Box Status
Print

Classification Settings

Admin , classification , Box Shield , Reference , Article , New , Rollout

Classification settings include defining who can modify classification labels and any classification integrations. This topic contains the following sections:

Classification Labels Tab

Setting Description
Name Required. A classification label name must be unique and cannot be more than 40 characters. The name appears in a colored pill when users select or preview a file or folder with the classification label applied.
Color Required. The default is Yellow.
Definition Required. Additional information that is displayed to users in the web application (but not the Box apps on iOS or Android nor in Box Drive) when users select or preview a file or folder with the classification label applied.

 

Classification Policies Tab

A classification policy has 3 parts:

  • Policy name and description, how you identify the policy
  • Policy criteria, where you define what you look for to apply the policy
  • Policy label, what classification label gets applied to a file when the policy applies to the file

Policy Name and Description

Setting Description
Classification Policy Name Enter a unique and descriptive name. Limited to 80 characters. Plain text only.
Description. Optional. Enter additional information that summarizes what the policy does. Limited to 250 characters. Plain text only.

Important

Because of potential security issues, the Description field cannot contain hyperlinks.

 

Policy Criteria

Policy criteria includes folder criteria and file criteria.

Folder Criteria

Setting

Description
Apply to all folders The policy will apply to files in all folders in your enterprise.
Only selected folders The policy will apply to files only in folders you select and in all sub-folders of those folders. To select folders:
  1. Click Select Folders.
  2. Enter a search term and press Enter.
  3. Select one or more folders.
  4. Click Save.

 

File Criteria

The File Criteria section allows you to define either the file types (by file extension) or one or more condition blocks of data types as criteria for the policy to be applied.

Select:

  • Specify file types to enter one or more file extensions.
  • Specify data types (default) to define up to 3 blocks of one or more data types.

Only one of file types or data types can be selected per classification policy. The default for a new policy is to start with one empty data type selected.

 
File Types

Define file types by entering one or more file extensions.

Setting Description
File Extensions

Determines which file types the classification policy will be applied to. File types are determined by file extension.

To enter file extensions, type one or more file extensions separated by commas.

  • File extensions must begin with a period.
  • File extensions must contain only letters and numbers
  • No more than 10,000 file extensions can be entered.
 
Data Types

Define data type conditions in the condition blocks. You can add more conditions, up to 20 total, by clicking Add Condition. A condition defines a data type and how that data type should match in a document for the policy to be applied.

You can add additional condition blocks by clicking Add More. When a classification policy has more than one condition block, select AND (default) or OR between all the condition blocks (they must all be the same) to determine policy matching:

  • AND means all file criteria must match for the policy to be applied.
  • OR means one or more of the file criteria must match for the policy to be applied.
Setting Description
When a file contains the following conditions Determines which of the conditions must match for a policy to be applied. Select:
  • All to require all conditions to match for the policy to be applied.
  • Any [number], where [number] is the number of conditions defined in the criterion, to require at least any of that number of conditions to match for the policy to be applied. Note that you cannot define which ones. For example, if you have 6 conditions and you select Any 3, then if 4 of any of the 6 conditions are met, then the criterion matches and the policy is applied.
Data Type Determines what will be searched for in the content. You can select one of each discrete InfoType, plus one or more user-generated term sets, up to 20 total. For numerical values in the InfoType selections, enter numerals only, no spaces, hyphens, periods, or other non-numeric characters.
Data/Info Type Description
Generic (International) Info Types
(Custom) Term

Contains up to 50 user-generated terms to search for. Click Edit, enter up to 50 terms separated by commas, and click Save.

Note

When scanning for matches in a term, the scan:

  • Is case-insensitive.
  • Considers all characters other than letters and digits contained within the Unicode Basic Multilingual Plane as whitespaces.

Also, the characters surrounding any match must be of a different type (letters or digits) from the adjacent characters within the word. For example:

  • if the policy looks for "Acme-Internal", the scan will match on "Acme Internal", "acme-internal", "Acme - Internal", "Acme (INTERNAL)", "Acme: Internal", "728Acme-Internal", "Acme - Internal728", "Acme-Internal-728", and so on, but not "Acme-Internalization", or "Acem-Internal".
  • if the policy looks for "AcmeInternal", the scan will match on "acmeinternal", "AcmeINTERNAL", "AcmeInternal4u", and so on, but not "Acme Internal", "Acme_Internal", "AcmenInternalization", "Acme"
Credit Card Number

A 12-to-19 digit number used for payment transactions on credit cards globally.
Email Address

A string of characters in the form of [username]@[domain].[top-level domain], such as user@acme.com.
IBAN Code An International Bank Account Number, defined by the International Standard of Organization (ISO) 13616:2007 standard.
ICD9 Code

A value in the International Classification of Diseases, Ninth Revision, Clinical Modification (ICD-9-CM), which is the official system of assigning codes to diagnoses and procedures associated with hospital utilization in the United States until 1999.

The ICD-9-CM consists of:

  • A tabular list containing a numerical list of the disease code numbers in tabular form;
  • An alphabetical index to the disease entries; and
  • A classification system for surgical, diagnostic, and therapeutic procedures (alphabetic index and tabular list).
ICD10 Code

A value in the International Classification of Diseases, Tenth Revision, Clinical Modification (ICD-10-CM), which is the official system of assigning codes to diagnoses and procedures associated with hospital utilization in the United States starting in 1999.

