is1200 symantec enterprise vault connector user guide 4.3 · chapter 1: introduction 2 emc...

of 39/39
Title Page IS1200 Connector for Symantec Enterprise Vault User and Configuration Guide Version 4.3.3 Last updated February, 2010 EMC Part Number 300-010-775

Post on 18-Apr-2020

1 views

Category:

Documents

0 download

Embed Size (px)

TRANSCRIPT

  • Title Page

    IS1200Connector for Symantec Enterprise Vault

    User and Configuration Guide

    Version 4.3.3

    Last updated February, 2010

    EMC Part Number 300-010-775

  • EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User GuideVersion 4.3.3, 2010Copyright © 2010 Kazeon Systems, Inc. All Rights Reserved.

    This notice is intended as a precaution against inadvertent publication and does not imply any waiver of confidentiality. Information in this document is subject to change without notice. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or information storage or retrieval systems, for any purpose without the express written permission of Kazeon Systems.

    The software described in this document is furnished under a license agreement or nondisclosure agreement. It is against the law to copy the software onto any medium except as specifically allowed in the license or nondisclosure agreement.

    Kazeon™ is the trademark of Kazeon Systems, Inc. All other trademarks and copyrights referred to are the property of their respective owners.

    The text and drawings set forth in this document are the exclusive property of Kazeon Systems. Unless otherwise noted, all names of companies, products, street addresses, and persons contained in the scenarios are designed solely to document the use of Kazeon System products.

    The Kazeon Information Server software is based in part on software licenses from the following:

    Outside In® Content Access © 1991-2010, Chicago, Inc.

    The software is based in part on the work of the Independent JPEG Group.

    Code from Inxight Software, Inc. Copyright © 1996-2010. All rights reserved. www.inxight.com.

    Certain icons used by the Kazeon Web applications come from the Silk Icon set(http://www.famfamfam.com/lab/icons/silk/)licensed under the Creative Commons Attribution 2.5 license(http://creativecommons.org/licenses/by/2.5/).

    Last updated February, 2010

    Kazeon Systems1161 San Antonio Road

    Mountain View, CA 94043

    Copyright Information

    http://www.famfamfam.com/lab/icons/silk/http://www.famfamfam.com/lab/icons/silk/http://creativecommons.org/licenses/by/2.5/

  • Table of Contents

    Title Page .............................................................................................................. i

    Preface ................................................................................................................ vAudience....................................................................................................................................................vRelated Documentation .............................................................................................................................vCustomer Support......................................................................................................................................v

    Chapter 1: Introduction ..................................................................................... 1About the Kazeon Information Server ......................................................................................................1Extending Server Functionality.................................................................................................................1

    eDiscovery Solution ...........................................................................................................................1Enterprise Vault Background and Key Terms...........................................................................................2Enterprise Vault Implementation Overview..............................................................................................3

    Enterprise Vault Implementation In New Installations......................................................................3Enterprise Vault Implementation In Existing Installations ................................................................3

    Chapter 2: Installing EV Connector on the Enterprise Vault Server ............. 5Downloading the EV Connector Installer .................................................................................................6Installing the EV Connector ......................................................................................................................7Microsoft IIS Manager Configuration.......................................................................................................8Verifying the Enterprise Vault Setup ......................................................................................................12Verifying the KazeonEVAgent Installation ............................................................................................12Unistalling the EV Connector .................................................................................................................14

    Chapter 3: Registering Enterprise Vault Servers .......................................... 15Registering Metadata File Systems for Enterprise Vault ........................................................................15Registering an Enterprise Vault with the IS1200 ....................................................................................15

    Chapter 4: Workflow Changes for Enterprise Vaults .................................... 17Classifying Enterprise Vault Systems .....................................................................................................18Using Actionable Services with Enterprise Vault Filesystems ...............................................................20

    Copy and Move Changes for Web-Search.......................................................................................20Setting the Target Data Directory for EVs................................................................................21

    Copy and Move Changes for Web-Reports .....................................................................................21Setting the Destination for EVs ................................................................................................22

    Glossary ............................................................................................................ 23

    Index .................................................................................................................. 31

    iiiEMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Contents

    iv EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Preface

    The EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide describes how to configure the Kazeon Information Server-ECS to use the optional Enterprise Vault Connector (EV) module. The Kazeon Information Server-SA and Kazeon Information Server-FRM do not support EV Connector

    To use the EV Connector module the appropriate optional add-on module licence must first be purchased and installed.

    AudienceThis guide is intended for Administrators, Business Analysts, and Compliance Auditors.

    Related DocumentationIS1200 Installation and Quick Start Guide - provides a quick introduction to installing, configuring, and using the Kazeon Information Server.IS1200 Web-Admin User and Configuration Guide- describes how to use the Web-based Administration Interface to setup and manage Kazeon clusters.

    IS1200 Web-Search User Guide- describes how to use the Web-based Search Interface to perform basic and advanced search.

    IS1200 Web-Reports User Guide- describes how to use the Web-based Reports Interface to perform basic and advanced reports.

    IS1200 eDiscovery Case Manager Administrator’s Guide- for legal representatives, a primer of all the web-based Interfaces above for performing eDiscovery.

    IS1200 Command Line Interface Reference Guide - describes the Kazeon Command Line Interface.

