downloadssymantec

Thisdocumentisprovidedforinformationalpurposesonly.
Allwarrantiesrelatingtotheinformationinthisdocument,eitherexpressorimplied,aredisclaimedtothemaximumextentallowedbylaw.
Theinformationinthisdocumentissubjecttochangewithoutnotice.
Copyright2014SymantecCorporation.
Allrightsreserved.
Symantec,theSymantecLogo,andtheCheckmarkLogoaretrademarksorregisteredtrademarksofSymantecCorporationoritsaffiliatesintheU.
S.
andothercountries.
Othernamesmaybetrademarksoftheirrespectiveowners.
SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineThisdocumentistoprovideanoutlineofsomeofthesecurityaspectsofSymanteceDiscoveryPlatformfromtheviewofasecurityofficerIfyouhaveanyfeedbackorquestionsaboutthisdocumentpleaseemailthemtoIIG-TFE@symantec.
comstatingthedocumenttitle.
Page1SymanteceDiscoveryPlatform7.
1.
4SecurityOutlinePurposeTheSymanteceDiscoveryPlatformistheindustryleading,singlepaneofglassapplicationwhichanswerseachphaseoftheeDiscoveryreferencemodelinanintuitivemannerwithutilitiestoconsolidatetraditionalLegalHoldmethodology,andagentlessandtargetedapproachIdentificationandCollections,apowerfulandflexibleProcessingengine,andarichandrobustReviewandAnalyticssolution.
TheSymanteceDiscoveryPlatformisanappliancebasedsolutionwithanOracleMySQLdatabasebackendintegratedwithwebservicesfromApacheTomcattoprovideaneasytodeployandmanagewebbasedsolutionforbothtechnologyandlegalteamperspectives.
Scanning-toolsandvalidationQualysandCenzicRetina–Nessus–Hyperion(GovernmentStandardTools)GOVT.
CommonProcessoDeploySolutionoScheduleScanoReviewVulnerabilitiesandresolveoRescan(andrepeatasnecessary–typicallythishasbeenasinglescaniterationforsuccess,leavingWindowsUpdatestothecustomertoapply)Symantecperformsvulnerabilityscanningannuallytodeterminehighandmediumvulnerabilitiesandworktoremediateanyissuesfound:VulnerabilityDBVulnerabilitiesOSVulnerabilitiesNetworkRelatedVulnerabilitiesDISASTIGSecurityDocumentationGovernmentStandarddeliveredbyDISAtoprovidespecialized,requiredapplicationsecuritysettingstobemetforsolutiontobeapprovedforadditiontoproductionnetworksregardlessofnetworksecurityclassification(unclassified–topsecret)Page2SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineOSLevelWebApplicationLevelDatabaselevelThirdPartyApplicationLeveloMethodofdisablingLotusNotesclientuntilupdatedtonewestversionwithproduct.
Anti-virusSymanteceDiscoveryPlatformdoesnotbundleananti-virussolutionwithitsappliances.
Furthermore,theredoesnotseemtobesuchaneedincertainconfigurations.
WhydoestheSymanteceDiscoveryPlatformnotneedA/VduringprocessingUnlikeWorms,virusesneedtobeactivated,forexample,bylaunchinganexecutableorinvokingascript.
Indueprocessinganemail,attachmentorloosefile,wemaywellencounteraninfecteddocument,butsolongaswedon'tactuallyruntheattachment,orattempttoevaluateanyembeddedjavascriptduringprocessingweshouldbesafe.
Openinganattachmentasafileissafe,suchaswhatStellantwould,butaskingtheOSorJVMtorunitisnot.
SymanteceDiscoveryPlatformdoessupportnativefileprinting,forexampleprintingaspreadsheetbylaunchingMSExcel.
Virusprotectisaconcernfornativefileprinting.
See"CWVirusScanningGuidelines"formoreinformationonscanningthedirectoryusedfornativedocumentviewing.
Note–IftheSymanteceDiscoveryPlatformenvironmentisnotlicensedfornativedocumentreviewthenativefileprintingdirectorywillnotexistandthereforeisnotapotentialvirusgateway.
