Stormshield Data Shredder

Stormshield Data Shredder can be configured in the shredderPolicy section of the .json file. The table below describes its parameters. In the SDMC administration console, the equivalent parameters are found in Policies > Features > Shredder.

For more information on configuring this feature, refer to the section Configuring Stormshield Data Shredder in the Administration guide.

Parameter Type Description Prescribed values SDMC
addDesktopIcon Indicates whether a Stormshield Data Shredder shortcut will be added to the Windows desktop to enable dragging and dropping.

true,

false

Add desktop shortcut
allowBinShredding Indicates whether the user is allowed to shred files in the bin.

true,

false

N/A
allowDragAndDropOn
ShredderIcon
Indicates whether the user is allowed to shred files by dragging and dropping on the Shredder icon.

true,

false

Enable dragging and dropping items on the SD Shredder icon
allowFileShredding Indicates whether the user is allowed to shred files.

true,

false

Allow file shredding
allowFolderShredding Indicates whether the user is allowed to shred folders.

true,

false

Allow folder shredding
allowShredding
Interruption
Indicates whether the user is allowed to interrupt shredding operations.

true,

false

Allow the interruption of shredding operations
confirmForEachFile If several files are being shredded, indicates whether user confirmation is required for each file.

true,

 

false

Confirm for each file

Confirm only once for all files

exclusionList

Specifies the parameters of the exclusion list. To use this list, refer to exclusionList section.

 

N/A
readOnlyFilesShredding

Indicates how to process read-only files.

Allowed values are:

  • "neitherShredNorNotify" to neither shred the file nor notify the user,

  • "doNotShredButNotify" to not shred the file but notify the user,

  • "askConfirmation" to request confirmation before shredding,

  • "treatAsUsual" to shred according to the same rules applied to other files.

neitherShred
NorNotify,

doNotShred
ButNotify,

askConfirmation,

 

 

treatAsUsual

 

Never shred

 

Report the files

 

Ask confirmation

 

Process like standard files

shredHiddenFiles Indicates whether the user is allowed to shred hidden files.

true,

false

N/A
shreddingPatternBytes Bits used to replace the content of shredded files List of positive integers between 0 and 255 N/A

exclusionList section

Using an exclusion list, you can exclude some files to prevent them from being shredded by mistake. The following parameters are specified in the shredderPolicy.exclusionList section of the .json file. This list is optional.

Parameter Type Description Prescribed values SDMC
displayWarning Indicates whether a warning window must be displayed if an operation could not be completed because of the exclusion list.

true,

false

N/A
files Optional. List of files to be excluded from shredding.

 

N/A
  askForConfirmation: Indicates whether confirmation must be requested for the shredding of excluded files.

true,

false

N/A
 

path: File path. To indicate several files, the “files” list must contain several objects, each with a different “path” property. For example:

"files": [
{
"path": "path1"
},
{
"path": "path2"
}
]
String N/A
folders Optional. List of folders to be excluded from shredding.

 

N/A
  askForConfirmation: Indicates whether confirmation must be requested for the shredding of excluded folders.

true,

false

N/A
  path: Folder path.

To indicate several folders, this parameter must be used several times. See the "files" parameter.

String N/A
  recursive: Indicates whether sub-folders are included in the exclusion list.

true,

false

N/A
masks Optional. List of masks to be excluded from shredding.

 

N/A
  askForConfirmation: Indicates whether confirmation must be requested for the shredding of excluded files.

true,

false

N/A
  path: Path of the mask with the "*.ext" extension to apply the mask.

To indicate several masks, this parameter must be used several times. See the "files" parameter.

String N/A
  recursive: Indicates whether sub-folders are included in the exclusion list.

true,

false

N/A

shreddingList section

Files included in shredding lists are automatically shredded at a predetermined time or when a predetermined event takes place. The following parameters are specified in the shredderPolicy.shreddingList section of the .json file.

Parameter Type Description Prescribed values SDMC
askConfirmation

Indicates whether a confirmation is required before automatic shredding.

true,

false

N/A
displayReport Indicates whether to display a report after automatic shredding.

true,

false

N/A
files Optional. List of files to shred automatically. N/A
 

path: File path. To indicate several files, the “files” list must contain several objects, each with a different “path” property. For example:

"files": [
{
"path": "path1"
},
{
"path": "path2"
}
]
String N/A
fixedTimesInSeconds List of times at which files are automatically shredded. Expressed in number of seconds from 00:00. For example, 1:30 a.m. is represented by a value of 5400. List of positive whole integers N/A
folders Optional. List of folders to shred automatically N/A
 

path: Folder path. To indicate several folders, this parameter must be used several times. See the "files" parameter.

String N/A
  recursive: Indicates whether sub-folders are included in the shredding list.

true,

false

N/A
intervalMinutes Optional. Frequency with which files are automatically shredded. Expressed in minutes. Positive integer. N/A
masks Optional. List of masks to shred automatically.

 

N/A
  path: Path of the mask with the "*.ext" extension to apply the mask. To indicate several masks, this parameter must be used several times. See the "files" parameter. String N/A
  recursive: Indicates whether sub-folders are included in the shredding list.

true,

false

N/A
onDisconnection Enables automatic shedding when disconnecting from SDS Enterprise

true,

false

N/A
onScreenSaverStarted Enables automatic shredding when screensaver starts.

true,

false

N/A
onSessionLock Enables automatic shredding when locking SDS Enterprise session.

true,

false

N/A