Docstoc

Enterprise Vault 2007 - FTP Directory Listing

Document Sample
Enterprise Vault 2007 - FTP Directory Listing Powered By Docstoc
					                    Enterprise Vault 2007

                               Demo Guide
                          (Introduction and Orientation)




Document Version:     3.0
Document Author:      Alex Brown

To be used with Demo Images: Build O or above




All feedback to be sent to ev-tfe-feedback@symantec.com


                                                           1
Table of Contents

Environment Explanation ............................................................................................................. 3


Core Functionality ........................................................................................................................ 5
Exchange Mailbox Archiving ......................................................................................................... 9
Exchange Journal Archiving ........................................................................................................ 15
Exchange Public Folder Archiving................................................................................................ 17
File System Archiving ................................................................................................................. 19
Domino Mailbox Archiving ......................................................................................................... 22
Domino Journal Archiving .......................................................................................................... 28
SMTP Archiving .......................................................................................................................... 30
SharePoint Archiving .................................................................................................................. 32
Automatic Classification Engine .................................................................................................. 34
User Classification Engine ........................................................................................................... 35
Discovery Accelerator ................................................................................................................ 36
Compliance Accelerator ............................................................................................................. 39
Live Communication Server & IM Manager ................................................................................. 42
Encase Ingest Connector ............................................................................................................ 44




                                                                                                                                           2
Environment Explanation

There are 3 VMWare images in the Enterprise Vault demo environment. There are also 2 additional
VMWare images which can be used to give an SMS demo. Each of the two demo environments
shares a common VMware (VM_EV_SMS_MAIL_x32).
All of these images can be used together to show a complete end to end SMS and Enterprise Vault
demonstration or individually depending on the type of functionality you wish to demonstrate.
Please note that in order to demonstrate SMS functionality please refer to the SMS demo guide
available separately (There are also additional Virtual Network configuration settings required which
are also detailed in the SMS demo guide).

If you wish to demonstrate Exchange Archiving, File Archiving, Discovery Accelerator, ACE or the IM
Manager (Instant Messaging) integration you can just use SERVER1.
If you wish to demonstrate Domino Archiving, SharePoint Archiving, Compliance Accelerator, SMTP
Archiving or UCE you will need to start and also use SERVER2 as well as SERVER1.
For any of the demonstrations there is also a Windows XP client (CLIENT) which can be used to show
true user experience.

The list below details the software configured on each of the VMWare images. Following this is a
chapter separated catalogue of how to setup and use the images for each of the demonstrations
listed above. Use the Table of Contents to link to a chapter quickly.

Please also take time to read the notes at the end of this section.

Note – SERVER1 is the shared image between the EV and SMS demo environments.

VM Image name = VM_EV_SMS_MAIL_x32
Hostname = SERVER1
Memory = 668KB
    Windows 2003 Server Sp2 (Domain Controller)
    Exchange 2007 Server
    SQL 2005 Server Enterprise Edition + Reporting Services
    Office 2003 (Outlook & Excel)
    Live Communication Server 2005 Sp1
    Enterprise Vault 2007 Sp3
    Discovery Accelerator 2007 Sp3
    IM Manager 8.4
    Automatic Classification Engine
    IM Clients (Yahoo, Pidgin, Office Communicator)


VM Image name = VM_EV_SERVER2_x32
Hostname = SERVER2
Memory = 668KB
    Windows 2003 Server Sp2

                                                                                                   3
      Office SharePoint Server 2007
      SQL 2005 Server Express Edition
      Lotus Domino Server 7.0.2
      Lotus Notes 7.0.2
      Enterprise Vault 2007 Sp3
      Compliance Accelerator 2007 Sp3
      User Classification Engine


VM Image name = VM_CLIENT_x32
Hostname = CLIENT
Memory = 256KB
    Windows XP Sp2
    Office 2007
    Lotus Notes 7.0.3
    Windows Desktop Search 3.1
    Symantec Anti- Virus Corporate Edition
    IM Clients (Yahoo, Pidgin, Office Communicator)



Important Notes –

 When starting the images for the first time you may be prompted to create
  a new UUID. Always choose to keep the current UUID.

 When starting the images for the first time allow VM_EV_SMS_MAIL_x32
  (SERVER1) to fully start up first before starting VM_EV_SERVER_x32
  (SERVER2) or VM_CLIENT_x32 (CLIENT).


Performance Recommendations –
 Start-up the images and then take running snapshots.
 Regularly defragment the volume holding the VMWare images.
 Place the Images on an external HDD.
 Disable Anti-Virus on demand scanning for all VMWare image files.
 Run the images in full screen mode.




                                                                              4
Core Functionality

Quick Start
       Image Required

               VM_EV_SMS_MAIL_x32 (SERVER1)

       User Account
              Login to SERVER1 as Admin, password = symc4now

       How to start the demo

               1. No preparation required.


Walkthrough Demo
   1. Open the EV Administration console using the desktop icon.


Retention Categories
   2. Browse to Retention Categories container (Enterprise Vault -> Directory on EVSITE -> Demo
       Site -> Policies -> Retention Categories).