    Customer SupportYou can contact Kazeon with questions or comments at [email protected] ,or call from the US and Canada toll-free: +1.877.529.3668 (+1.877.kazeon8) and Internationally: +1.650.641.8196.

    vEMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Preface

    vi EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 1:

    Introduction

    The guide is provided as a companion to the Kazeon Information Server-ECS IS1200 User and Configuration Guide. The Kazeon Information Server-ECS IS1200 User and Configuration Guide should be read first as it contains most of the basic IS1200 server setup and maintenance information on which this guide builds.

    About the Kazeon Information ServerThe Kazeon Information Servers are integrated hardware and software systems that provide information management solutions enabling organizations to efficiently and cost effectively classify, manage, and retrieve data. They provide consistent information visibility and control across distributed files, minimize the risk of un-managed files, integrate seemlessly with existing infrastructure, and scale to support billions of files for searching, reporting, backup search and recovery, and file migration and archiving.

    Extending Server FunctionalityThe Kazeon Information Server’s standard functionality can be expanded with optional add-on modules like the Enterprise Vault (EV) Connector. The EV Connector module requires an additional license for the Kazeon Information Server and allows the server to integrate Enterprise Vault technology into the standard Kazeon Information Server classification, searching, and reporting processes.

    eDiscovery SolutionThe EV Connector is an integral part of Kazeon’s eDiscovery solution providing:

    Collection, processing, and analysis of data sources such as file systems, Microsoft Exchange mail and PST files, journal archives, and desktops/laptops

    Migration, exporting, or downloading of eDiscovery data or metadata to an EV server for retention and legal hold

    Classification of all files on EV Vaults, including files, mail, and journal archives.

    The IS1200 and EV Connector can also be used for compliance and risk management.

    1EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 1: Introduction

    Enterprise Vault Background and Key TermsEnterprise Vault™, originally from Veritas Inc., is now offered by Symantec Corp. Enterprise Vault enables financial services companies to quickly perform cost-effective supervisory review of email and other electronic communications, helping ensure compliance with SEC and NASD regulations requiring active supervision of electronic messaging systems. EV provides broker-dealers with a tool for enterprise-scale review of email, instant messages, Bloomberg and digital fax messages.

    Symantec Enterprise Vault supports a broad range of storage platforms, including hardware from EMC, IBM, Network Appliance, Inc., Plasmon and StorageTek. The Kazeon EV Module supports all platforms that EV can be installed on.

    Kazeon's Enterprise Vault Connector (EV Connector) bridges Symantec Enterprise Vault and Kazeon Systems by presenting a registered EV archive site as a standard file system to the Kazeon IS1200 system. This enables Kazeon IS1200 System to handle an EV archive as a directory, and integrates the Enterprise Vault and Kazeon Systems with only minor modifications to generic IS1200 components.

    There are three basic configuration for Kazeon servers and EVs:

    The first is a Kazeon server communicating with a single EV repository.

    The second has a Kazeon server communicating with a group of EV repositories through the KazeonEVAgent installed on one member of the group.

    These two basic combination may be repeated at will throughout your network.

    2 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Enterprise Vault Implementation Overview

    Kazeon's EV Connector enables the following capabilities:Classification and indexing of archives located in Enterprise VaultSearches and reports on the EV archives after classification and IndexingCopying or moving files into the EV through actionable services on search and report results

    Enterprise Vault Implementation OverviewEnterprise Vault (EV) Integration is available only on the ECS version of the Kazeon Information Server. EV Integration may be included in a new Kazeon Information Server IS1200-ECS installation, or added to an existing ECS installation.

    If the EV Connector optional module was ordered along with the original Kazeon Information Server purchase, the appropriate optional module license was automatically included in server master license and is routinely installed along with the server license. If the EV Connector module was purchased after the original installation, the EV Connector module license must be added to the installation before before any other module configuration can occur. See the Installing License Keys chapter of the Kazeon Information Server IS1200 User and Configuration Guide for details on obtaining and installing optional modules licenses for existing installations.

    Enterprise Vault Implementation In New InstallationsThe EV Connector module software is automatically installed with all Kazeon Information Server-ECS installations, the EV Connector license simply activates it. EV Connector may not be used with the Kazeon Information Server-SA or Kazeon Information Server-FRM versions.

    To use an EV Connector module purchased with a new installation, simply follow the standard hardware and software installation and configuration instructions in the Kazeon Information Server IS1200 User and Configuration Guide and then proceed to step 2 below of adding EV Connector to existing installations.

    Enterprise Vault Implementation In Existing InstallationsIf the EV module license is obtained after the original Kazeon Information Server installation, use the following general steps to implement EV. The following steps assume the Enterprise Vault volumes are already setup according to Symantec approved guidelines.1. Add the EV Connector license. See the Installing License Keys chapter of the

    Kazeon Information Server IS1200 User and Configuration Guide for details on obtaining and installing optional modules licenses for existing installations.

    2. Add the Kazeon Enterprise Vault Agent to one Symantec Enterprise Vault server on the Enterprise Vault site. This allows the IS1200 to access the Enterprise Vault. See “Chapter 2: Installing EV Connector on the Enterprise Vault Server” on page 5 for more details.

    3EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 1: Introduction

    3. On the IS1200, add a new metadata file system for each EV server that will be registered for crawling. See the Registering and Managing File Systems chapter of the Kazeon Information Server IS1200 User and Configuration Guide for details on adding metadata volumes.

    4. Register the Enterprise Vault servers with the IS1200. See “Chapter 3: Registering Enterprise Vault Servers” on page 15 for more information.

    5. Classify the EV servers. See “Classifying Enterprise Vault Systems” on page 18 and the Job Scheduler chapter of the Kazeon Information Server IS1200 User and Configuration Guide for details on scheduling classification services.

