailed options.

Use the table below to help you complete the Additional Settings page:

Setting Name

Options

Description

Show Help Menu

  • Disabled (0)
  • Enabled (1) (Default)

Show the Help menu item in the Windows shell extension.

  • The endpoint application supports a Windows Explorer shell extension to perform actions on files and folders in the shell via the right-click context menu.
  • Enabled - Display the Help menu option.
  • Disabled - Do not display the Help menu option.

* This option is specific to searches initiated from Windows Agent UI. This is a Windows-only option. Mac/Linux are excluded.

Show Search Menu

  • Disabled (0)
  • Enabled (1) (Default)

Show the Search menu item in the Windows shell extension

  • The endpoint application supports a Windows Explorer shell extension to perform actions on files and folders in the shell via the right-click context menu.
  • If the shell extension DLL is loaded the settings in the endpoint UI can control which actions are available on the menu.
  • Enabled - Enables the menu option Search with Spirion.
  • Disabled - Hides the menu option Search with Spirion.

* This option is specific to searches initiated from Windows Agent UI. This is a Windows-only option. Mac/Linux are excluded.

Show Secure Menu

  • Disabled (0)
  • Enabled (1) (Default)

Show the Encrypt menu item in the Windows shell extension

  • The endpoint application supports a Windows Explorer shell extension to perform actions on files and folders in the shell via the right-click context menu.
  • If the shell extension DLL is loaded the settings in the endpoint UI can control which actions are available on the menu.
  • Enabled - Enables the Encrypt within Spirion File Vault menu option.
  • Disabled - Hides the Encrypt within Spirion File Vault menu option.

* This option is specific to searches initiated from Windows Agent UI. This is a Windows-only option. Mac/Linux are excluded.

Show Shred Menu

  • Disabled (0)
  • Enabled (1) (Default)

Show the Shred item in the Windows shell extension

  • The endpoint application supports a Windows Explorer shell extension to perform actions on files and folders in the shell via the right-click context menu.
  • If the shell extension DLL is loaded the settings in the endpoint UI can control which actions are available on the menu.
  • Enabled - Enables the Shred with Spirion option in the context menu.
  • Disabled - Prevents the Shred with Spirion option from appearing in the context menu

* This option is specific to searches initiated from Windows Agent UI. This is a Windows-only option. Mac/Linux are excluded.

Show Sub Menu

  • Disabled (0)
  • Enabled (1) (Default)

Show shell extension items in the Windows sub-menu

  • The endpoint application supports a Windows Explorer shell extension to perform actions on files and folders in the shell via the right-click context menu.
  • Disabled - Displays shell extension items in the top-level menu rather than a sub-menu.
  • Enabled - Displays shell extension items in the sub-menu.

* This option is specific to searches initiated from Windows Agent UI. This is a Windows-only option. Mac/Linux are excluded.

Show Wizard

  • Skip Search Wizard (Default)
  • Show Search Wizard

Show the Search Wizard when the endpoint application launches in interactive mode.

  • Skip Search Wizard - Default. Skip the Search Wizard when the endpoint application launches in interactive mode. When running as a task, this setting is ignored.
  • Show Search Wizard - Show the Search Wizard when the endpoint application launches in interactive mode. When running as a task, this setting is ignored.

Disable Results Wizard

 

 

  • Enable Results Wizard (0)
  • Disable Results Wizard (1)

Disable/Enable the Results Wizard feature.

  • Disable Results Wizard - Disables the Results Wizard feature.
  • Enable Results Wizard - Enables the Results Wizard feature.

* This option is specific to searches initiated from Windows Agent UI. This is a Windows-only option. Mac/Linux are excluded.

Startup Wizard Add OnlyFind Option

  • Yes (0)
  • No (1)

Set the default option for OnlyFind in the Search Wizard.

  • Yes - Specify the default option for the radio button on the "OnlyFind Search Using Your Personal Information" page of the Search Wizard.
  • No - Sets the radio button to "No"

Startup Wizard Search Option

  • Start Searching Now (Default)
  • Continue in Wizard Mode
  • Skip Wizard and Use Advanced Mode

Specify the default option for the Search Wizard (this option has an effect only if the Search Wizard is displayed by setting Use Startup Wizard to "Show Search Wizard").

  • Start Searching Now
  • Continue in Wizard Mode
  • Skip Wizard and Use Advanced Mode

* This option is specific to searches initiated from Windows Agent UI. This is a Windows-only option. Mac/Linux are excluded.