   3. Show the various retention categories.

Talking Points: Enterprise Vault is able to retain messages for varying lengths of time, and even
prevent manual deletion if necessary. This is a critical piece of a compliance solution. Note that
Enterprise Vault can store on SEC-compliant storage hardware devices such as NetApp devices with
Snaplock enabled, EMC’s Centera device, IBM’s DR550, and Pegasus/Plasmon.


Vault Stores and Partitions
   4. Browse to the Vault Stores container (Enterprise Vault -> Directory on EVSITE -> Demo Site -
       > Vault Stores) and highlight the Exchange Vault Store. Explain that Enterprise Vault has
       what we call an “Open Storage Layer”, meaning the customer has the freedom to choose the
       appropriate storage vendor and device for the appropriate users in the organization. EV’s
       requirements for compatibility are very simple – either use any NTFS-formatted folder
       directly attached or via UNC path, or one of the products that have gone through API
       integration and certification (there are such integrations with leading storage vendors such
       as Netapp, IBM, EMC, Pegasus, and even our own NetBackup platform). In this system you
       can see we have 4 different “vault stores” which are logical groupings of physical storage
       devices (“vault store partitions”). If you need to be selective about the type of storage a
       particular archive requires (for example, executive mailboxes on the fastest and most
       expensive storage, or financial services broker/dealer mailboxes on non-erasable storage),
       you can put their archives in a dedicated Vault Store with partitions based on the expensive
       storage.

   5. Here you can see that the Exchange Vault Store vault store has 3 different physical storage
      partitions/paths that provide scalability as the data volume grows over time. One partition
      is open at a time, and as you can see here I have created 1 additional partition that is
                                                                                                     5
       “ready” to be used at short notice when the currently open partition fills up (i.e. you get low
       on disk space in a particular storage path). Even when disk space is not an issue, it might be
       a good idea to close a partition and start using another location in order to reduce the size of
       your “full” backups.

   6. Right click on the Exchange Vault Store and select Properties. Show the drop down box
      Remove Safety Copies and explain that the customer might want to ensure that no data can
      be lost between the time you archive, and the time you back up the EV servers and the
      archived data. The After Backup setting will only delete the original copy of the data (for
      example, from Exchange or Domino) after Enterprise Vault’s physical storage has been
      successfully backed up (watching for the archive bits to disappear on the archive files). This
      might be especially important for the users or journal mailboxes/databases in your
      organization that fall under various compliance regulations.

   7. Now select the Exchange Vault Store and highlight the Exchange Vault Store Ptn1 partition
      and right click and select Properties.

           a. Show the General tab. Explain that the location of the storage is shown here and
              you can see the physical path of this particular vault store partition. In this system
              we are storing this partition on our internal F: drive, but note that this path does not
              have to be directly-attached – there could also be a UNC path specified to utilize
              storage elsewhere on the network

           b. Show the Collections tab. Explain that collections are actually an option for almost
              any storage device that is not WORM. For NetBackup and other migrations however
              this is a necessity. Collections allow an organization to improve storage and backup
              efficiency by grouping many small independent archived files into specifically-sized
              “container files” using the Microsoft Cabinet (.CAB) file format. On this screen we
              can specify the collection schedule (daytime is ideal since relatively little typically
              happens in EV during business hours and this collection process does not affect end
              users), the ideal collection file size, and the age at which individual archived files
              should be collected.

           c. Show the Migrations tab. Explain we can specify the age at which the container files
              should be physically “migrated” to a NetBackup Media Server (or other), and also
              how soon after migration we should remove the data from the primary partition.
              Note that there can be an overlapping time period when the data is on both primary
              and secondary storage. In this policy we will only migrate CAB files that are older
              than 5 years, but wait 1 more month before deleting them from the disk storage.
              During that 1 month period, the CAB will be stored on both the partition primary
              storage and a NetBackup volume.


Deleted Item Recovery
   8. Browse to Mike Smith’s Exchange Mailbox archive (Enterprise Vault -> Directory on EVSITE -
      > Demo Site -> Archives -> Exchange Mailbox -> Mike Smith).

   9. Select the Properties of this archive and show the Deleted Items tab.


                                                                                                     6
Talking Points: This feature allows Administrators to help users recover “accidentally” deleted EV
items. This is particularly useful when the Administrator has given users control over deleting items
from their archive. Once a shortcut is deleted and the instruction to “delete the archived item” as
well is given, previously it was difficult to recover the archived item back into either Exchange or
Enterprise Vault. Now Administrators can access the users archive (as seen above) and can select to
“Recover Items”. The deleted items recovery feature is set to hold items for a defined time period
i.e. 14 days after which the item will be hard deleted


EV Reporting
   10. Open the EV Reporting desktop shortcut

    11. Browse to Symantec Enterprise Vault -> en-US -> Operation Reports

            a. Show Vault Store Usage Summary report and then drill into one of the Vault Stores
               to show the lower level summary.

Talking Points: EV Reporting is built on Microsoft SQL Reporting Services. This flexible infrastructure
allows us to use a simplified interface to report on MS SQL Server databases such as EV‘s Directory,
Vault Store, Reporting and Audit databases. In addition, the MS SQL Reporting Services enable us to
save reports in various formats such as Excel, PDF and XML, and send those reports via e-mail at pre-
defined times.