SymanteceDiscoveryPlatforminteractingwithVirusoTheSymanteceDiscoveryPlatformiscompatiblewiththeanti-virusapplicationofchoice,butthereareanumberofexceptionsthatmustbekeptinmindtoensurethattheapplianceisproperlyprotected.
OneofthebasictenantsofeDiscoveryisthecollection,processing,andreviewofcasedata.
Thisdatacomesfrommanysourcessuchasfilesharesandemail.
Page3SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineoCollectedemailandotherfiletypesaresometimesfoundtohavephonylinksandmaliciousspywarewhichmaybeneededforaparticularcaseormatter.
Tousethisdataandhaveitavailabletobeprocessedandthenreviewedbythelegalteamisnecessary–butthereisariskthatreviewscouldinadvertentlyclicklinksoropenfilescontainingthesetypesoffileswithinthecasedatapopulation.
oConfiguringtheAnti-VirusclientissimplewithaprovidedAnti-virussetupguide,availableonrequest.
oItispossibletoconfigurethepathforattachmentdirectorybyusingtheproperty"esa.
altAttachmentsDir".
Bydefaultthevaluewouldbeemptyanditdefaultstod:\CW\\scratch\temp\esadb\attCacheDir\.
ProtectingourusersAlthoughtheSymanteceDiscoveryPlatformapplicationshouldcontinuetofunctionnormallyinthepresenceofviruses,theendusers/reviewersareatrisk.
Ausercangetinfectedifhe/shedownloadsanattachment(forexample,afteraSearch)fornativeviewingsuchaswithMSWordorQuickViewPlus.
UsersresponsibilityThefirstresponsibilityremainswithourusers.
WeassumeourusershavescannedalldocumentsandemailsprovidedtoSymanteceDiscoveryPlatformforindexing.
However,sometimesthisisnotpossible.
Forexample,althoughmanyanti-virussoftwareapplicationswillscanzipfiles,theymaynotscanPSTfiles,orWINMAIL.
DATfiles,orCABfiles,orvariousothercontainerfiles.
Itisrecommendedthatalluserdesktopshaveananti-virusapplicationactivelyscanningforanyuserviewingattachmentsandloosefilesnativelyoutsideoftheSymanteceDiscoveryPlatform.
NowormsAlthoughthissectionisnotaboutworms,theydodeserveamention.
Worms,unlikeviruses,arenotactivated:theyareprogramsthatareself-activated(forexamplefromastartupfolder),ortricktheuserand/ortheOSintoactivatingthem.
Onceactivatedtheycancausedamagetothelocalmachineand/orpropagatethemselvesoutwardsthroughopenportsorvarioustoolssuchasemailclients.
Page4SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineWiththeuseoftheFirewallandothermeasureswormsshouldnotbeabletoinfectthenetwork.
OpenPorts/Protocols/EncryptionStandardsThisislistofportstomanipulatewhenprovisioninganinternet-facingorfirewalledsecuredinstanceoftheSymanteceDiscoveryPlatform.
Beawarethatnotallportsarerequiredtostayopenafteraspecificport-relatedtask(s)iscomplete,forexample,Windowsactivationusingport53PortProtocolDescriptionOptionalMisc.
22TCPSSH,SCP/SFTPY25TCPSMTPY53TCP/UDPDNSY80TCPHTTP443TCPHTTPS3389TCPMicrosoftRDPY21ftp626Ldap-sY88kerberosY123ntp389LDAPY135-139RequiredbyNETBIOSthatenablesvariousnetworkrelatedcommunications:MicrosoftfilesharingSMB:UserDatagramProtocol(UDP)portsandTransmissionControlProtocol(TCP)portsUsedforFileShareCollection&DesktpCollection.
MustbeBi-Directional.
3306UsedbyMySQLtoenableremotedatabaseaccess.
MustbeusedwithaSymanteceDiscoveryPlatformclusterorifaseparateMySQLserverisbeingused445ForFileShareandPCCollectionsweusetheSMBorCIFSprotocol,whichusesTCPport445Requiredforfilesharingandneededtoallowsharingfilesacrossanetwork.
