How to Install and Use Spirion Endpoint Scanning for Restricted Information
What is Spirion?
Spirion strengthens existing data loss prevention (DLP) solutions by accurately discovering, classifying, and protecting restricted data. Restricted data includes the following:
Social security number (SSN)
Driver license number
State-issued non-driver ID number
Bank/financial account number
Credit/debit card number (CCN)
Protected Health Information
Passport number
University I.T. authentication credentials
Documents protected by attorney-client privilege
More details on data risk classification can be found here: Data Risk Classification Policy
Installation
Navigate to the Spirion downloads portal and sign in using your Enterprise License account.
Once signed in, scroll down to the available downloads and press the “Download” button for the license key file and the appropriate release for your operating system in order to save them to your computer.
Go through the installation steps. When the installer asks for the license file, navigate to where you have saved it and select it.
Once set up, go to the “Data Types” tab and ensure that only the “Social Security” and “Credit Card” options are selected.
Scheduling a recurring scan
Navigate to the “Configuration” tab and choose the “Scheduling” option.
Check the “Schedule a search” box.
Press the “Configure” button and schedule the scan, then press the “OK” button.
Press the “Apply” button in the “Settings” window and enter your password to your user on the computer then press “OK” in the ”Scheduled task Account Settings” window, finally press the “OK” button in the “Settings” window.
Remediating the results of a scan
In the “Main” tab there will be the results of the most recent scan performed on the computer.
To shred a file containing regulatory data, select the “Shred” option in the “Actions” group.
To redact an entry in a text document, select the preferred result and select the “Redact” option in the “Actions” group.
To encrypt a file containing regulatory data, select the “Encrypt” option in the “Actions” group. In order to decrypt the file, it will have to be extracted from the file vault in the “Tools” tab.
To quarantine a file into a designated quarantine folder, while shredding the original copy, select the “Quarantine” option in the “Actions” group.
NOTE: The above CCNs and SSNs are publicly available for testing purposes