    6. Search or run Reports to locate files of interest on the EV servers. See the Searching for Information and Using Reports chapters of the Kazeon Information Server IS1200 User and Configuration Guide for details on searching and reporting.

    7. Use Actionable Services on the search or report results. See “Using Actionable Services with Enterprise Vault Filesystems” on page 20 and the Actionable Services chapter of the Kazeon Information Server IS1200 User and Configuration Guide for details on applying actionable services to search or report results.

    4 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 2:

    Installing EV Connector on the Enterprise Vault Server

    To enable the Kazeon Information Server to access an Enterprise Vault, a special Kazeon application called the Kazeon Enterprise Vault Agent (KazeonEVAgent) must first be installed and activated on one EV server of an EV site. EV servers can then be registered and classification services run on them.

    It is strongly recommended that the KazeonEVAgent be installed on an Enterprise Vault server dedicated to the KazeonEVAgent. A Symantec Enterprise Vault single-server or site license may be required for the server the KazeonEVAgent is installed on.

    Note: The KazeonEV Agent hardware platform is not provided as part of the Symantec Enterprise Vault Connector optional module and must be provided by the user.

    EV Connector requires Symantec Enterprise Vault version 6.0 (SP4), 7.0, 7.5, or 8.0 on the Windows hosting server.

    Note: Refer to Symantec’s documentation Enterprise Vault Installing and Configuring Guide (of appropriate version) for the procedures to add an EV server to an existing EV site. Documentation for Enterprise Vault 2007 is available at http://seer.support.veritas.com/docs/289688.htm

    Symantec Enterprise Vault and the Kazeon EV Connector both require Microsoft IIS 6.0 and .NET 2.0 for installation.

    Installing the KazeonEVAgent is a four step process:1. Download the EV Agent installer2. Install the EV Agent on an Enterprise Vault server3. Open IIS Manager and configure it to:

    use ASP 2.0 set up access to EV using an Enterprise Vault account

    4. Verify the services to ensure they are properly installed.

    5EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 2: Installing EV Connector on the Enterprise Vault Server

    Downloading the EV Connector InstallerThe EV Agent Installer is called KazeonEVAgent.msi, and must be downloaded from the IS1200 to the Windows server that hosts the Enterprise Vault server before it can be installed.

    To download the installer, do the following:1. Open the IS1200 Manager page (http:///manager,

    where is the hostname of your IS1200).

    2. Click the Kazeon Connectors link circled above.3. When the Kazeon Connectors page appears, click the Enterprise Vault Agent link:

    4. When the standard Download dialog appears, choose a location on the Windows server (hosting the EV) to save the KazeonEVAgent.msi file to and click OK. The desktop is a good location.

    6 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Installing the EV Connector

    Installing the EV ConnectorOnce the KazeonEVAgent.msi file is on the EV hosting server, run the installer.1. Execute the downloaded KazeonEVAgent.msi on the Windows hosting server.

    Simply open the location the KazeonEVAgent.msi file was downloaded to, and double-click to launch it. The Kazeon EV Agent Setup Wizard dialog appears:

    2. Click Next to continue and the Select Installation Address dialog appears.

    The Site drop-down menu will display a list of EVs already installed on this host server, either accept the default, or choose one from the list.The Virtual Directory field displays the default name the EV Agent will provide the IS1200 as a reference name for the EV in IS1200 ‘Add Repository’ menus. Accept the default or change it as necessary, and click Next to continue.

    3. As additional dialogs appear,

    Continue to click Next, OK, or Continue as necessary to complete the installation.

    7EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 2: Installing EV Connector on the Enterprise Vault Server

    Microsoft IIS Manager ConfigurationEV Connector requires Microsoft IIS 6.0 and .NET 2.0 for installation, refer to Microsoft documentation for installation procedures and configuration if necessary.

    After the EV Agent has been installed, use the following steps on the hosting server to configure the Internet Information Services Manager for EV Connector:1. On the host server, select Start > All Programs > Administrative Tools >

    Internet Information Services Manager. The Internet Information Services Manager window appears.

    2. Configure KazeonEVPool:a. Click to open the node for the “(local computer)”,

    then right-click Application Pools, then select New and Application Pool.

    The New Application Pool dialog opens.b. Enter KazeonEVPool in the Application Pool ID field and click OK.

    A new entry, KazeonEVPool appears in the Application Pools list.c. Right click the new KazeonEVPool entry, choose Properties and click the

    Identities tab on the resultant dialog.d. From the Identity tab,

    i. Select the radio button Configurable

    8 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Microsoft IIS Manager Configuration

    ii. User Name enter \Where is your EV domain andWhere is EV Administrator login name.

    iii. Password enter the password for iv. Click Applyv. Reenter the admin password and click OK

    3. Click the Recycling tab and enter the Resources information:

    a. Uncheck Recycle worker processes and select 120 minutesb. Click Apply then click OK

    4. Assign the new pool to the KazeonEVAgent:a. Right click (Web Sites > Default Web Site) KazeonEVAgent and select

    Properties to open the KazeonEVAgent Properties dialog.

    b. Click the Virtual Directory tabc. Select KazeonEVPool from the Application pool drop-down menud. Click Apply and OKe. Select Default Web Site from the Web Sites list,

    and use the Stop and Start icons to restart the site

    9EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 2: Installing EV Connector on the Enterprise Vault Server

    5. From the Internet Information Services Manager window, right-click KazeonEVAgent and choose Properties.

    6. From the KazeonEVAgent Properties window,

    Choose the ASP.NET tab, set ASP.Net version to 2.0.x, and click Apply.