MustbeBi-Directional.
2595SymanteceDiscoveryPlatformPage5SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineapplicationportforinter-appliancecommunication135UsedbyvariouswindowscriticalservicesincludingtheFirewallService.
SymanteceDiscoveryPlatformutilizesthenativeWindowsFirewallontheapplianceto"harden"theSymanteceDiscoveryPlatform.
Table1Auditing&reportingSymanteceDiscoveryPlatformprovidesanumberoflogsandauditingserviceswithintheUserInterface(UI)aswellaslocallyontheappliance.
Ifnecessary,theselogsareabletobecompressedandretainedaccordingtolocalretentionandpreservationpolicies.
Thejobsarelistedbyname(seebelow)withthecorrespondingdataandtimeappendedinthenameforeaseofuseandtroubleshooting.
Thelocationofthelogsonthelocalapplianceis:D:\CW\Vx.
x\Logs(Vx.
xdenotesthelatestinstalledversionoftheSymanteceDiscoveryPlatform–ifthedeployedisversion7.
1.
4thepathwouldbeD:\CW\V714\Logs)oAccessLogsProvidesinformationonapplicationaccesstimesonlogin.
oCatalinaLogsProvidesinformationontheApacheTomcatwebserverjobsaswellasanyerrorsforeaseintroubleshootingoServerLogsProvidesinformationonserverrelatedtasksanderrorsforeaseintroubleshootingoJobsLogsoCrawler\RetrieverTheselogfilesarerelatedtocollectionstaskswithinthecollectionsmoduleandrenderingtasksinthereviewmodule.
ThesearelistedbyspecificnamesuchasPSTCrawler,PSTRetriever,etc.
Page6SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineoProcessingTheselogsprovidedetailintoprocessingtaskswithintheCollectionsmodule.
NOTE:LogsaremanagedbythesystemandareoverwrittenServicesThissectionreviewsallofthenecessarySymanteceDiscoveryPlatformspecificservicesprovidingdescriptionsofeach.
SymanteceDiscoveryPlatformspecificservicesaredenotedintheservicesconsolewiththeprefixESA.
Foraccountsrelatedtorunningtheseservices,pleasereferencetheAccountssectionofthisdocument.
EsaApplicationService:FiredaemonoControlstheSymanteceDiscoveryPlatformApplicationServer,whichisresponsibleforindexingtheincomingdocumentsandprocessingsearchrequests.
ThisservicedependsontheMySQLservice.
Noconfigurationisrequired,exceptinthefollowingcases:TocrawlPSTfilesorloosefilesonanetworksharethatrequiresausernameandpassword,thisservicemustrununderaloginaccountwiththosepermissions.
TocrawlanActiveDirectorydomainotherthanthedomainoftheSymanteceDiscoveryPlatform,thisservicemustrununderaloginaccountinthatdomain(usedmainlyforlabtests).
EsaEvCrawlerService&EsaEvRetrieverServiceoResponsibleforcrawlingandretrievingdocumentsonSymantecEnterpriseVaults.
TheloginusernamemustmatchthenameusedbytheSymantecservices(generallythe"VaultServiceAccount").
EsaExchangeCrawlerService&EsaExchangeRetrieverServiceoResponsibleforcrawlingandretrievingdocumentsonExchangeservers.
Theloginusermusthavethefollowingpermissions:ReadExecuteReadpermissionsListcontentsReadpropertiesListobjectsOpenmailsendqueueReadmetabasepropertiesAdministerinformationstoreCreatenamepropertiesintheinformationstorePage7SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineViewinformationstorestatusReceiveAsEsaPstCrawlerService&EsaPstRetrieverServiceoResponsibleforcrawlingandretrievingPSTdatastores.
Notethefollowing:IfthePSTfilesareonanetworksharethatrequiresausernameandpassword,theseservicesmustrununderaloginaccountwithreadandwriteaccesstothenetworkshare.
–IfthePSTfilesareonastoragedeviceattachedtotheSymanteceDiscoveryPlatform,thenonlylocalpermissionsarerequired.
