Enterprise Recon 2.12.0
Data Type Profile
This section covers the following topics:
- Overview
- Permissions and Data Type Profiles
- Add a Data Type Profile
- Share a Data Type Profile
- Delete a Data Type Profile
Overview
When you Start a Scan, you must specify the data types to scan your Target for.
Data type profiles are sets of search rules that identify these data types. ER2 comes with several built-in data type profiles that you can use to scan Targets.
See Data Types for more information on the data types available by default in ER2.
Permissions and Data Type Profiles
Resource Permissions and Global Permissions that are assigned to a user grants access to perform specific operations for data type profiles.
Operation | Definition | Users with Access |
---|---|---|
View data type profiles | Access to view the Data Type Profile page. |
|
Add data type profiles | User can choose from the available data types to create a new data type profile. |
|
Add custom data types PII PRO | User can create and share new custom data types. |
|
Modify data type profiles | User can modify or archive data type profiles that:
|
|
Add a Data Type Profile
To add a customized data type profile:
- Log in to the ER2 Web Console.
-
On the Scans > Data Type Profile page, you can add:
Type Description New data type profile On the top right side of the page, click + Add. New version of an existing data type profile From an existing data type profile, click > Edit New Version.
This creates a copy of the selected data type profile which you edit. It does not remove the original data type profile. The edited data type profile is tagged as a newer version (e.g. v2) while preserving the original data type profile (e.g. v1).
-
On the New Data Type Profile page, enter a label for your data type profile.
Use a label name that describes the use case that the data type profile is built for. - Select a data type category as described in the following table.
Field Description List of data types Select the data types that you want to add to your data type profile.
The displayed list of data types is dependent on the data type category that is selected. To view all available data types that are built-in with ER2, click on All Predefined Types category.
To customize the data, click Customize. For more details, see Add a Data Type Profile.
Regions / Countries panel The regions / countries panel in the sidebar shows you the number of regions or countries your selected data types span across.
Not applicable to all built-in data types.
Keep scans to one to three regions to reduce occurrence of false positives.Robust / Relaxed Search Robust Search: When selected, applies a stricter search to your scans that reduces the number of false positives that ER2 finds.
This reduces the number of matches found and slows down your scans.Relaxed Search: When selected, applies a lenient search to your scans that produce more matches and, consequently, more false positives.
This increases the number of matches found and scans more quickly than a Robust Search.Not applicable to all built-in data types.
Search Bar Select the data types that you want to add to your data type profile.
The displayed list of data types is dependent on the data type category that is selected. To view all available data types that are built-in with ER2, click on All Predefined Types category.
To customize the data, click Customize. For more details, see Add a Data Type Profile.
Custom Data Type PII PRO
When creating a new version of an existing data type profile, custom data types that were applied will also be available for use in the new version of the data type profile.
To search for a specific custom data type when creating a new version of an existing data type profile:
- Log in to the ER2 Web Console.
- Go to Scans > Data Type Profile page.
- Click on the gear icon next to the selected data type profile and choose Edit New Version.
- On the Search for panel, click on Custom Data.
- Use the Search Custom Data search bar to look for specific custom data types to be included for the new version of the data type profile.
- Once done, click the Ok button to save the changes.
To add a custom data type to the profile, see Add Custom Data Type.
Advanced Features
The Advanced Features section allows you to select advanced features for identifying sensitive data.
The following advanced features are available:
Field | Description |
---|---|
Enable OCR | Scans images for sensitive data using Optical Character Recognition (OCR). OCR is a resource-heavy operation that significantly
impacts system performance. As with all OCR software capabilities, the accuracy
rate will always be lower when compared to scanning raw text data.
OCR cannot detect handwritten information - only typed
or printed characters. The images you scan with OCR enabled must have a minimum
resolution of 150 dpi. It does not find information stored in screenshots or
images of lower quality.
OCR accuracy may be impacted by the following factors:
OCR is not supported for HP-UX 11.31+ (Intel Itanium) and Solaris 9+ (Intel x86) operating systems. |
Enable EBCDIC mode | Scan file systems that use IBM's EBCDIC encoding. Use EBCDIC mode only if you are scanning IBM mainframes
that use EBCDIC encoded file systems.
This mode forces ER2 to scan Targets as EBCDIC encoded file systems, which means that it does not detect matches in non-EBCDIC encoded file systems. |
Suppress Test Data | Ignores test data during a scan. Test data will not be in the scan report. |
Filter Rules
Filter Rules are the same as Global Filters but apply only to the data type profiles they are created in. From the Filter Rules tab, click + Add and select from a list of search filters.
See Global Filters for more information.
Share a Data Type Profile
You own the data type profiles that you create. Created data type profiles are available only to your user account until you share the data type profile. To share a data type profile:
- On the Data Type Profile page, select the data type profile you want to share.
- Click the gear icon and select Share.
Delete a Data Type Profile
To delete a data type profile:
- On the Data Type Profile page, select the data type profile you want to share.
- Click the gear icon and select Remove.
You cannot delete a data type profile once it is used in a scan. A padlock will appear next to its name. You can still remove it from the list of data type profiles by clicking on the gear icon and selecting Archive.
You can access archived data type profiles by selecting the Archived filter in the Filter by… panel.
PII PRO This feature is only available in Enterprise Recon PII and Enterprise Recon Pro Editions. To find out more about upgrading your ER2 license, please contact Ground Labs Licensing. See Subscription License for more information.