Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...


What are GuardPoints?

A GuardPoint is a folder or directory path that Vormetric protects and controls. Once a policy is selected and applied to a folder, that path is considered a GuardPoint.

Note

Keep in mind the following notes about GuardPoints:

  • Once a folder becomes a GuardPoint, the policy assigned to that GuardPoint will control what can access that GuardPoint.
  • The policy that controls access to the GuardPoint does not replace the operating system permissions; however, the policy can replace the operating system permissions.
  • Applying a Guard Point to a folder does not mean the data inside is encrypted.
    • The data will need to be encrypted by one of two methods, Copy Method or Data Transformation.


Guarding Data vs. Encrypting Data

When you create a GuardPoint to protect (or guard) a folder that contains plain text data, the policy associated with that GuardPoint will control the access to that folder; however, a guarded folder does not encrypt data. As a result, you must manually encrypt the data. 

...

The steps below focus on the Copy Method. The Data Transformation method will be covered in a separate article.


Copy Method for Encryption

Note

Before you follow the Copy Method, you must: 

  • Create a new folder on your virtual machine outside of the intended GuardPoint. All data inside the intended GuardPoint will be moved temporarily into this temporary folder.
  • Processes and users that are accessing the intended GuardPoint will need to be stopped, such as databases, open files, user sessions, etc.
  • You will need to have at least one Learn Mode policy already configured.

...