Data classification filters
How many pre-existing sensitive data classification filters ship with the product?
There are 58 pre-existing sensitive data classification filters.
Can filters have more than one set of criteria for finding potentially sensitive columns?
Yes, it is possible to find columns by name or field value with regex or length.
If so, can these criteria be configured to be AND or OR?
Yes, filters can have more than one criteria.
Can I ignore certain columns so they aren't treated as sensitive?
Yes, there is possibility to check columns that will be classified or just uncheck the ones that are not considered as classified. These will be considered “ignored”.
How can I tell if a column has been classified?
Classified columns have red dot icon in bottom right corner. Also, there is a column called “Classified” that will displays applied mask.
Can I create and/or modify data classification filters?
Yes, you are able to create and modify your custom filters.
If so, can I share my custom filters with my team via export/importing?
Yes, there are options to import and export filter list.
Does column name search support wildcards?
Yes, additionally you can add more than one value for column name search.
Does field value search support Regular expressions?
Can I see a summary of sensitive data classification results?
Yes, at the end of data masking process result dialog is shown.
Can I create a report of sensitive data classification results?
Yes, it is possible after data masking process is completed.
Can I see the particular filter that classified the column?
Yes, in the main grid after classification is finished, you have information on which filter was used to classify specific columns.
You can access all filters from the toolbar menu by clicking the Filter button in the home tab which will take you to Manage data classification filters window.
Can I see all of the columns that a particular filter classified?
Yes, you can filter the main grid by using filter option in the header of the Classified column and choose to see only columns which match wanted filter.
Can I manually classify a column that wasn't classified?
Yes, every column can be manually classified using check boxes next to column name in main grid.
Can individually filters be enabled/disabled?
Yes, by using check/uncheck option in “Manage data classification filters” window.
Masks
What is a sensitive data mask?
A data mask is functionality that creates a structurally similar but inauthentic version of an organization's data that can be used for purposes such as software testing and user training. The purpose is to protect the actual data while having a functional substitute for occasions when the real data is not required.
What types of masks are there?
There are substitution and redaction mask types.
What is a substitution mask?
Substitution is mask type that uses generators to replace data entirely.
What is a redaction mask?
Redaction is mask type that uses specific value or part of it and replace it with custom value.
What types of substitution masks are there?
Currently there are five substitution masks types: Use original, Random, Predefined, Regular expression and Specific value.
Can data be masked at the individual row level?
Yes, specific row can be masked with substitution mask type when row level is chosen or using reduction mask.
Can I share masks I've created with my team by export/importing?
Yes, under manage mask window there are import and export buttons that can be used for sharing masks.
Can I see all the columns that a particular mask has been assigned to?
Can I assign a mask to more than one column?
Can I process a column with more than one mask?
No, since column can only have one mask it is not possible to process a column with more than one mask.
Can I preview column data before and after masking?
Yes, just by selecting the column from the list this preview is immediately displayed as main windows’ side bar displaying before/after values.
Data generators
What is data generator?
Generator is built-in functionality used for generating synthetic but real-world data in columns e.g. City names. ApexSQL Mask offers over 200 pre-defined generators including things like first and last names, street addresses, city and country names and special lists likes auto-manufacturers, movie titles etc.
How do generators relate to masks?
Masks can use generators to replace original data with new realistic data.
How many built in generators?
There are over 200 built in generators.
Can I create/modify my own generators/sub-generators?
No, you cannot create generators but you can modify certain type of generators like Regular expression, Specific value, Predefined and Use original. Random generator cannot be modified.
Auto-assignment of masks
How does the app. automatically apply filters to some columns?
The application is using keywords from filters and scans through all column names.
Can auto-assignment of masks behavior be modified e.g. turned on/off or otherwise customized?
Yes, this can be turned off in general options by unchecking “Automatically scan the database for sensitive data”.
Can generators be associated with a Data classification filter to automatically apply masks to columns it positively classifies?
Processing
Does ApexSQL Mask modify an existing database and/or create a modification script that I can run later?
Both options are available.
Can I automate the process of data masking?
Yes, ApexSQL Mask supports CLI both batch and PowerShell.
Can I add a mask to a column that hasn't been classified?
Yes, user has ability to manually set columns to be classified.
Can I see a summary of the results from processing masks?
Yes, after masking process is completed the result dialog appears and user is able to see the summary, create report and export results.
Options
Does ApexSQL Mask recognize CHECK constraints?
Yes, ApexSQL Mask recognize CHECK constraints and can pre-emptively disable them.
