Trellix DLP Endpoint seamlessly integrates with Boldon James Classifier (API 2.0) which supports Control-flow Enforcement Technology with Hardware-enforced Stack Protection (CET/HSP) Endpoints. The software automatically identifies file classification labels, such as confidential or internal.
When you classify a file as Confidential or Internal using Boldon James, the label is stored with the metadata of the file. The Trellix DLP Endpoint reads that label and enforces your organization's DLP policy for example, blocking upload of a confidential document to an unauthorized website.
Configure Boldon James Classifier
Configure the Trellix DLP Endpoint for Windows to read and enforce Boldon James classification labels through Trellix ePO, then deploy the policy to your endpoints:
In Trellix ePO - On-prem, select Menu → Policy → Policy Catalog.
From the Product drop-down list, select Data Loss Prevention, then select
Windows Client Configuration.Select a policy to edit, or click Duplicate for the Trellix Default configuration.
On the Operational Mode and Modules page, navigate to Outlook Add-ins
and select Activate 3rd Party Add-in Integration.On the Email Protection page, locate Outlook 3rd Party Add-in Integration
and select Boldon James from the Vendor Name drop-down menu.Click Apply Policy.
Configuring classification for Boldon James integration
You can classify files by using either automatic or manual classification methods.
Automatically classify files to enforce DLP policies using Boldon James classification tags
Classify rules in ePO to detect Boldon James labels. When a user shares, uploads, or saves a labeled file, Trellix DLP automatically applies the corresponding protection policy.
In Trellix ePO - On-prem, select Menu → Data Protection → Classification.
Click New Classification, enter a unique name, and click Save.
Select Actions → New Content Classification Criteria.
Select Third Party tags from the properties list.
Specify the Boldon James selector name and value:
Select a comparison operator (equals one of, equals all of, contains one of, or contains all of).
Type the exact Boldon James selector name and value string.
Click Save.
Result:
The DLP Endpoint now reads Boldon James classification labels on the endpoint. When a user performs an action that matches a configured rule for example, uploading a confidential document to an unauthorized website, the DLP Endpoint blocks the action and logs an incident in Trellix ePO.
Manually classify files to enforce DLP policies using Boldon James classification tags using right-click
The Boldon James File Classifier is an endpoint extension that integrates directly with Windows Explorer and standard desktop applications. It enables users to view, apply, change, or remove classification labels on any file type directly from the Windows file system without needing to open the file in its native application.
When a label is applied, File Classifier embeds the classification metadata directly into the file’s properties and displays a visual overlay icon on the file in Windows Explorer. Use this to label any file directly from the file system.
In Windows Explorer, right-click the file you want to classify.
Select Classify from the context menu.
Select a classification label — Public, Business, Confidential, or Internal.
Click OK.
Result:
Boldon James applies the label and updates the file's overlay badge in Windows Explorer. Trellix DLP Endpoint reads the label and enforces any matching DLP rules — for example, blocking upload of an Internal document to an unauthorized website.