    10 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Microsoft IIS Manager Configuration

    7. Click Edit Configuration..., and the ASP.Net Configuration Settings window appears.

    Click the Application tab and then set Request execution timeout to 600.8. Click Apply and OK.9. In the KazeonEVAgent Properties window, select the Virtual Directory tab,

    click the Configuration button, the Application Configuration window opens.10. Click Add and the Add/Edit Application Extension Mapping window opens.

    11EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 2: Installing EV Connector on the Enterprise Vault Server

    11. From the Add/Edit Application Extension Mapping window, click Browse and a standard file dialog opens.

    12. Navigate to c:\windows\Microsoft.NET\framework\V2.0.x\aspnet_isapi.dll, select that path and click OK to close the file dialog(where the “x” in V2.0.X may be some longer string).

    13. Enter.ev in the Extension field, and click OK until you return to the KazeonEVAgent Properties window.

    14. Close the KazeonEVAgent Properties window.

    Verifying the Enterprise Vault SetupOn the server where KazeonEVAgent is installed, connect to the Enterprise Vault web access application using the URL http://localhost/EnterpriseVault.

    Perform a 'Search' operation, and verify that searches can be successfully performed.

    Verifying the KazeonEVAgent InstallationOnce the EV Agent is installed, and the IIS Manager properly configured, verify the KazeonEVAgent is operating properly.

    From a browser (on the EV Server),enter http:///KazeonEVAgent/service.asmxin the address bar and press Return(where is the EV server where the EV Agent is installed and the browser is running from).

    12 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Verifying the KazeonEVAgent Installation

    The following screen should appear.

    Click CheckEVHealth and the following appears:

    Click Invoke and the following screen should appear:

    13EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 2: Installing EV Connector on the Enterprise Vault Server

    Back at the original list of IIS functions, click and Invoke getSite as well, the following screens should appear.

    Unistalling the EV ConnectorTo uninstall the EV Connector, from its host computer’s Start menu, select:

    Control Panel -> Add/Remove programs -> KazeonEVAgent -> Remove

    and follow the prompts.

    14 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 3:

    Registering Enterprise Vault Servers

    The procedure for registering a Symantec Enterprise Vault (EV) is slightly different then registering an NFS or CIFS filer. First, see the Registering and Managing File Systems chapter of the Kazeon Information Server IS1200 User and Configuration Guide for general information on registering file systems, then return here for specific information on registering EVs.

    Before EVs can be registered, the Kazeon Enterprise Vault Connector must be installed on each EV to be registered. See “Chapter 2: Installing EV Connector on the Enterprise Vault Server” on page 5 for details.

    Registering Metadata File Systems for Enterprise VaultAs with all file system registrations, a metadata file system must first be registered and available before an EV can be registered. Because EVs can contain large amounts—terabytes—of data, a single dedicated metadata file system should be created for each EV that will be registered.

    Metadata file systems for EVs are created and registered just like any other metadata file system. See the Registering and Managing File Systems chapter of the Kazeon Information Server IS1200 User and Configuration Guide for general information on registering metadata file systems.

    Before continuing, create and register a metadata file system for each EV server that will be registered.

    Registering an Enterprise Vault with the IS1200To classify—or otherwise use—files or email in EVs, you must first register the EV server with the IS1200. Once the EV is registered, its reference name appears in all subsequent IS1200 job dialogs that allow the user to select a file system to apply a service to.

    15EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 3: Registering Enterprise Vault Servers

    Use the following procedure to register an EV server.1. Open Web-Admin and click Repositories in the left-navigation pane.2. Under Repositories in the left-navigation pane, click FileSystem(NFS/CIFS).

    The Add Repositories tab displays.

    3. Select Enterprise Vault from the Repository Type drop-down menu and the dialog box reconfigures for EV options.

    4. Name field, enter a reference name for the EV system. This name will be displayed in any subsequent dialogs—for instance when creating new classification jobs—where a “file system” must be specified to apply the new service to.

    5. Metadata File System drop-down menu, select a previously registered metadata file system to store the EVs classification information.

    Storage Access6. Server, the name of the Windows server hosting the EV.7. Specify Use: Select one of the following:

    Source Repository: Register this repository as a source, this includes the reference name (specified above) in all dialogs where a repository can be choosen as a source, for example when doing a Collection in either Web-Admin or the eDiscovery Case Manager.Target Repository: Register this repository as a target, this includes the reference name (specified above) in all dialogs where a repository can be choosen as a target.Source and Target Repository: Register this repository as a both a source and a target for dialogs.

    Enterprise Vault Options8. Web Service Name, leave the default of KazeonEVAgent unless the EV Agent

    was specifically configured with a different service name.9. Port, leave the default of 80 unless the EV Agent was specifically configured

    with a different port number.10. Click Submit to register the EV, or Cancel to exit with out saving.

    16 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 4:

    Workflow Changes for Enterprise Vaults

    This chapter details the workflow changes required to work with Enterprise Vaults (EVs).

    Generally, using the Kazeon Information Server to work with an EV is not much different then working with other systems.

    Like other file systems, the EV must first be registered, and associated with a metadata file system, see “Chapter 3: Registering Enterprise Vault Servers” on page 15 for details.

    Unlike other file systems, EV file systems work best after a few minor “tuning” procedures, including adding a new assignment rules, and making a couple of minor configuration changes. These tune-ups make classifications more efficient and productive. See “Classifying Enterprise Vault Systems” on page 18 for more details.

