Configuring Boldon James classifier
Use the Boldon James Classifier Properties page to enable and configure file labeling using the Boldon James Classifier system. This feature allows Forcepoint DLP to add labels to files and modify labels based on discovery policies and to import labels for detection (for more information about creating file labeling classifiers for detection, see File Labeling).
To open the Boldon James Classifier Properties page, go to
tab and click on the Boldon James Classifier link. The Boldon James Classifier Properties page opens.To enable and configure the File Labeling system:
- Under Imported Labels, click Import Labels. The Import Labels dialog box opens.
- From the Import Labels dialog box, select Choose File. Browse to the Boldon James configuration file to import. This file is usually called spif.xml. If unable to find the file, contact technical support for the Boldon James system.
- Click OK to start the import process.
- After a successful import, the Last import field lists the date and time of the import, along with the number of imported labels.
- If any action plans have labels that no longer exist in the labeling system, a warning is displayed with Show details as a link.
- Click the link to view which action plans have labels that no longer exist in the labeling system. It is recommended that these action plans be updated. See Forcepoint Data Discovery options.
- Mark the Apply file labels check box.
- When you enable the check box, you can define DLP action plans that use Boldon James Classifier file labels.
- When the check box is not marked, Boldon James Classifier file labels are used only for detection.
- Under Guidelines, mark one or more check boxes to specify when Forcepoint DLP should add or modify a label:
- When the file has a lower priority label (upgrade the classification)
- When the file has a higher priority label (downgrade the classification)
- When the file has a tag whose priority cannot be compared to the new label
- When the file is not already labeled
In cases where a file does not meet a selected condition, its labeling remains unchanged. This may mean that the file remains unlabeled, or that the original label or labels added by the third-party system remain in place.
In incident reports, the incident details provide information about whether labels were found on a file, and whether labels were changed.
- Click OK to save the changes.
The audit log (
) is updated when the administrator imports classification labels and when the file labeling system or the guidelines are enabled or disabled. Click the Guidelines updates link for more information on updates.After the Apply file labels check box has been marked, administrators can configure the specific labels to use on the Discovery tab of each action plan. See Action Plans.