The ICD-10-CM consists of:

  • A tabular list containing a numerical list of the disease code numbers in tabular form;
  • An alphabetical index to the disease entries; and
  • A classification system for surgical, diagnostic, and therapeutic procedures (alphabetic index and tabular list).
Passport Number

A passport number for any of the following countries:

  • Australia
  • Canada
  • China
  • France
  • Germany
  • Japan
  • Korea
  • Mexico
  • Netherlands
  • Poland
  • Singapore
  • Spain
  • Sweden
  • Taiwan
  • United Kingdom
  • United States
Phone Number A telephone number that conforms to the international public telecommunication numbering plan.
U.S. Info Types
U.S. Bank Routing Number A 9-digit American Bankers Association (ABA) routing number.
U.S. Driver’s License Number A driver’s license number for the United States. The number length and format can vary depending on the state.
U.S. Social Security Number A 9-digit United States Social Security number.
Canada Info Types
Canada Bank Account Number A Canadian bank account number.
Canada British Columbia Personal Health Number The British Columbia Personal Health Number (PHN) is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of British Columbia.
Canada Driver's License Number A driver's license number for each of the ten provinces in Canada.
Canada Ontario Health Insurance Plan Number The Ontario Health Insurance Plan (OHIP) number is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of Ontario.
Canada Québec Health Insurance Number The Québec Health Insurance Number (HIN) is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of Québec.
Canada Social Security Number The Canadian Social Insurance Number (SIN) is the main identifier used in Canada for citizens, permanent residents, and people on work or study visas. 
Confidence

Determines the detection accuracy with which Box finds matching Info Types in your content. It is intended to indicate the likelihood that a piece of data matches a given Info Type. Select:

  • High (default) to minimize false positives. Counts matches with High confidence.
  • Medium to balance between minimizing false positives and high sensitivity of detection. Counts matches with both Medium and High confidences.
  • Low when you require high sensitivity of detection. Counts matches with Low, Medium, and High confidences.

Confidence is determined by matching elements that a detection result contains. Matching elements considered per Info Type vary, including, but not limited to, pattern, checksum, and context such as hotwords that indicate the presence of certain Info Types, a column header of a structured file, and so on. Generally, for confidence to hit High or Medium, the piece of data needs to have multiple matching elements, especially context.

Selecting High may result in more false negatives, while selecting Low may result in more false positives.
With

Select:

  • All (for custom terms only), which requires the condition to match all of the custom terms you defined in the condition.
  • Greater than or equal to, which requires the condition to match at least the number of unique instances in the Unique Count value.
  • Less than or equal to, which requires the condition to match or be less than the number of unique instances in the Unique Count value.
  • In the range of (all conditions except custom terms), which requires the condition to match the number of unique instances between the first and second Unique Count values, inclusive.
Unique Count Determines the number of unique instances that need to match for the condition to match. You would enter 0, 1, or 2 values depending on what you select in the With column.

 

Classification Label

Setting Description
Apply This Label Determines which classification label get applied to the file or folder when there is a policy match.
Conflict Handling

Determines what happens when a classification label should get applied by the policy to a file that already has an existing classification label. Select from:

  • Overwrite any existing classification label (default) - The policy will overwrite any existing classification label, whether that label was previously applied by a user, by folder cascade, by a workflow, or by a previous policy, except when:
    • The auto-classified label was overridden manually by a user for the latest file version.
    • A classification label was applied from Microsoft Information Protection (MIP) sensitivity label and the MIP Prevent Modification setting is enabled.
  • Skip files that already have a classification label - The policy will:
    • Overwrite a classification label that was previously applied by another classification policy.
    • Skip files with classification labels applied by a user, by folder cascade, by workflow or that were applied via MIP integration from MIP sensitivity labels.

 

Classification Settings Tab

Modification Permissions

Setting Description
User Role(s)

Determines which user role(s) can add, modify, or delete classifications on files or folders. Select from:

  • Owner
  • Owner and co-owner
  • Owner, Co-owner, and Editor (default)
  • Owner, Co-owner, Editor, and Viewer Uploader.

 

Microsoft Information Protection

Setting Description
Enable Integration

Determines the status of Microsoft Information Protection integration. When enabled, mapped Microsoft sensitivity labels are converted to Box classification labels when files and new versions of files are uploaded.

Important

If you disable Microsoft Information Protection integration, you will lose all of your selections and mapping information because Box does not retain information from integrated services once the integration ends.
Prevent Modifications

Determines whether files with Box classification labels mapped from sensitivity labels can have those labels updated by anyone, including users, the folder cascade, or auto-classification.
Set Default Mapping

Determines if a default classification label will be applied to a new file and a new version of a file when:

  • Microsoft Integration Protection integration is enabled
  • No mapping exists for the Microsoft sensitivity label applied to the file
Mapped Labels Determines the mapping of Microsoft sensitivity labels to Box classification labels.

 

 

 

tech_writers_swarm_kb

Related articles