    Once registered, the EV must be classified, see “Classifying Enterprise Vault Systems” on page 18 for details on how to classify individual EV vaults.

    After classification, searches and reports can be performed on EVs just as they are on NFS or CIFS file systems. There are no significant changes to the search or reports dialogs for EVs in either the Administrative GUI, the Web-Search GUI, or the Web-Reports GUI.

    However, after searches and reports are performed, if Actionable Services are applied to EV results, some changes are seen in the three GUIs. See “Using Actionable Services with Enterprise Vault Filesystems” on page 20 for details.

    The following sections detail the various GUI changes for EVs.

    Before continuing in this guide, you should first be thoroughly familiar with the following chapters of the Kazeon Information Server IS1200 Web-Based Search Interface Guide.

    Classification Policies: Extraction and Assignment RulesJob Control and Scheduling: Classification Services

    17EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 4: Workflow Changes for Enterprise Vaults

    Classifying Enterprise Vault SystemsEVs may only be classified using deep crawls, basic crawls are not allowed.

    To deep classify an EV do the following:1. From Web-Admin, click Jobs in the left-navigation pane.

    The Job Manager tab appears.2. In the Job Manager tab tool-bar, click New and select Deep Crawl.

    The Deep Crawl Tab appears in the Job Manager pane.

    3. Description field: Enter a descriptive phrase for the crawl.4. Show menu: Select Enterprise Vault from the drop-down menu.5. Repositories: From the list of registered EVs that appears after Step 4.click to

    select an EV repository. Click the plus and minus signs to the left of the EV

    18 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Classifying Enterprise Vault Systems

    listings to expand or close the list of sub-directories in that EV. For each vault, or directory, you wish to crawl, select the vault or directory listing and click the Right Arrow ( ) to add that listing to the box on the far right. To remove them, select a listing in the far-right box and click the Left Arrow ( ).

    Note: Up to 100 vaults can be selected.

    6. Choose Profile: Choose one of the following from the drop-down menu to pre-populate some of the following filter sections with entries designed to focus on certain kinds of files:

    None: No pre-populating is done, the filters are blank but can still be used any way needed.Security Profile: Displays filters for Keywords and Patterns.These can be used to specify RegEx expressions that look for security issues like social security or credit card numbers. These expressions generate simple Quick Rules that can also be edited or augmented via the Quick Rule builder screen of the Job Wizard

    Click Advanced Options to display more optional settings.

    In the Enterprise Vault Options section:7. Time Filters

    Note: Enterprise Vault Journal Archives typically have very large numbers of archived items and can consequently take days to crawl an entire journal archive. A best practice is to limit crawls to specific time periods to minimize classification times. If the entire EV Archive must be classified, break the classification into several jobs, each with a successively older time range. This allows you to manage the IS1200 work load, and allows searches (on the more recent archives) immediately after the first classification finishes.

    From Time: Enter a time and date, the crawl will classify only email sent or received between this date and the To Time inclusive.To Time: Enter a time and date, the crawl will classify only email sent or received between this date and the From Time inclusive.

    orSent Received Days Ago: Enter a number of days, the entry restricts the crawl to only email sent or received within that number of days inclusive.

    8. In the Archive Time Filters section:Archived Days Ago: Enter a number of days, the entry restricts the crawl to only email archived within that number of days inclusive.

    9. In the Hash Parameters section:Full Hash: Compute file hash values using the entire file.

    19EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Chapter 4: Workflow Changes for Enterprise Vaults

    Partial Hash on the first: Compute file hash values using just the first X file bytes. Enter the number of bytes to limit the hash to in the Partial Hash field.Very simply, computing a file hash means adding the numeric values of all file bytes into a total result. The chances of two different files yielding the same result (hash value) are so remotely small, that hash values can be used to identify duplicate files, or when files have been changed.

    10. Click Submit to run the job immediately, Next to schedule the job, or Cancel to exit the form without further action. If you choose to schedule the job, a standard job scheduling dialog appears. Refer to the IS1200 Web-Admin User and Configuration Guide, and the Job Scheduling chapters for details.

    Using Actionable Services with Enterprise Vault FilesystemsAfter using searches or reports on Enterprise Vaults (EVs), Actionable Services can be performed on the results. For complete information about using Actionable Services see the Actionable Services chapter of the IS1200 User and Configuration Guide. The copy and move screens for EVs have additional options for EVs.

    Copy and Move Changes for Web-SearchOnce search results are displayed, if results are selected and the Perform Actions on Results button is clicked, the Kazeon File Actions dialog appears.

    Click either the Copy or Move tab at the top of the dialog, the screens reconfigure.

    The general use of these tabs is described in the IS1200 Web-Search User Guide. For EV copy and move targets, the instructions for setting the Target Data Directory change.

    20 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Using Actionable Services with Enterprise Vault Filesystems

    Setting the Target Data Directory for EVsFrom the Data System drop-down menu select an EV repository, the screen reconfigures with a Vault Location scrolling list, and a Retention Category drop-down menu.

    Vault Location. Scroll the list until you find the target EV directory you want to copy or move files to. Click that listing to select it.

    Retention Category. Choose a retention category from the drop-down list. Retention categories are named and defined by the EV administrator. Consult the EV administrator for the meanings of the retention policies listed in this menu.

    Finish scheduling the copy or move job as described in the Actionable Services for Search chapter of the IS1200 User and Configuration Guide.