Search Completion Option

  • Show Search Summary Window
  • Show Results Wizard
  • Skip Wizard and Summary and use Advanced Mode

Specify the user experience when a search completes.

  • After a search completes, the user can be prompted with:
    • The Search Summary window, which enables them to sign in with their Profile Password (if not signed in already)
    • The Results Wizard
    • Advanced Mode (skip wizard and summary)
  • Note: If this option is set in the system container to "Show Results Wizard" or "Show Advanced Mode," the user does not have the opportunity to sign in with their profile password when the search completes.

Mask All Matches in Preview

  • Enable
  • Disable

Mask all matches in preview pane

  • Enable this setting to prevent highlighted matches in the preview pane from being displayed in bold and yellow.
  • Instead, it replaces the matches with a black bar in the preview pane.

Check Remote Files for Existence

  • Enable
  • Disable

When selecting a remote file result, check it for existence

  • Enable this setting to check if remote files exist.
  • This prompts to remove remote files from the view if they do not exist, and this check always occurs for local files.

Use Flat Report

  • Enable
  • Disable

Present search results in a flat report without a parent/child hierarchy

Enable this setting to present search results in a flat report without a parent-child hierarchy.

  • By default, in memory mode, the Agent application results are presented with a parent/child report relationship where information about the location (that is, path, type, size, owner, etc.) are not displayed for every row, but rather once per location with each child row displaying specific match information.
  • Enabling this setting reports all information on all rows.
  • On-disk database mode - When using on-disk database mode, this value is ignored and the flat report display is always used.

Classification Display Preference

  • Icon
  • Color
  • Name

The style of display for the classification column in the endpoint UI.

  • Icon - By default, the application displays the icon for the highest priority classification in the endpoint UI.
  • If the highest priority classification does not have an icon, its color is displayed.
  • Color - Always use the classification color
  • Name - Display the name of the classification level in text

Display Results

  • Show expanded
  • Show collapsed

Display results collapsed rather than expanded:

  • Show expanded - By default, results are displayed in the Results View expanded. That is, every child row is displayed.
  • Show collapsed - Results are shown in the Results view with child rows collapsed/hidden by default,

* This option is a Windows and Mac option. Linux is excluded.

Send Match

  • Enabled (1) (Default)
  • Disabled (0)

Instructs Spirion Agents to send the entire match string of a sensitive data match to the console (as search results).

  • Enabled (checked) - Default. The entire data string of each sensitive data match (such as SSNs and CCNs) is sent to the console and is viewable by Spirion console users. Not recommended, unless using the setting "Send Only Last Four Characters," below to partially mask matched data strings.
    - Enable this setting to activate the setting "Send Only Last Four Characters," just below this setting, which enables you to partially mask matched data strings.
  • Disabled (unchecked) - No sensitive data match strings are sent to the console.
    - Deactivates the setting "Send Only Last Four Characters" just below this setting.
    - Additionally, disables sending preview information (even if enabled) to the console.

Send Only Last Four Characters

  • Disabled/Entire match (0) (Default)
  • Last four only
  • Last four only (and first six for CCNs)

The setting "Send Match" (described above) must be enabled to activate this setting.

The behavior configured in this setting is referred to as "masking." Sensitive data match strings captured by scanning Spirion Agents are returned to the console search results as whole strings, not masked, or else partially masked, as configured in this setting.

  • Disabled/Entire match - Spirion Agents send the entire sensitive data match string to the Spirion console. This exposes sensitive data - PII, SPI, ePHI, etc. - to the console user. Not recommended.
  • Last four only - Spirion Agents send only the last 4 characters of the sensitive data match string to the console.
     - If the match string is 4 characters or less Agents send all characters to the console.

  • Last four only (and first six for CCNs) - Spirion Agents send only the last 4 characters of sensitive data match strings to the console, except for credit card numbers.
     - If the match string is 4 characters or less, Agents send all characters to the console.
     - For credit card numbers the Agent sends both the last four characters AND the first 6 characters - separated by an asterisk - to the console.
    - For example: In the Credit Card number "3141592653589793," only the characters "314159*9793" are sent to the console.


  1. Click Advanced Options to input more detailed options.
  2. To complete the Advanced Options page, see "Create a New Policy Using the Add Policy Wizard - Additional Settings - Advanced Options."


Was this article helpful?