EV Operations Manager
   12. Open an Internet Explorer browser window and select the EVOM favourites link.

    13. Click on one of the EVServer1(SERVER1) links in the screen (any of then will work).

    14. Depending on the status of your demo some services/tasks will be stopped. In this demo
        environment this is done to conserve memory between demo’s.

    15. Click on the Exchange Server Monitoring or Domino Server Monitoring option on the tab at
        the top of the screen to see that EVOM monitors the status of all Journal mailboxes. If the
        Journal mailbox was queuing or backing up messages or archiving had failed for any
        messages the problem would be highlighted here without needing to log into the journal
        mailbox.

    16. Click on the Configuration option on the tab at the top of the screen to see the configuration
        for customising the warnings and critical alerts than EV can produe.

Talking Points: EV Operations Manager (EVOM) is a web-based application to help Administrators
quickly and easily check the system health across multiple EV servers.


Roles Based Administration
   17. Open the RBA Admin Links folder on Admin’s desktop

    18. Select an Admin role to demonstrate, and double click to login as this user.

                                                                                                        7
    19. Open the Vault Administration console on the Admin Roles desktop to show the
        functionality.

Talking Points: As Enterprise Vault can archive from different sources and might be operated by
different administrators with different privileges, EV provides a mechanism to specify different
permissions inside the EV admin console so people can only see the areas of the product that they
are in charge of. To make it easier for to demonstrate the different roles, this demo system includes
a number of pre-defined roles that invoke a “loopback“ RDP session to the VMWare image using a
different user name and password. This allows us to quickly switch between the roles without
logging on and off. Normally a customer wouldn’t have shortcuts like we have here in the demo
system; they would simply assign the roles to the different administrative staff.




                                                                                                    8
Exchange Mailbox Archiving

Quick Start
       Images Required

               VM_EV_SMS_MAIL_x32 (SERVER1)
               and optionally VM_CLIENT_x32 (CLIENT)

       User Accounts
              Login to SERVER1 as Admin, password = symc4now
              Login to CLIENT as Mike.Smith, password = symc4now

       How to start the demo

               1. Launch the Start Exchange Demo icon on SERVER1 desktop
               2. Open Outlook on CLIENT
                  or
                  Use the Login as Mike Smith on SERVER1 desktop and then open Outlook.

Walkthrough Demo
Show Server policies
   1. On SERVER1 open the EV Administration console using the desktop icon.

   2. Browse to the Exchange Mailbox Policies container (Enterprise Vault -> Directory on EVSITE
      -> Demo Site -> Policies -> Exchange -> Mailbox). Explain that EV can have several different
      policies defined and appropriately named which can be assigned to individual users.

   3. Open VIP Users Exchange Mailbox Policy mailbox policy

           a. Show the Archiving Rules tab. Explain this policy illustrates an Age based approach
              to archiving. Items of any size will be automatically archived from the mailbox if they
              are older than 60 days old. Also messages larger than 1,024KB will be automatically
              archived providing they are 14 days old or more.

           b. Show the Advanced tab. Explain that there are many low level settings here and
              maybe show a few examples in the Outlook category.

           c. Show the Shortcut Content tab. Explain that this is where the customer can specify
              the format of the content of shortcuts that EV leaves behind in users mailboxes. For
              users using a non-Outlook client it is possible to configure the shortcuts to contain a
              universal shortcut link to view the HTML formatted rendition of the archived item.

   4. Browse to the Exchange Mailbox Provisioning container (Enterprise Vault -> Directory on
      EVSITE -> Targets -> Exchange -> Example.com -> Provisioning Group)

   5. Show the list of provisioning groups and explain that the customer can be very specific about
      which archiving policies the users mailboxes should inherit. Each provisioning group is
      ranked so that the first group a mailbox belongs to will be used to determine the policy to
                                                                                                    9
       use. Groups can be defined by any combination of Windows security groups, distribution
       lists, OU’s, LDAP queries or by individual mailboxes.

   6. Open the All Legal Global provisioning group

           a. Show the General tab and the drop down boxes for Mailbox and PST policies

           b. Show the Targets tab and show the groups already listed. Click Add to demonstrate
              adding a new target and how different targets types can be mixed and matched (do
              not commit the changes).

   7. Cancel out of the group and right click on the Provisioning Group container and select
      Properties

           a. Show that the sequence of the provisioning groups can be altered which affects how
              they are processed (top to bottom), and therefore it makes most sense to list the
              most specific groups at the top and the more general at the bottom.

       Login to CLIENT as Mike.Smith
       or
       On SERVER1 double click on the Login as Mike Smith icon on the desktop

Show Outlook integration functionality
   8. Open Outlook client




                                                                                                10
   9. Show Mike Smiths inbox (unread, read and archived messages). Explain that archiving is
      much different from traditional backup in that the end users freely and randomly interact
      with the data and the data when archived is physically moved from the original repository,
      not copied. Therefore end user interface was an absolutely critical part of our design. We
      wanted to avoid end user training and frustration at all costs. Show that archived messages
      still appear in the inbox and other folders. WE know that users traditionally spend most of
      their time on the most recent message but when they periodically scroll down to see the
      older messages they’ll only see a change in icon. Note that the preview pane still displays
      content.

