Data classification filters
How many pre-existing sensitive data classification filters ship with the product?
There are 59 pre-existing sensitive data classification filters.
Can filters have more than one set of criteria for finding potentially sensitive columns?
Yes, it is possible to find columns by name or field value with regex or length.
If so, can these criteria be configured to be AND or OR?
Yes, filters can have more than one criteria.
Can I ignore certain columns, so they aren't treated as sensitive?
Yes, there is a possibility to check columns that will be classified or just uncheck the ones that are not considered as classified. These will be considered as “ignored”.
How can I tell if a column has been classified?
Classified columns have a red dot icon in the bottom-right corner. Also, there is the Classified column that will display the applied mask:
Can I create and/or modify data classification filters?
Yes, you can create and modify your custom filters.
If so, can I share my custom filters with my team via export/import?
Yes, there are options to import and export a filter list.
Does column name search support wildcards?
Yes, additionally you can add more than one value for a column name search.
Does the Find panel support search using Regular expressions?
Yes, Regular expressions are supported by the Find panel.
Can I see a summary of sensitive data classification results?
Yes, at the end of the data masking process, the Result dialog is shown.
Can I create a report of sensitive data classification results?
Yes, it is possible after the data masking process is completed.
Can I see the particular filter that classified the column?
Yes, in the main grid after classification is finished, you have information on which filter was used to classify specific columns.
You can access all filters from the toolbar menu by clicking the Filter button in the Home tab which will take you to the Manage data classification filters window.
Can I see all of the columns that a particular filter classified?
Yes, you can filter the main grid by using a filter option in the header of the Classified column and choose to see only columns that match the wanted filter.
Can I manually classify a column that wasn't classified?
Yes, every column can be manually classified using checkboxes next to the column name in the main grid.
Can filters be individually enabled/disabled?
Yes, by using the Check/uncheck option in the Manage data classification filters window.
Masks
What types of data masking are supported?
Static and Dynamic data masking are supported.
What types of Static masks are supported?
The Substitution and Redaction static mask types are supported.
Which types of generators can be used for creating the substitution masks?
In the Manage masks window for creating a substitution mask seven types of generators can be chosen: Use original, Random, Predefined, Regular expression, Specific value, SQL script, and External sources.
Can I hide sensitive data without changing the data in the database?
Yes, by creating a Dynamic data mask under the Hide original tab in the Manage masks window, the sensitive data will be hidden. That sensitive data can be unhidden for privileged persons, and data in the selected database will not be changed.
Can I choose who will see masked data?
Yes, by using the Dynamic data masking feature, under the Hide original tab of the Manage mask window by clicking on the User permission button can be chosen who will see masked data and who will see original data:
Can data be masked at the individual row level?
Yes, a specific row can be masked with substitution mask type when row-level is chosen or using a reduction mask.
Can I share the masks I've created with my team by export/import?
Yes, under the Manage mask window there are import and export buttons that can be used for sharing masks.
Can I see all the columns that a particular mask has been assigned to?
Yes, the main grid can be filtered by using the filter option in the header of the Mask name column and choose to see only masks which are wanted to filter.
Can I assign a mask to more than one column?
Yes, in the Apply to masks window can be chosen the columns on which will be applied one mask.
Can I process a column with more than one mask?
No, since a column can only have one mask it is not possible to process a column with more than one mask.
Can I preview column data before and after masking?
Yes, just by selecting the column from the list in the main grid, the Preview window will display column data before and after masking.
Data generators
How do generators relate to masks?
Masks can use generators to replace original data with new realistic data.
How many built-in generators are supported?
There are over 220 built-in generators.
Can I create/modify my generators/sub-generators?
No, you cannot create generators, but you can modify the certain type of generators like Regular expression, Specific value, Predefined, Use original, External source, and SQL script. The Random generator cannot be modified.
Auto-assignment of masks
Does the application automatically apply filters to some columns?
Yes, the application scans through all column names and uses keywords from filters.
Can auto-assignment of masks behavior be modified e.g. turned on/off or otherwise customized?
Yes, this can be turned off in the Options window, under the General tab by unchecking the Automatically scan the database for sensitive data option.
Can generators be associated with the Data classification filter to automatically apply masks to columns?
Yes, generators can be associated by going to the Manage data classification filters window where a new filter can be created to apply masks to desired columns.
Processing
Can ApexSQL Mask modify an existing database and/or create a modification script that I can run later?
ApexSQL Mask supports the Update database, Create script, and Create script per table options which are available under the Process masks window:
Can I automate the process of data masking?
Yes, ApexSQL Mask supports the Command Line Interface (CLI) and via the Automation script, users can create batch and PowerShell scripts.
Can I add a mask to a column that hasn't been classified?
Yes, a user can manually set columns to be classified.
Can I see a summary of the results from processing masks?
Yes, after the masking process is completed, the resulting dialog will appear, in which users can see the summary, create reports, and export results.
Options
Does ApexSQL Mask recognize the Check constraints?
Yes, ApexSQL Mask recognizes the Check constraints and can pre-emptively disable them.
