File System Discovery Task Wizard - Advanced

Use the Advanced page of the file system discovery task wizard to configure bandwidth limits, full scan options, and access timestamp behavior.

Steps

  1. Select an option for controlling bandwidth used for the discovery process:
    • Select No limit to avoid limiting the bandwidth used for discovery.
    • Select An average of to limit the bandwidth used for discovery, then select the average (1-9999 Mbps) to set as the limit.

      This option does not control the network bandwidth per file. Large files might still consume the available network bandwidth for short periods of time.

      The option does, however, prevent strain on your file servers, network adapters, and on the Forcepoint DLP system.

      While planning to use this feature, note that:
      • Each file will be downloaded as fast as the operating system will allow.
      • Subsequent file operations can be paused to maintain average bandwidth utilization.
      • Average bandwidth utilization is maintained across several file operations, not during single file operation.

      If the amount of data for discovery is big, consider placing the supplemental server with the crawler and policy engine closer to the data sources. This eliminates the need to copy large volumes of data across WAN links.

      Windows QoS can be configured to maintain throttling on a network level.

  2. Under Full scan schedule, select one of the following to indicate when to perform full discovery scans:
    • Select Only on policy update to perform full discovery only when a discovery policy changes.
    • Select On policy update or fingerprinting version update to perform full discovery when a discovery policy or a fingerprinting version changes.
    • Select Always to perform full discovery at the scheduled time, no matter what has changed. (Forcepoint does not recommend choosing “always,” because this slows the discovery process and taxes the system and file servers.)
  3. Under File access timestamp, select Preserve original access time to avoid updating the file access timestamp when files are scanned by Forcepoint DLP. When this option is selected, the operating system controls the “Last Accessed” timestamp of scanned files.
    Note: To preserve access time, you must give Forcepoint DLP read-write privileges for all hosts where discovery is being performed.
  4. Click Next, then continue with File System Discovery Task Wizard - Finish.