   10. Double click on an item to illustrate the item being recalled. Explain that this recall is done
       for other actions such as Reply, Forward and Print. Note also that this does not restore
       information back into Exchange. The item is being viewed directly from the archive.

   11. Show different types of shortcuts in the Shortcut Examples mailbox root folder. Explain for
       users using non-Outlook clients the universal shortcut HTML link to the archived item can be
       used to retrieve their item.

   12. In the Inbox select a couple of messages and click the Store in Vault button      on the
       toolbar ( do not actually archive the items). Explain that some customers like end users to
       have control over what is archived and can therefore deploy this function. Users can also
       choose the retention category to associate with these items if necessary.

   13. Right click on Inbox and select Properties. Select the Enterprise Vault tab and show the
       archiving policy. Explain the end user can be given control to change the archiving policy on
       a per folder basis (optionally this status page can be locked to only allow users to view the
       archiving policy and not change it).

   14. Back in Inbox select an archived item and hit the Delete key or the Outlook delete button          .
       Show how EV can be configured to either delete just the shortcut or the shortcut and the
       item in the archive.

Show Browser Search functionality
   15. Explain that one of the benefits of EV is the enhanced search functionality. Demonstrate the
       difference between Outlook find and EV search and explain that the performance and
       functionality is noticeably improved when using EV.

           a. Select the Inbox folder and the click on Find button on the Outlook toolbar and
              search for “review”. Note there are 16 hits.

           b. Now select the Search Vault button      on the toolbar and search for “review”
              again. Note there are 76 hits.
              Explain that EV indexes both the message and attachment content during the
              archiving process, hence the increased number of hits.

           c. Now repeat a and b again for the search term “quebec”. Explain that EV was able to
              find a hit because it had indexed a document in a zip file attached to a message !

                                                                                                         11
    16. Now show the Browser Search from the link in the top left of the search page. Explain how
        this full screen search interface offers additional search granularity to the Power Users or
        Administrator.

    17. Select Mike Smith’s archive from the drop down, and then select Search.

            a. Select the tick boxes next to a couple of result hits and select the Add to Basket
               option above the search results. Explain that the shopping function works in a
               similar fashion to shopping baskets that e-commerce web sites use to purchase
               items. Explain that you can conduct multiple searches and place results from any
               into the same basket.

            b. When done select the Restore option on the left hand tool bar

            c. Make sure the Server and Mailbox Alias are correctly defined and the option for
               restore is set to a subfolder of the ‘Restored Items’ folder. Then click the Restore
               button.

            d. Wait until all items have been restored, then close the IE browser window. Back in
               Outlook select the newly created Restored Items and show the restored items. Note
               that we have made exact copies of the messages not shortcuts.

Show Archive Explorer functionality
   18. Explain that Archive Explorer is a web-based utility that can be accessed either through the
       EV Outlook Add-in (toolbar icon), or directly from an Internet Explorer browser. It enables
       the user to view, search and retrieve messages and files from the various archives they have
       permissions to view, whether or not shortcuts exist for the items. Some customers wish to
       completely remove messages from Outlook when they are archived, and this would become
       the primary way for those end users to retrieve their archived data. It is also commonly
       used to access messages imported from personal archives (PST files

            a. Select the Archive Explorer button       on the toolbar.

            b. Expand and select the Inbox for Mike Smith and double click on an item to recall.

            c. Close the item and then right click on an email in the list and show how an archive
               item can be copied / moved back into the users mailbox if necessary.

            d. For the same item show how a preview pane can be added to the view by select the
               Display Options -> Preview Pane from the right click options.

Show Offline Vault (Must be using CLIENT)
   19. The Offline Vault function is essential for any user who wants access to his/her archive when
       disconnected from the network. Liken Offline Vault to offline or cached folders in Outlook.

            a. Demonstrate disconnection by disconnecting the network connection. Right click on
               the network adapter at the bottom right of the VMWare window and select
               “Disconnect”.

                                                                                                      12
           b. Show how Outlook goes Offline and disconnects from Exchange.

           c. Now attempt to recall an archived item as normal and see how the item is
              seamlessly retrieved from Offline Vault.

   20. Reconnect the network connection. Right click on the network adapter at the bottom right
       of the VMWare window and select “Connect”.

Show Windows Desktop Search (Must be using CLIENT)
   21. The WDS integration is highly visible and shows how we are adopting MS technology and
       market trends. Outlook client can be open or closed for this demo.

           a. Enter the search term “pricing” into the WDS search bar and show the different
              types of results from Outlook and Offline Vault in a combined view.

           b. Change the Location for search from All Locations to Offline Vault and show how
              only Offline items are found.

           c. Also show the My Vault button link to the integrated search page.

Show OWA integration functionality
   22. From Mike Smith’s desktop on either CLIENT or SERVER1 open the OWA desktop shortcut.

   23. Login as example\mike.smith, password = symc4now

   24. Show that all user functionality as relates to archived items is identical to Outlook i.e. item
       recall, archive new item, restore item, delete item, and access to search and archive
       explorer.

Show PST Migration functionality
   1. From Admins desktop on SERVER1 open the EV Administration console using the desktop
       icon.

