Content-Aware Rules (Regular Profile) : Rules for Devices : Content-Aware Shadowing
  
Content-Aware Shadowing
Before Content-Aware Rules can be used for shadow copy operations, one must turn on shadowing in Auditing, Shadowing and Alerts at the device type-level. Content-Aware Rules that apply to shadow copy operations will filter the shadow copies of data and files written by the user. As compared to shadowing purely by device type channel, this feature can significantly reduce the amount of triggered shadowed files to just those that contain sensitive or at least interesting data that can be looked at further by the audit team.
The following table provides summary information on shadowing rights that can be specified in Content-Aware Rules.
 
Shadowing rights
Description
Generic: Read
Controls whether to create shadow copy of data with specified content read from a device. Applies only to the MTP device type.
Generic: Write
Controls whether to create shadow copy of data with specified content written to a device. Applies to Floppy, iPhone, MTP, Removable, Palm and Windows Mobile devices.
Generic: Mapped Drives Write
Controls whether to create shadow copy of data with specified content written to a device. Applies only to TS Devices.
Generic: Print
Controls whether to create shadow copy of documents with specified content sent to printers. Applies only to the Printer device type.
Generic: Copy to clipboard
Controls whether to create shadow copy of data with specified content pasted from the clipboard. Applies only to the Clipboard device type.
Generic: Clipboard Incoming Text
Controls whether to create shadow copy of text data with specified content pasted from the clipboard to a terminal session/virtual machine. Applies only to TS Devices.
Generic: Clipboard Outgoing Text
Controls whether to create shadow copy of text data with specified content pasted from the clipboard from a terminal session/virtual machine. Applies only to TS Devices.
Generic: Clipboard Incoming Image
Controls whether to create shadow copy of images with specified content pasted from the clipboard to a terminal session/virtual machine. Applies only to TS Devices.
Generic: Clipboard Outgoing Image
Controls whether to create shadow copy of images with specified content pasted from the clipboard from a terminal session/virtual machine. Applies only to TS Devices.
Generic: Clipboard Incoming File
Controls whether to create shadow copy of files with specified content pasted from the clipboard to a terminal session/virtual machine. Applies only to TS Devices.
Generic: Clipboard Outgoing File
Controls whether to create shadow copy of files with specified content pasted from the clipboard from a terminal session/virtual machine. Applies only to TS Devices.
Generic: Clipboard Incoming Unidentified Content
Controls whether to create shadow copy of any uncategorized data with specified content pasted from the clipboard to a terminal session/virtual machine. Applies only to TS Devices.
Generic: Clipboard Outgoing Unidentified Content
Controls whether to create shadow copy of any uncategorized data with specified content pasted from the clipboard from a terminal session/virtual machine. Applies only to TS Devices.
Encrypted: Write
Controls whether to create shadow copy of data with specified content written to an encrypted device. Applies only to Removable devices.
Special Permissions: Write Calendar
Controls whether to create shadow copy of data with specified content written to a calendar on a mobile device from a PC. Applies to iPhone, Palm and Windows Mobile devices.
Special Permissions: Write Contact
Controls whether to create shadow copy of contacts with specified content written from a PC to a mobile device. Applies to iPhone, Palm and Windows Mobile devices.
Special Permissions: Write E-mail
Controls whether to create shadow copy of email messages with specified content written from a PC to a mobile device. Applies to iPhone, Palm and Windows Mobile devices. For iPhone, this right controls the shadow copying of email account settings but not email messages because iTunes does not support sync of messages.
Special Permissions: Write Attachment
Controls whether to create shadow copy of email attachments with specified content written from a PC to a Windows Mobile or Palm device.
Special Permissions: Write Favorite
Controls whether to create shadow copy of favorites with specified content written from a PC to a Windows Mobile or iPhone device.
Special Permissions: Write File
Controls whether to create shadow copy of files with specified content written from a PC to a mobile device. Applies to iPhone, Palm and Windows Mobile devices.
Special Permissions: Write Media
Controls whether to create shadow copy of media data with specified content written using Windows Media Player to a Windows Mobile device from a PC and media files with specified content written to a Palm or iPhone device from a PC.
Special Permissions: Write Backup
Controls whether to create shadow copy of the iPhone backup data with specified content written from a PC to iPhone.
Special Permissions: Write Note
Controls whether to create shadow copy of notes with specified content written from a PC to a mobile device. Applies to iPhone, Palm and Windows Mobile devices.
Special Permissions: Write Pocket Access
Controls whether to create shadow copy of Pocket Access databases with specified content written from a PC to a Windows Mobile device.
Special Permissions: Write Task
Controls whether to create shadow copy of tasks with specified content written from a PC to a mobile device. Applies to Palm and Windows Mobile devices.
Special Permissions: Write Expense
Controls whether to create shadow copy of Palm Expense application data with specified content written from a PC to a Palm device.
Special Permissions: Write Document
Controls whether to create shadow copy of Palm documents with specified content written from a PC to a Palm device.
Special Permissions: Write Unidentified Content
Controls whether to create shadow copy of any uncategorized data with specified content written from a PC to a Windows Mobile device.
Special Permissions: Copy Text
Controls whether to create shadow copy of text data with specified content pasted from the clipboard. Applies only to the Clipboard device type.
Special Permissions: Copy File
Controls whether to create shadow copy of files with specified content pasted from the clipboard. Applies only to the Clipboard device type.
Special Permissions: Copy Image
Controls whether to create shadow copy of images with specified content pasted from the clipboard. Applies only to the Clipboard device type.
Special Permissions: Screenshot
Controls whether to create shadow copy of screenshots with specified content pasted from the clipboard. Applies only to the Clipboard device type.
Special Permissions: Copy Unidentified Content
Controls whether to create shadow copy of any uncategorized data with specified content pasted from the clipboard. Applies only to the Clipboard device type.
 
Note: Generic shadowing rights specified for the Removable device type apply only to unencrypted devices. Encrypted shadowing rights specified for the Removable device type apply only to encrypted devices. To specify shadowing rights for both encrypted and unencrypted Removable devices, one must specify both Generic and Encrypted shadowing rights.