Sensor Inspection Configuration

General Settings

Settings	Default	Range	Descriptioon
Maximum File Size	25 MB	1 - 1000 MB	The maximum size of a file that will be sent to the content inspection service for analysis
file hash maximum size	1000 MB	1000 - 500,000 MB	This is the maximum size of a file that will be hashed as part of the discovery process

Data In Motion Settings

Content inspection policies control the in-motion activity that is used to trigger content inspection of the content related to the event. This is used to select when content inspection is triggered and how the cache of know content is populated.

As with the data protection policies there are two options that can be utilised

All policies

This setting will provide the functionality that is default for the Cyberhaven platform. All content inspection policies that are enbled at any time will be applied to this profile. This is applied to all current and future content inspection policies that are configured in the platform.

Selected policies

This allows for the selection of a subset of enabled content inspection policies from the total list to be applied to the profile. This settings allows for selective deployment of inspection policies without requiring the policy itself to be crafted in such a way as to only apply to specific devices and can be used for testing and limited deployment.

Also included here is the option for "Scan removable drives" which then will also apply the selected content inspection polices to data in motion events involving removable devices.

Data At rest Settings

Discovery Scan

Settings	Default	Range	Descriptioon
Discovery Interval	00 seconds	600 - 86,400 seconds	This is the interval for refresh of the locations targeted by the discovery scan and the addition of the discovered content to the data catalog

Content Inspection Scan

File Extensions

Locations

• Inclusions This is the selection of patsh that will be targetd

• Exclusions

Scan Network Shares

Scan Removable Devices