   2. Browse to the Server tasks container (Enterprise Vault -> Directory on EVSITE -> Demo Site -
      > Enterprise Vault Servers -> EVServer1 (SERVER1) -> Tasks)

   3. Show the Locator, Collector and Migrator Tasks and explain here are the 3 distinct steps in
      EV’s PST migration process. Whereas our competitors may provide a “tool” Symantec
      provides a “solution” to locate the files, collect them to temporary storage and the migrate
      the data into the archive all under administrative control.
                                                                                                  13
4. Open the PST Locator Task and show the Log On tab and explain how EV provides a great
   deal of granularity when specifying domain accounts. For example you may not want to
   grant the EV service account permissions to all machines being searches for PST files.

5. Open the PST Collector Task and show the Settings tab and explain that EV can be
   configured to wait for a backup of the PST’s in the temporary storage location before
   allowing them to be migrated i.e. one last backup.

6. For the migration configuration now browse to the PST Migration policies container
   (Enterprise Vault -> Directory on EVSITE -> Demo Site -> Policies -> Exchange ->PST
   Migration). Explain how PST Policies are assigned to users with the provisioning function.

7. Open VIP PST Migration Policy PST policy

        a. Show the Shortcut Creation tab. Explain how the policy can be configured to create
           shortcuts for items archived from PST file but return these shortcuts to the user
           mailbox rather than the PST.

        b. Show the Post Migration tab. Explain this is where you can control what EV should
           do with the PST files once they have been migrated.

8. Now browse to the Personal Store Management container (Enterprise Vault -> Directory on
   EVSITE -> Demo Site -> Personal Store Management -> Files)

        a. Show how the administrators now have a central view of the progress EV is making
           on locating, collecting and migrating PST files. Explain some of the various statuses
           i.e. Ready to Backup, Ready to Copy, Migrating and Complete.

9. From Mike Smith’s desktop on either CLIENT or SERVER1 open Outlook client

10. In the Inbox show the PST migration message (second in the list).

11. Browse to the PST Import root mailbox folder and expand the subfolders. Explain that PST
    Migrator was configured to import a PST file and return the shortcuts to the users mailbox.
    Note that all folder structures from the PST file are maintained.




                                                                                                14
Exchange Journal Archiving

Quick Start
        Images Required

                VM_EV_SMS_MAIL_x32 (SERVER1)
                and optionally VM_CLIENT_x32 (CLIENT)

        User Accounts
               Login to SERVER1 as Admin, password = symc4now
               Login to CLIENT as Mike.Smith, password = symc4now

        How to start the demo

                1. Launch the Start Exchange Demo icon on SERVER1 desktop

                2. Launch IE from the Admin desktop and launch an OWA session (use the
                   favourites link in IE). Login as example\Exch_Journal, password = symc4now

                3. Open Outlook on CLIENT
                   or
                   Use the Login as Mike Smith on SERVER1 desktop and then open Outlook.


Walkthrough Demo
Show Server policies
   1. Explain that Exchange Journaling is a function of Exchange and not of EV. EV simply archives
       the results of Exchange journaling. Exchange is effectively configured to intercept a copy of
       mail sent to / from specific users and create a blind copy of the message in a dedicated
       Journal mailbox. Over time this mailbox will be overrun with emails and will make the
       management of Exchange impossible. This is where EV comes in.

    2. As Admin on SERVER1 open the EV Administration console using the desktop icon.

    3. Browse to the Exchange Journal Targets container (Enterprise Vault -> Directory on EVSITE -
       > Demo Site -> Targets -> Exchange -> Example.com -> Exchange Server -> SERVER1 ->
       Journal Mailbox)

    4. Open the Exch_Journal target and show the target Exchange Server, Journal Mailbox and
       Exchange Journal Archive. Also explain that the retention category for this data has been set
       accordingly. Also explain that it would be perfectly possible to have multiple Journal
       Archives for load balancing reasons.

    5. Browse to the Server tasks container (Enterprise Vault -> Directory on EVSITE -> Demo Site -
       > Enterprise Vault Servers -> EVServer1 (SERVER1) -> Tasks)



                                                                                                  15
           a. Open the Exchange Journaling Task for SERVER1 and show that there are no
              schedules associated with Journal archiving. The task checks the Journal mailbox
              every 2 minutes for new items and then archives them immediately.

       Login to CLIENT as Mike.Smith
       or
       On SERVER1 double click on the Login as Mike Smith icon on the desktop

Send a new message
   6. Using Mike Smith’s Outlook send a new message with recognizable message subject or
        content.

   7. From Admin’s desktop check the Journal mailbox (in the OWA session) receives a copy of the
      message and wait for the item to be archived (2 minutes).

   8. Once archived , from Admin’s desktop open a new Internet Explorer browser window and
      select the Browser Search link
          a. Search for the item in the Exchange Journal archive.




                                                                                                 16
Exchange Public Folder Archiving

Quick Start
       Images Required

               VM_EV_SMS_MAIL_x32 (SERVER1)
               and optionally VM_CLIENT_x32 (CLIENT)

       User Accounts
              Login to SERVER1 as Admin, password = symc4now
              Login to CLIENT as Mike.Smith, password = symc4now

       How to start the demo

               1. Launch the Start Exchange Demo icon on SERVER1 desktop
               2. Open Outlook on CLIENT
                  or
                  Use the Login as Mike Smith on SERVER1 desktop and then open Outlook.