TheSymanteceDiscoveryPlatformrequiresdifferentaccountsbutsimilarprivilegesforeachofthePSTcrawler,andretrieverservices.
SettingupseparateaccountsavoidspotentialmemorycontentionandmanagementissueswithMicrosoft'sMAPIinterfacewhichcouldresultinsub-optimalperformance.
EsaNsfCrawlerService&EsaNsfRetrieverServiceoResponsibleforcrawlingandretrievingNSFdatastores.
TheseservicesmustbeconfiguredwiththepermissionsneededtoaccessNSFfilesoverthenetwork.
Notethefollowing:IftheNSFfilesareonanetworksharethatrequiresausernameandpassword,theseservicesmustrununderaloginaccountwithreadandwriteaccesstothenetworkshare.
IftheNSFfilesareonastoragedeviceattachedtotheSymanteceDiscoveryPlatformappliance,thenonlylocalpermissionsarerequired.
Makesurethatthesetwoservicesareconfiguredtousethesameaccount.
Notesclientmustbeactivatedtoworkwiththisaccount.
oEsaRissCrawlerService&EsaRissRetrieverServiceResponsibleforcrawlingandretrievingdocumentsontheHewlett-PackardIntegratedArchivePlatform(IAP),formerlycalledtheReferenceInformationStorageSystem(RISS).
Toproperlystartandrun,theaccountusedforthisservicemustbesetupwithaccesstheRISSshares.
oMySQLServicesServicesoperateinatraditionalmanner,providingforoperationstabilityoftheSymanteceDiscoveryPlatformMySQLdatabase.
ProcessesServicesBDLGenServer.
exeEsaApplicationService:FireDaemonBelsService.
exeEsaIGCBravaLicenseSrviceCWJava.
exeEsaIGCJobProcessorPage8SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineEVCrawler.
exeEsaNsfCrawlerServiceEVRetriever.
exeEsaNsfRetrieverServiceExchangeCrawler.
exeEsaPstCrawlerServiceExchangeRetriever.
exeEsaPstRetrieverServiceFileFilter.
exeFireDaemon.
exeJava.
exeJPConsole.
exeJPService.
exeMySqld-nt.
exeMysqldump.
exeNSFCrawler.
exeNSFRetriever.
exeNSFScan.
exePSTCrawler.
exePSTRetriever.
exePSTScan.
exePSTWriter.
exeRISSCrawler.
exeRISSRetriever.
exefragmon.
execscript.
exeperl.
exeTable2TherearesomespecificrightsneededtobegrantedtoserviceswithintheSymanteceDiscoveryPlatformpriortotheinstallation.
Acomprehensivelistoftheseisavailableintheinstallationguidewhichcanbefoundherehttp://www.
symantec.
com/business/support/indexpage=content&id=DOC6865Page9SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineIdentificationandcollectionsTheSymanteceDiscoveryPlatformwascreatedwithanallinone,veryintuitiveeaseofuseinmindtoprovideamoreefficientworkflowforeDiscoveryneeds.
TheIdentificationandCollectionmodulewascreatedwithatargetedandagentlessapproach.
TherearenoagentstobeinstalledandthenrepeatedlymanagedandQC'edthroughouttheinfrastructure.
SymanteceDiscoveryPlatformisabletodirectlycollectfromamultitudeofsourcesoutofthebox,withtheonlyrequirementbeingamanageduseraccountwithproperaccesstothetargetedsourceforcollectionpurposes.
Accountstypicallyneedahigherlevelofaccesstoproperlycollectnecessarycasedatasuchas:Read–Readrightsarenecessaryforthedesignatedaccounttoseethedatathatistoberequestedtobecollected.
List–ListRightsareneededforthedesignatedaccounttopresentthedatatotheSymanteceDiscoveryPlatform.
Write–Writerightsarenecessaryforthedestinationaccountsothatthedatarequestedtobecollectedcanbewritteninaforensicallysoundmanner(verymuchlikeROBOCOPY)tothedesignateddatastoreandkeepthecontentandmetadatasoundaninitsoriginalformat.
