Description

The main purpose of Enterprise Vault (EV) Compliance Accelerator (CA) is to Randomly Sample messages to/from Monitored Employees. Random Sampling uses a process called Department Tagging, also known as Tagging, and will not Sample messages that are not Tagged. Tagging is a function that is independent of Searching; however, Searches can use Department Tagging (default behaviour) or can be configured to run without Department Tagging (Force Legacy).

For messages to be Department Tagged:

- The Archive storing the messages must be a Tagging-eligible Archive. The current eligible types are Exchange/Domino Journal, SMTP, Shared.
- The Archive is listed in the VaultID(s) field in the appropriate CA Customer's properties in EVBAAdmin. See note below.
- The message's sender and/or recipient must be a Monitored Employee (an Employee that is a member of one or more Departments in the CA Customer where the Employee is not Suspended from Monitoring).
- The message must have a valid message type, e.g.: Exchange, Domnino, Bloomberg, Fax. This is the EV Index metadata attribute Vault.MsgType.
- The message must have a valid message direction, e.g.: internal, external inbound, external outbound. This is the EV Index metadata attribute Vault.MsgDirection.

Note - CA requires one and only one CA Customer per EV Site be configured with a blank VaultID(s) field, regardless of how many CA servers exist in an EV Site and regardless of how many CA Configuration databases exist across multiple CA servers in an EV Site. This is called the Default Customer, also known as the 'catch-all' Customer. The Storage Tagging process Tags each item during Archiving based on the ArchiveID(s) specified in each Customer's VaultID(s) field. The purpose of the Default Customer is to Tag items in Archives that are not targeted by any other CA Customer in the EV Site. If there is only one CA Customer in an EV Site, the VaultID(s) field for this Customer must be blank. If multiple CA Customers exist in an EV Site, regardless of which CA server or CA Configuration database they are associated to, each CA Customer must target different Taggable Archives in their respective VaultID(s) fields; one and only one of these combined Customers must have a blank VaultID(s) field.

As Random Sampling is the main function of CA, there is no switch or setting that disables Random Sampling for a CA Customer or for all CA Customers. If there is a business need to disable Random Sampling and still allow Searches to use Tagging, there are 2 options that must be effected on a per-CA Customer basis.

Option 1: Suspend all required Employees in the Employees tab.

1. Open the CA Client logged in as a user with rights to edit Employees. Typically the Vault Service Account (VSA) has these rights.
2. Go to the Employees tab.
3. Select the Employee needing to be suspended. Messages to/from the Employee will not be Random Sampled across all Departments where the Employee is a Monitored Employee.
4. Click Suspend.

Note - There is no option to select multiple Employees at a time. There is also no option to Suspend all Employees in a Group - the Suspend option is on a per-Employee basis.

To reverse these changes, repeat the steps and select the Enabled option (Suspend will be greyed out).

Option 2: Enable the option 'Disable monitoring of employees in this department' for each Departments.

1. Open the CA Client logged in as a user with rights to edit Department Properties. Typically Department Owner and the Vault Service Account (VSA) have these rights.
2. Go to the Departments tab.
3. Open the Department needing Monitoring to be disabled.
4. In the Properties tab, click on the Monitoring sub-tab (at the bottom).
5. Select the option 'Disable monitoring of employees in this department' and click 'Save'.
6. Repeat for each Department.

Note - There is no option to select multiple Departments at a time. The 'Disable monitoring of employees in this department' option must be selected on a per-Department basis.

To reverse these changes, repeat the steps and de-select the the option 'Disable monitoring of employees in this department'.