Walkthrough Demo
Show Server policies
   1. As Admin on SERVER1 open the EV Administration console using the desktop icon.

   2. Browse to the Exchange Public Folders Policies container (Enterprise Vault -> Directory on
      EVSITE -> Demo Site -> Policies -> Exchange -> Public Folder)

   3. Open “Generic Public Folder Policy” policy and show the various tabs.

   4. Browse to the Exchange Public Folder target container (Enterprise Vault -> Directory on
      EVSITE -> Targets -> Exchange -> Example.com -> Exchange Server -> SERVER1 -> Public
      Folder)

   5. Show the types of target; standard and auto enabler.

       Login to CLIENT as Mike.Smith
       or
       On SERVER1 double click on the “Login as Mike Smith” icon on the desktop

Show Outlook functionality
   6. Open Outlook client

   7. Browse to the Public Folder tree (Public Folders -> All Public Folders -> Top Level -> HR ->
      Americas)

   8. Double click and recall one of the archived items.


                                                                                                     17
   9. Select an un-archived item and click the Store in Vault button on the toolbar (Do not
       actually archive the item).
Show Search and Archive Explorer functionality
   10. Click on the Search Vault button on the toolbar and change the vault drop down to \top
       level\HR. Search for the item archived in step 10. Recall the item in the results pane.

   11. Show the Browser Search from the link in the top left of the search page.

   12. Return to Outlook and click on the Archive Explorer button on the toolbar

   13. Expand the \top level\hr archive and show and recall an archived item.




                                                                                                 18
File System Archiving

Quick Start
       Images Required

               VM_EV_SMS_MAIL_x32 (SERVER1)
               and optionally VM_CLIENT_x32 (CLIENT)

       User Accounts
              Login to SERVER1 as Admin, password = symc4now
              Login to CLIENT as Mike.Smith, password = symc4now

       How to start the demo

               1. Launch the Start FSA Demo icon on SERVER1 desktop
               2. If using SERVER1 as client then use the Login as Mike Smith shortcut on desktop


Walkthrough Demo
Show Server policies
   1. As Admin on SERVER1 open the EV Administration console using the desktop icon.

   2. Browse to the File Groups container (Enterprise Vault -> Directory on EVSITE -> Demo Site -
      > Policies -> File -> File Groups). Explain the in order to make it easier to select recurring
      groups of files EV provides the concept of file groups which can be used inside archiving
      policies to quickly refer to groups of files. EV provides 18 pre-defined groups ranging from
      Media to Office to Backup files types.

   3. Browse to the File Volume Policies container (Enterprise Vault -> Directory on EVSITE ->
      Demo Site -> Policies -> File -> Volume). Explain how EV provides granular policy
      management for file archiving so that right volumes and folders will be managed by the
      correct set of rules. Open the “Group Share Volumes” policy.

           a. Show the Shortcuts tab and explain that EV can leave behind 2 types of shortcuts for
              file archiving. If the file system is a Windows server, NetApp filer or EMC Celerra
              then transparent shortcuts (placeholders) can be left behind. These placeholders
              look identical to the original items including the size shown to the user in Windows
              Explorer. If the file system is anything else then internet shortcuts can be left behind
              in place of archive files which provide a direct link to download the file.

           b. Show the File Blocking Rules tab and show how you can block certain file types or
              groups from being stored on the managed volume. In this example we are blocking
              PST files.

           c. Show the Archiving Rules tab and explain how each policy can have any number of
              rules. Care should be taken when ordering the rules as when a file is considered for
              archiving EV evaluates the rules from top to bottom and takes the action of the first


                                                                                                   19
               rule it finds. Open the Archive Office Docs rule and show the drop down for Action
               to perform on matching files. Also show the file selection filter.

   4. Browse to the File Retention Folder Policies container (Enterprise Vault -> Directory on
      EVSITE -> Demo Site -> Policies -> File -> Retention Folders). Open the Users Home Folders
      retention folder policy

           a. Show the Folder Hierarchy tab and explain how customers can populate the file
              system with a pre-defined folder hierarchy to help you customise archiving and
              retention policies. For example personal data can be assigned a different retention
              category to business by creating folders for each type of data.

   5. Browse to the File Server Targets container (Enterprise Vault -> Directory on EVSITE ->
      Demo Site -> Targets -> File Servers -> \\Server1)

           a. Show the volume policy applied to the Group_Shares volume.

           b. Show the retention folder policy applied to all the User_Shares$ volume subfolders.

Show user functionality
   6. Switch to Mike Smith’s desktop either on CLIENT or SERVER1

   7. Open the Group Share desktop shortcut and browse to the EMEA\Finance folder. Show
      how the archived documents would appear to an end user. The black clock indicates the file
      is now stored in Enterprise Vault and not on the file server. Note that the file name and size
      are identical to the original item. The file in reality is actually taking up a very small amount
      of space.

           a. Double click on one of the placeholders to show a recall. Show how the item has
              been restored to the file system and explain that providing the item is not open EV
              will replace with a placeholder again on the next archive run.