    Copy and Move Changes for Web-ReportsOnce report results are displayed, if results are selected and Manage Files > Copy or Move is selected from the Actions menu,

    the Actionable Services Wizard (copy) or (move) dialog appears.

    The general use of these both the Copy and Move Wizards is described in the IS1200 Web-Reports User Guide. For EV copy and move targets, the instructions for setting the Destination change.

  • Chapter 4: Workflow Changes for Enterprise Vaults

    Setting the Destination for EVsFrom the Destination drop-down menu select an EV repository, the screen reconfigures with a vault location scrolling list immediately to the right of the Destination drop-down menu.

    Vault Location. Scroll the list until you find the target EV directory you want to copy or move files to. Click that listing to select it.

    Retention Policy. Choose a retention policy from the drop-down list. Retention policies are named and defined by the EV administrator. Consult the EV administrator for the meanings of the retention policies listed in this menu.

    Finish scheduling the copy or move job as described in the Actionable Services for Search chapter of the IS1200 User and Configuration Guide.

    22 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Glossary

    Active Directory (AD)A technology created by Microsoft that provides a variety of network services, including: LDAP-like directory services, Kerberos-based authentication, and DNS-based naming and other network information.

    Actions, Actionable ServicesAre procedures such as copy, move, delete, tagging, etc, that can be applied to search and report results. They allow the IS1200 to be and effective file management tool for registered repositories.

    Access Control List (ACL)A file system level data file that specifies how users or groups may access resources on a computer or network, like an application, file or printer, and the rights they have to it, for example read access, write access, and so forth.

    Advanced SearchA search made from the Advanced Search link. Allows searching for extracted metadata by tag-value pairs, and allows multiple variable and boolean searches.

    Assignment RuleA classification rule that tags files with metadata and assigns files to policy groups.

    AuditingA service that allows the IS1200 to record all system events according to who did what, when, and the event result. This data is especially useful to Legal Service Providers when providing an audit trail for responsive data produced during eDiscovery.

    Authorization RuleA policy that filters search results to ensure that the assigned files can only be viewed by authorized users.

    23

  • Glossary

    AuthenticationThe process of identifying users based on user name and password to ensure that only authorized users can access the Kazeon Information Server.

    Basic SearchA search made from the Search page using only the Search field. Searches only the content found in the fullText field populated during classifications.

    CAS DeviceEMC’s Content Addressed Storage (CAS) devices are cluster-able archival devices that host archival business file content such as email, office productivity files (like word processing and spreadsheet files), images, and other file documents.

    CASIDA unique IS1200 ID for each classified file that the system generates during basic classification.

    Centera ServerThe EMC Centera server is a networked storage system specifically designed to store and provide fast, easy access to fixed content (information in its final form). It is a CAS device providing long-term retention and assured integrity designed to store and manage data that require or have legally mandated retention periods, for example medical records and files relevant to legal matters.

    Celerra ServerAn EMC server designed to store and manage archival data. The Celerra File Level Retention (FLR) server also allows enforcing enterprise or governmental retention policies.

    Classification RuleRules that the system implements during data classification to extract metadata, tag files, and assign files to policy groups. The two types of classification rules are extraction rules and assignment rules.

    Classification ServiceAn IS1200 service that accesses registered repositories and extracts and records their metadata. Sometime called a “crawl”.

    ClusterA set of appliance nodes working as an Kazeon Information Server unit. A cluster can contain a maximum of four nodes.

    CSV, Comma Separated ValuesA file type used to transfer data between applications such as databases and spreadsheets.

    24

  • Glossary

    Command Line Interface (CLI)The CLI is a traditional command line interface that allows direct communications with the IS1200 “backend” using a the set of commands defined in the IS1200 Command Line Interface Reference Guide.

    Common Internet Filing System (CIFS)A protocol used by Microsoft to access computer systems and directories over the internet.

    Container (file/object)A file that contains other files, such as a ZIP, JAR, or PST file.

    CustodianA legal term used by Legal Service Providers (LSP) and other legal personnel to describe the owners or responsible parties for electronic documents pertinent (responsive) to a legal matter.

    DataA file of any type and size such as a short email, a word processor document, or a large spreadsheet.

    Data ClassificationThe process during which the Kazeon Information Server reads data on the data file system. During basic classification, the Kazeon Information Server extracts file system metadata. During deep classification, it extracts custom metadata and assigns files to policy groups.

    DatamapA report that lists the electronic storage locations of all possible sources of relevant ESI. This can include standard file servers, groupware servers, email servers—and their backup and archive systems—as well as custodian’s desktop and laptop computers.

    Data-MountThe NFS file system that is accessed by the Kazeon Information Server to parse data and extract metadata.

    Data ServerThe file server that exports an NFS or CIFS file system so that the Kazeon Information Server can classify data on the file system to create metadata.

    Data-ShareThe CIFS file system to be accessed by the Kazeon Information Server to extract metadata.

    Data RepositoryA networked file system registered with the IS1200 so it can be classified, search, and reported on.

    25

  • Glossary

    Data VerificationBuilds on Auditing and is only available when system auditing is enabled. For job services like Actionable Services Copy or Move, Legal Hold Copy, and Single-Step Collections, Data Verification generates an audit trail proving that files were not altered during these actions. This is especially valuable in eDiscovery situations.