AccountsTraditionally,softwarewillcomeshippedwithdefaultusernameandpasswordcredentialsoutofthebox,andtheSymanteceDiscoveryPlatformisnodifferent.
Theseaccountsarecompletelyconfigurableandthepasswordsareabletoupdated,renamed,andchangedontheflyasneeded.
LocalAccountsSymanteceDiscoveryPlatformcomesconfiguredouttheboxreadyforimmediateusewithlocalaccounts(listedbelow);thesecredentialsareabletoberenamedandpasswordschangedtofittheneedsandpoliciesofourcustomerenvironment.
CWAppAdminoOneofthedefaultaccountsthatcomesasadefaultconfigurationoftheSymanteceDiscoveryPlatform.
Ifusingthislocalaccount,itMUSTbealocaladministratorasitisusedtorunnecessaryESAServices(seeESAservicedescriptionabove)andwillneedPage10SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineadminlevelaccesslocallyontheappliancetoaccessallofthenecessarydirectoriestoensurethateachmoduleandfunctionwithintheSymanteceDiscoveryPlatformwilloperateatoptimumlevels.
Theusernameandpasswordareabletobeconfiguredtonecessarysecuritystandardsandpoliciesasneeded,andonthefly.
CWPSTRetrieveroOneofthedefaultaccountsthatcomesasadefaultconfigurationoftheSymanteceDiscoveryPlatform.
Ifusingthislocalaccount,itMUSTbealocaladministratorasitisusedtorunnecessaryESAServices(seeESAservicedescriptionabove)andwillneedadminlevelaccesslocallyontheappliancetoaccessallofthenecessarydirectoriestoensurethateachmoduleandfunctionwithintheSymanteceDiscoveryPlatformwilloperateatoptimumlevels.
Theusernameandpasswordareabletobeconfiguredtonecessarysecuritystandardsandpoliciesasneeded,andonthefly.
ThisaccountistypicallyusedtoruntheESAPSTRetrieverservice,asarequirementfortheSymanteceDiscoveryPlatformistohaveaseparateaccountrunningtheESAPSTCrawlerservicetopreventMAPIprofilecorruption.
IGCAdminoThisaccountisusedtypicallyusedtoallowtheBRAVAIGCthirdpartyapplicationtoruninconjunctionwiththeSymanteceDiscoveryPlatform.
oThisaccountisalsousedtoinstalltheSymanteceDiscoveryPlatformandallnecessaryupdatesandupgrades.
Thisisnecessaryasduringtheinstallationphase,ifIGCServices(BRAVA)arebeingupdatedthiswillallowforaverysimpleupdateoftheapplication,withouttheneedforrunningaseparateinstallationpackagetoupdatethesecredentials.
oIftheIGCAdmincredentialsaretobeusedforrunningtheIGCServices–thereareveryspecificstepsthatmustbefollowedtoupdatetheusernameandpassword–asifthisaccountisassignedtoruntheseservices–changesofthecredentialsmustbedoneinaspecificconcentratedefforttoensurethatservicescanbesuccessfullyrestarted.
SymanteceDiscoveryPlatformdefaultusernamesoSuperuserThisistheoutoftheboxapplicationadministratoraccountthatcomeswiththeSymanteceDiscoveryPlatform.
ThisshouldbeutilizedasthebackupadministratorPage11SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineaccountfortheSymanteceDiscoveryPlatformUserInterfaceandcannotbedeleted.
Thepasswordisabletobeupdatedtoalignwithsecuritystandardsandshouldbechangedoncetheinstallationoftheapplianceiscompleteandmanagementoftheapplianceistransferredtolocalstaff.
ItisimperativethattheaccountcredentialsaremaintainedtoensurethatincaseoflossofLDAPconnection,thesuperusercanbeusedtologinlocally.
Thisisconsideredtobelikeawindowslocaladminaccountandusedinlastcasecircumstances.
oDefaultPasswordTheseareavailableuponrequesttothesupportteam,accountrepresentative,orsystemengineer.