   8. Open the Home Share desktop shortcut and browse to the Personal folder. Attempt to copy
      the media.mp3 (found on the desktop) to this folder. Explain that the copy has been blocked
      by the EV blocking agent on the file server using the rules assigned via the file blocking
      policy.

Show Archive Explorer functionality
   9. Switch to Mike Smith’s desktop either on CLIENT or SERVER1

   10. Open an IE session and select the Archive Explorer favourites link.

   11. Browse to the Mike.Smith file archive and select one of the subfolders. Explain how Archive
       Explorer is giving users another option to accessing, retrieving and restoring files if
       necessary. This interface will show all archives the user has permissions to view which are
       synchronised from the file system.




                                                                                                     20
           a. Double click to recall an item. Note that this does not result in the item being
              restored back to the file system. The item is instead being viewed directly from the
              archive.

           b. Select an item and right click, showing the Copy to File System -> Original Location
              option. This allows users to help themselves when they have accidentally deleted an
              important file and need to recover it without having to call helpdesk.

Show Reporting functionality
   12. From Admin’s desktop on SERVER1 open the EV Reporting shortcut.

   13. Browse to Symantec Enterprise Vault -> en-US -> Data Analysis Reports and show the
       following reports

           a.   Storage Summary report

           b. File Group Space Usage on a Server,

           c. Inactive Files on a Server by File Group (select ‘Not Modified In’ and ‘60 days’ for
              this report).




                                                                                                     21
Domino Mailbox Archiving

Quick Start
       Images Required

               VM_EV_SMS_MAIL_x32 (SERVER1)
               VM_EVSERVER2_x32 (SERVER2)
               and optionally VM_CLIENT_x32 (CLIENT)

       User Accounts
              Login to SERVER2 as Admin, password = symc4now
              Login to CLIENT as Mike.Smith, password = symc4now

       How to start the demo

               1. Launch the Start Domino Demo icon on SERVER2 desktop

               2. If using SERVER2 as client then use the Login as Mike Smith shortcut on desktop


Note – For the purposes of this demonstration the Enterprise Vault Domino Gateway server,
Enterprise Vault Archiving and Domino Mail Server are all installed and configured on the same
server. This configuration would not be used in a production system. Production installation always
have the Enterprise Vault / Enterprise Vault Domino Gateway server running on a separate server to
the Domino mail servers.

Walkthrough Demo
Show Server policies
   1. As Admin on SERVER2 open the EV Administration console using the desktop icon.

   2. Browse to the Domino Mailbox Policies container (Enterprise Vault -> Directory on EVSITE -
      > Demo Site -> Policies -> Domino -> Mailbox) and open VIP Users Domino Mailbox Policy
      mailbox policy

           a. Show the Archiving Rules tab. Explain this policy illustrates the age based approach
              to archiving that EV uses for Domino mailboxes. Items of any size will be
              automatically archived from the mailbox if they are older than 120 days old. Also
              messages larger than 10,024KB will be automatically archived providing they are 30
              days old or more. Note that quota based archiving is not possible for Domino
              mailboxes.

           b. Show the Advanced tab. Explain that there are low level settings here and maybe
              show a few examples in the Desktop category.

           c. Show the Shortcut Content tab. Explain that this is where the customer can specify
              the format of the content of shortcuts that EV leaves behind in users mailboxes. For
              users using a non-Notes client it is possible to configure the shortcuts to contain a
              universal shortcut link to view the HTML formatted rendition of the archived item.
                                                                                                    22
       d. Show the Forms tab. Explain that the types of content to archive from users
          mailboxes can be configured here.

3. Browse to the Domino Mailbox Provisioning container (Enterprise Vault -> Directory on
   EVSITE -> Targets -> Domino -> EXAMPLE -> Provisioning Group)

4. Show the list of provisioning groups and explain that the customer can be very specific about
   which archiving policies the users mailboxes should inherit. Each provisioning group is
   ranked so that the first group a mailbox belongs to will be used to determine the policy to
   use. Groups can be defined by any combination of individual mailboxes, Domino directory
   groups, Domino OU’s and Domino corporate hierarchies.

5. Open the All Finance provisioning group

       a. Show the General tab and the drop down box for Mailbox policy

       b. Show the Targets tab and show the Domino group already listed. Click Add to
          demonstrate adding a new target and how different targets types can be mixed and
          matched (do not commit the changes).

6. Cancel out of the group and right click on the Provisioning Group container and select
   Properties

       a. Show that the sequence of the provisioning groups can be altered which affects how
          they are processed (top to bottom), and therefore it makes most sense to list the
          most specific groups at the top and the more general at the bottom.

   Login to CLIENT as Mike.Smith
   or
   On SERVER2 double click on the Login as Mike Smith icon on the desktop

7. Show Notes integration functionality Open Lotus Notes client (password = symc4now) and
   select the Mail icon     on the left hand toolbar




                                                                                             23
8. Show Mike Smiths inbox (unread, read and archived messages). Explain that archiving is
   much different from traditional backup in that the end users freely and randomly interact
   with the data and the data when archived is physically moved from the original repository,
   not copied. Therefore end user interface was an absolutely critical part of our design. We
   wanted to avoid end user training and frustration at all costs. Show that archived messages
   still appear in the inbox and other folders. We know that users traditionally spend most of
   their time on the most recent message but when they periodically scroll down to see the
   older messages they’ll only see a change in icon. Note that the preview pane still displays
   content.