    DeduplicationA process that identifies file duplicates based on their digest values. Digests are numerical values that are calculated based on file contents and are unique for all unique file objects. Digest values allow allow file objects to be compared very quickly. Digests are calculated differently for standard files, emails, and container objects. For standard files, a digest is computed for the entire file much like a hash value, for email objects the textual content of the file and certain specific addresses are combined and a digest value is calculated from that, container objects are hashed both as a complete file and as individual sub-objects.

    Deduplication may be applied to export processes (Actionable Services like Download, Export, and Copy) and classification and collection processes to move only unique copies of files to a destination. When deduplication is used a “manifest” list or report may be produced to list and identify all the duplicates that were ignored in the export process, allowing all those duplicates to be identified later.

    If any object, or sub-object, cannot be properly parsed during classification, no digest is produced for that object preventing duplicates of those objects from being identified.

    Reduplication may also be applied to tagging processes to allow a single file copy to be reviewed, but apply metadata tags to all its copies.

    Domino Sever (Lotus)A Lotus server providing groupware solutions and storage.

    Documentum Sever (EMC)The EMC Documentum server manages business content including documents, photos, video, medical images, e-mail, Web pages, fixed content, XML-tagged documents, etc. The Documentum core is a repository that stores content securely under compliance rules and appears as a unified environment, even though content may reside on multiple servers and physical storage devices within a distributed environment.

    eDiscoveryThe process of reviewing electronic files to determine their relevances and responsiveness to a legal matter or case.

    eDiscovery Case ManagerA IS1200 web-application that facilitates eDiscovery for Legal Service Providers.

    26

  • Glossary

    Enterprise VaultA Symantec networked repository for archived email.

    Extended AttributesUser-defined keywords that are extracted during data classification.

    Extraction RuleExtracts user-defined keywords (custom metadata) to add to the metadata file.

    Exchange Server (Microsoft)A microsoft server designed to store and manage email.

    FederationA defined group of member-clusters on a Federation server that can be managed, searched, and reported on as a group. Member-clusters are referred to as Federated clusters.

    Federation ServerAn single-node IS1200 server, with a Federation license, that allows consolidated searching and reporting of up to eight Federated member-clusters of its defined Federation.

    FilerA file server that exports its file systems using NFS or CIFS protocol.

    fullTextThe “content” portion of a file, this is the textual content of word processing files and message content for emails. The extraction fulltext rule is used to save file content to metadata during classifications and saves up to 10 megabytes of content by default. This default may be changed, but it is not recommended. Fulltext extraction is required for the Previewer pane to work and to generate Concepts in the Results Grouping pane.

    GroupwareCollaborative software designed to help people involved in common tasks achieve their goals. Incorporates services such as email, calendaring, text chat, wiki, web-sharing, document control, and advanced search.

    Hash ValuesHash values are used to compare one file with another for duplicates.

    An extremely simplified description of hashing is that the numeric values of all bytes in a file are added into a grand total. The chances of two different files yielding the same result (hash value) are remotely small, so hash values can be used to identify duplicate files, or compare files with the same name to decide if they have been modified.

    Computing hash on an entire file is called a full-hash, and computing hash on a portion of the file is called a partial-hash. A “partial hash” may also be used to increase classification speed and “hashing” can be turned on, or off to increase classification speed.

    27

  • Glossary

    Identity VaultAn encrypted database of usernames and passwords the IS1200 uses to store the credentials used to access registered data repositories, send email notifications, and work with authentication services.

    Kazeon EVAgentA IS1200 service installed on the Enterprise Vault server.

    Kaz-mountThe NFS file system that is the IS1200 metadata repository. on which the Kazeon Information Server stores metadata.

    Kazeon Query LanguageA programming language used in classification and assignment rules to identify files that should received specified metadata tags.

    Kaz-serverThe file server where the metadata repository is located.

    Kaz-shareThe CIFS file system on which the Kazeon Information Server stores metadata.

    Kaz SchemaDefines the set of metadata fields used to build a Search Index for registered data repositories (file systems).

    Legal HoldFiles placed on legal hold are either copied to a secure secondary location where they can preserved for later use, or are locked in their original locations against further change until a legal matter is resolved.

    Legal Service Provider (LSP)A lawyer or trained legal professional that provides legal services for a fee.

    Logging ruleLogging rules audit user actions on files such as file access, creation, modification, and deletion.

    LocalRefers to the local resources (usually the metadata repository) of the Federation server.

    Logging ruleLogging rules audit user actions on files such as file access, creation, modification, and deletion.

    Member-clusterAny of the clusters registered to a particular Federation.

    28

  • Glossary

    MetadataData about data. Metadata is used to search for information and to create reports. Metadata can be file system or custom metadata that the Kazeon Information Server extracts from files during classification. file system metadata includes file type, and file path extracted during basic classification. Custom metadata is generated during deep classification.

    Metadata RepositoryA registered respiratory the IS1200 uses exclusively to record the metadata extracted from registered data repositories during classification services.

    Network File System (NFS)A protocol used primarily by Unix based computers for accessing computer systems and filers over the internet.

    Network Information System (NIS)A network naming, administration, and authentication system for smaller networks that was developed by Sun Microsystems and is used primarily by Unix systems.

    NodeA single Kazeon Information Server appliance.

    PEA FilesA Pool Entry Authorization (PEA) file is generated by the Centera server administrator. A PEA file defines what applications and users can perform read, write, delete, query, copy, or hold operations for Centera objects.

    Policy GroupAssociates one or more authorization rule and logging rule with one or more files to protect information and audit user actions on files.