DomainAccountsSymanteceDiscoveryPlatformhasthecapacitytousedomainaccountswithinanexistinginfrastructuretoincreasescalability,providebettereaseofmanagement,andprovideadditionalauditingwithexistingtoolsandinfrastructure.
DefaultRolesSymanteceDiscoveryPlatformcomeswithalistofdefaultroleswhichinmostcasesaresuitableforthemajorityofuses.
Customrolescanbecreatedbythesystemadministratorasrequired.
RoleDescriptionDefaultAssignedRightsCaseAdminAdministrator-levelaccesstooneormorecases(includescaseadmincapabilitiesplusallcaseuserrights)GeneralRightsAllowanalysistagsdashboardaccessAllowaccesstomanagementchartsAllowreportsaccessAllowmobileaccessDocumentAccessRightsAllowviewingAllowtaggingAllowmoveorremovingfromfoldersAllowbulktaggingAllowsmarttaggingAllowviewingofpredictionranksAllowpredictivecodingactionsAllowaccesstotageventcommentsAllowaccesstoitemnotesPage12SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineAllowredactingPromptforreasoncodeAllowtaghistoryviewingAllowtaghistorysearchingAllowexportingAllowprintingAllownativedownloadAllowcachingforreviewAllowsearchingandfilteringbyprocessingflagsCaseAdministrationRightsAllcaseadminrightsSystemAdministrativeSettingsCaseManagerManager-levelaccesstooneormorecases(includescaseadmincapabilities(exceptsourcesetuprights)plusallcaseuserrights)GeneralRightsAllowintegratedanalyticsaccessAllowanalysistagsdashboardaccessAllowaccesstomanagementchartsAllowreportsaccessAllowmobileaccessCollectionRightsLegalHoldsRightsAllowLegalHoldaccessLegalHoldmanagementDocumentAccessRightsAllowviewingAllowtaggingAllowmoveorremovingfromfoldersAllowbulktaggingAllowsmarttaggingAllowviewingofpredictionranksAllowpredictivecodingactionsAllowaccesstotageventcommentsAllowaccesstoitemnotesAllowredactingPromptforreasoncodeAllowtaghistoryviewingAllowtaghistorysearchingAllowexportingAllowprintingAllownativedownloadAllowcachingforreviewPage13SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineAllowsearchingandfilteringbyprocessingflagsCaseAdministrationRightsAllowcasestatusaccessAllowusermanagementAllowactivityreportaccessAllowgroupandtopicmanagementAllowtagdefinitionAllowfoldersetupAllowfoldercheck-outmanagementAllowproductionfoldermanagementAllowcustodianmanagementAllowparticipantmanagementViewexceptionsManageexceptionsAllowOCRprocessingOthercasemanagementfunctions(e.
g.
jobs,batches,etc.
)Accesstoallothercasemanagementfunctionsnototherwisespecified.
Thisincludes:batches,jobs,logs,andschedules.
SystemAdministrativeSettingsCaseUserSearch,tagging,andprintdashboardrightstooneormorecasesGeneralRightsAllowanalysistagsdashboardaccessAllowaccesstomanagementchartsCollectionRightsLegalHoldsRightsDocumentAccessRightsAllowviewingAllowtaggingAllowmoveorremovingfromfoldersAllowbulktaggingAllowviewingofpredictionranksAllowpredictivecodingactionsAllowaccesstotageventcommentsAllowaccesstoitemnotesAllowredactingPromptforreasoncodeAllowtaghistoryviewingAllowtaghistorysearchingAllowprintingAllownativedownloadAllowcachingforreviewAllowsearchingandfilteringbyprocessingflagsPage14SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineCaseAdministrationRightsNocaseadminrightsSystemAdministrativeSettingsCollectionAdminAdministrator-levelcollectionsetmanagementGeneralRightsAllowintegratedanalyticsaccessAllowreportsaccessAllowmobileaccessCollectionRightsAllowcollectionsaccessDatamapmanagementCollectionsmanagementCollectionsetsmanagementLegalHoldsRightsDocumentAccessRightsCaseAdministrationRightsNocaseadminrightsSystemAdministrativeSettingsAllowCaseHomeandAllCasesDashboardAccesseDiscoveryAdminAdministrator-levelaccesstooneormorecasesaswellaswellascollectionsetmanagementandintegratedanalyticsGeneralRightsAllowintegratedanalyticsaccessAllowanalysistagsdashboardaccessAllowaccesstomanagementchartsAllowreportsaccessAllowmobileaccessCollectionRightsAllowcollectionsaccessDatamapmanagementCollectionsmanagementCollectionsetsmanagementLegalHoldsRightsAllowLegalHoldaccessLegalHoldmanagementDocumentAccessRightsAllowviewingAllowtaggingAllowmoveorremovingfromfoldersAllowbulktaggingPage15SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineAllowsmarttaggingAllowviewingofpredictionranksAllowpredictivecodingactionsAllowaccesstotageventcommentsAllowaccesstoitemnotesAllowredactingPromptforreasoncodeAllowtaghistoryviewingAllowtaghistorysearchingAllowexportingAllowprintingAllownativedownloadAllowcachingforreviewAllowsearchingandfilteringbyprocessingflagsCaseAdministrationRightsAllcaseadminrightsSystemAdministrativeSettingsAllowCaseHomeandAllCasesDashboardAccessLegalHoldAdminAdministrator-levellegalholdmanagementGeneralRightsAllowintegratedanalyticsaccessAllowmobileaccessCollectionRightsLegalHoldsRightsAllowLegalHoldaccessLegalHoldmanagementDocumentAccessRightsCaseAdministrationRightsNocaseadminrightsSystemAdministrativeSettingsAllowCaseHomeandAllCasesDashboardAccessSystemManagerUnrestrictedrightstomanageentireSymanteceDiscoveryPlatformsystem,includingadministrator-levelaccesstoallcasesGeneralRightsAllowintegratedanalyticsaccessAllowanalysistagsdashboardaccessAllowaccesstomanagementchartsAllowreportsaccessAllowmobileaccessCollectionRightsAllowcollectionsaccessDatamapmanagementCollectionsmanagementCollectionsetsmanagementLegalHoldsRightsPage16SymanteceDiscoveryPlatform7.
1.
4SecurityOutlineAllowLegalHoldaccessLegalHoldmanagementDocumentAccessRightsAllowviewingAllowtaggingAllowmoveorremovingfromfoldersAllowbulktaggingAllowsmarttaggingAllowviewingofpredictionranksAllowpredictivecodingactionsAllowaccesstotageventcommentsAllowaccesstoitemnotesAllowredactingPromptforreasoncodeAllowtaghistoryviewingAllowtaghistorysearchingAllowexportingAllowprintingAllownativedownloadAllowcachingforreviewAllowsearchingandfilteringbyprocessingflagsCaseAdministrationRightsAllcaseadminrightsSystemAdministrativeSettingsAllowCaseHomeandAllCasesDashboardAccessAllowsystemmanagementAllowsupportaccessAllownewcasecreation,casebackup,restore,deletion,templatecreationAllowcollectionsanddatamapbackup,restoreAllowusermanagementAllowadminuserandrolemanagementTable3AboutSymantec:Symantecisagloballeaderinprovidingsecurity,storage,andsystemsmanagementsolutionstohelpconsumersandorganizationssecureandmanagetheirinformation-drivenworld.
Oursoftwareandservicesprotectagainstmorerisksatmorepoints,morecompletelyandefficiently,enablingconfidencewhereverinformationisusedorstored.
HeadquarteredinMountainView,Calif.
,Symantechasoperationsin40countries.
Moreinformationisavailableatwww.
symantec.
com.
Forspecificcountryofficesandcontactnumbers,pleasevisitourWebsite:www.
symantec.
comSymantecCorporationWorldHeadquarters350EllisStreetMountainView,CA94043USA+1(650)5278000+1(800)7213934Copyright2014SymantecCorporation.
Allrightsreserved.
SymantecandtheSymanteclogoaretrademarksorregisteredtrademarksofSymantecCorporationoritsaffiliatesintheU.
S.
andothercountries.
Othernamesmaybetrademarksoftheirrespectiveowners.