Search the ManageEngine site:  
 

Help Center

Quick Start

File Auditing

File Analysis

Data Risk Assessment

Endpoint DLP

Cloud Protection

General settings

Release notes

Troubleshooting

Guides

Third-party software Contact us

Data classification

Classifying files containing sensitive data under various labels helps enforce appropriate levels of security. The Risk Analysis module can be used to automatically classify files containing high-value content based on their importance and vulnerability.

DataSecurity Plus allows you to choose from a set of four universal classification labels to tag your files. These are:

  • Public
  • Internal
  • Confidential
  • Restricted

The conditions used to classify a file include policies matched, risk score of the file, number of rule match instances, etc.

Note: For the data classification profile to function, the service account or the user account used to configure the domain must possess Write permissions for the file.

To create a new data classification profile, follow these steps:

  • Select Risk Analysis from the application drop-down.
  • Go to Configuration > Data Discovery Settings > Classification Profile.
  • Click the +Add Classification Profile button at the top-right corner.
  • Choose a classification label from the options available: Public, Internal, Confidential, and Restricted.
  • Under Criteria, define the conditions—such as matched policies, file risk score, and number of rule matches—for the file to be classified under the label defined in the previous step.
  • Click Save.

Note:

The Risk Analysis module provides automated classification, whereas the Endpoint DLP module requires manual classification. This means:

  • Files classified automatically through the Risk Analysis module can only be upgraded manually.
  • Files automatically classified in Risk Analysis (based on policy, rule, or risk score) will trigger the corresponding Endpoint DLP audit or alert profiles if those profiles use the same classification label.

Use cases:

  • Prevent files classified as Restricted from being transferred to USB devices by defining file classification criteria for the Removable Storage alert profile.
  • Block files classified as Internal from being pasted into publicly accessible folders by defining file classification criteria for the Clipboard alert profile.

Don't see what you're looking for?

  • Visit our community

    Post your questions in the forum.

     

  • Request additional resources

    Send us your requirements.

     

© 2025 Zoho Corporation Pvt. Ltd. All rights reserved.