    PST FilesPersonal STorage files are generally used by email programs like Microsoft Outlook to store user email locally. PST files are also called “composite” files, because they are packages meant to efficiently store a number of smaller related files. Another example of a composite file is a ZIP storage file

    RetentionThe process of enforcing corporate or legal standards for how long certain kinds of files must be preserved for access. Examples of retained files include files responsive to legal matters and medical records.

    RolesAll IS1200 have roles, either admin, auditor, or end-user. If a legal license is installed, there are also legalAdmin, legalSupervisor, legalReviewer, and custodian roles. All users have a role, and the role determines what parts of the IS1200 interface can be seen, and how much of search and report results are viewed.

    29

  • Glossary

    Search IndexAn IS1200 database that stores and indexes the file content metadata (including extended attributes, and fullText) for standard and custom user-defined metadata produced by extraction rules during classifications.

    SharePoint Sever (Microsoft)A Microsoft server in the groupware category.

    SourceOne Server (EMC)The EMC SourceOne server is a comprehensive, policy-based system that automatically collects, organizes, indexes and retains messages and associated attachments and stores them in designated archives connected to shared storage. SourceOne provides indexed searching that works with both EMC storage and other brands such as IBM or NetApp.

    TagsThe names of metadata fields. Tags are always associated with a value. For example, the metadata tag “filename” for any given file is always followed by a value (a text string) containing the actual filename.

    Web-AdminAn IS1200 web application used by IT personnel to administer the server itself, and when the IS1200 is used to help administer other IT resources. Web-Admin is the preferred interface for administering the server.

    Web-ReportsAn IS1200 web application that provides advanced reporting capabilities based on IS1200 metadata.

    Web-SearchAn IS1200 web application that provides basic, advanced, and specialized email searches against IS1200 metadata.

    XML, eXtensible Markup Language fileA file type that uses the XML language to define and describe data that can be transferred between applications like databases and spreadsheets.

    30

  • Index

    AAccess Control List 23ACL 23Actionable Services 23Actions 23Active Directory 23AD 23Advanced Search 23Assignment Rule 23assignment rules 23

    definition 23, 24Auditing 23authentication

    definition 24authorization rules 23

    BBasic Search 24

    CCAS Devices 24CASID 24Celerra 24Centera 24CIFS 25classification rule 24Classification Service 24CLI 25clusters 24Comma Separated Values 24Command Line Interface 25Command Line Interface Reference Guid vCommon Internet Filing System 25Container 25CSV 24Custodian 25customer support v

    Ddata 25data classification 25Data Repository 25data server 25Data Verification 26Datamap 25data-mount 25data-share 25Documentum 26Domino 26

    EeDiscovery 26eDiscovery Case Manager 26eDiscovery Case Manager Administrator’sGuide vEnterprise Vault 27Exchange 27extended attributes 27eXtensible Markup Language 30extraction rules 27

    FFederation 27Federation Server 27filer 27fullText 27

    GGroupware 27

    HHash Values 27

    IIdentity Vault 28Installation and Quick Start Guide v

    31EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • Index

    KKaz Schema 28Kazeon EVAgent 28Kazeon Query Language 28kaz-mount 28kaz-server 28kaz-share 28

    LLegal Hold 28Legal Service Provider 28local 28logging rule 28LSP 28

    MMember-cluster 28metadata 29Metadata Repository 29

    NNetwork File System 29Network Information System 29NFS 29NIS 29nodes 29

    Ppolicy groups 29PST 29

    RRetention 29Roles 29

    SSearch Index 30SharePoint 30snapshot

    Registering File Systems with Snap-shots 15

    SourceOne Server 30

    TTags 30

    WWeb-Admin v, 30Web-Reports v, 30Web-Search v, 30

    XXML 30

    32 EMC SourceOne eDiscovery - Kazeon IS1200 Symantec Enterprise Vault Connector User Guide

  • © 2011 - 2013 EMC Corporation. All Rights Reserved. EMC believes the information in this publication is accurate as of its publication date. The information is subject to change

    without

    notice.

    THE INFORMATION IN THIS PUBLICATION IS PROVIDED “AS IS.” EMC CORPORATION MAKES NO

    REPRESENTATIONS OR

    WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND

    SPECIFICALLY

    DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

    Use, copying, and distribution of any EMC software described in this publication requires an applicable software license.

    EMC2, EMC, and the EMC logo are registered trademarks or trademarks of EMC Corporation in the United State and other

    countries.

    All other trademarks used herein are the property of their respective owners.

    Title PageTable of ContentsPrefaceAudienceRelated DocumentationCustomer Support

    Chapter 1: IntroductionAbout the Kazeon Information ServerExtending Server FunctionalityeDiscovery Solution

    Enterprise Vault Background and Key TermsEnterprise Vault Implementation OverviewEnterprise Vault Implementation In New InstallationsEnterprise Vault Implementation In Existing Installations

    Chapter 2: Installing EV Connector on the Enterprise Vault ServerDownloading the EV Connector InstallerInstalling the EV ConnectorMicrosoft IIS Manager ConfigurationVerifying the Enterprise Vault SetupVerifying the KazeonEVAgent InstallationUnistalling the EV Connector

    Chapter 3: Registering Enterprise Vault ServersRegistering Metadata File Systems for Enterprise VaultRegistering an Enterprise Vault with the IS1200

    Chapter 4: Workflow Changes for Enterprise VaultsClassifying Enterprise Vault SystemsUsing Actionable Services with Enterprise Vault FilesystemsCopy and Move Changes for Web-SearchCopy and Move Changes for Web-Reports

    GlossaryIndex