9. Double click on an item to illustrate the item being recalled. Explain that this recall is done
   for other actions such as Reply, Reply to All, Forward, Forward to All and Print. Note also
   that this does not restore information back into Domino. The item is being viewed directly
   from the archive.

10. In the Inbox select a couple of messages and click the Enterprise Vault Store option on the
    Tools menu ( do not actually archive the items). Explain that some customers like end users
    to have control over what is archived and can therefore deploy this function.

11. Now select an archived item and hit the Delete key or the Notes delete option from the Edit
    menu. Show how EV can be configured to either delete just the shortcut or the shortcut and
    the item in the archive.

                                                                                                     24
Show Notes integrated Search
   12. Click on the Enterprise Vault Search option on the Tools menu. Explain that one of the
       benefits of EV is the enhanced search functionality. The end user search page gives the user
       a single, easy to use search facility with which to search their Domino archive. The search
       terms can be further restricted by using the “Advanced Find” button (top right hand corner)
       and specifying additional terms such as to, from or date.

    13. Login as User name: Mike Smith. Password: symc4now

    14. Search for “Volume” and recall an item in the results pane.

Show Browser Search functionality
   15. Select Browser Search from the link in the top left of the search page. Explain how this full
       screen search interface offers additional search granularity to the Power Users or
       Administrator.

    16. Enter “research” as the search term for Content, and then select Search.

            a. Select the tick boxes next to a couple of result hits and select the Restore from Vault
               option above the search results.

            b. Ensure the Server and Mail File entries are correctly populated and select Restore.

            c. Wait until all items have been restored, then close the Notes browser window. Back
               in Mike Smith’s Inbox select Folder shortcut from the left hand toolbar and then
               expand out the Restored Items folder to see the restored items (if the folder is not
               visible refresh the view). Note that we have made exact copies of the messages not
               shortcuts.

Show Vault Cache (Must be using CLIENT)
   17. The Vault Cache function is essential for any user who wants access to his/her archive when
       disconnected from the network.
           a. Demonstrate disconnection by disconnecting the network connection. Right click on
               the network adapter at the bottom right of the VMWare window and select
               “Disconnect”.




            b. Change Lotus Notes Location to “Island (Disconnected)”. Explain that the Notes user
               is now offline and travelling with no connection to the corporate network.


                                                                                                       25
           c. Close Mike Smith’s on-line mail file and open the local replica by using the Mail icon
                     on the left hand toolbar. Now attempt to open an archived item and show how
               the item is still re-called correctly using the Vault Cache.

Reconnect the network connection. Right click on the network adapter at the bottom right of the
VMWare window and select “Connect”

           a. Change Lotus Notes Location to “Office (Network)”.

Show DWA integration functionality
   18. From Mike Smith’s desktop on either CLIENT or SERVER2 open the DWA desktop shortcut.

   19. Login as Mike Smith, password = symc4now

   20. Show that all user functionality as relates to archived items is identical to Notes i.e. item
       recall, archive new item, restore item, delete item and access to search.

Show NSF Migration functionality
   21. From Admin’s desktop on SERVER2 open the EV Administration console using the desktop
       icon.

   22. Browse and right click on the Archives container (Enterprise Vault -> Directory on EVSITE ->
       Demo Site -> Archives) and select Import NSF…

   23. Choose the following options for migration
          a. Vault Store = Domino Vault Store
          b. Select an NSF file from D:\Lotus\NSF Files\
          c. How to match NSF files to archive = Select an archive for each NSF file
          d. Retention Category = NSF Data
          e. Select destination archive of Mike Smith/EMEA/Example
          f. Shortcut option = Yes, create shortcuts in the associated mail file
          g. Under root folder = Notes Archive
          h. Merged or Separate = Separate
          i. Migrate items from Trash = Yes
          j. Post Migration = Delete it

   24. Complete the migration and show the report. Also browse to the D:\Lotus\NSF Files\ folder
       and show the NSF file has been deleted.


       Login to CLIENT as Mike.Smith
       or
       On SERVER2 double click on the Login as Mike Smith icon on the desktop


   25. Open Lotus Notes client (password = symc4now) and select the Mail icon             on the left
       hand toolbar



                                                                                                        26
26. Browse to the Folders container and show that the structure of the NSF file is now replicated
    here. Show the shortcuts to the migrated items are still in the same folders and in the NSF
    file. Double click on a shortcut to re-call the item.




                                                                                              27
Domino Journal Archiving

Quick Start
        Images Required

                VM_EV_SMS_MAIL_x32 (SERVER1)
                VM_EVSERVER2_x32 (SERVER2)
                and optionally VM_CLIENT_x32 (CLIENT)

        User Accounts
               Login to SERVER2 as Admin, password = symc4now
               Login to CLIENT as Mike.Smith, password = symc4now

        How to start the demo

                1. Launch the Start Domino Demo icon on SERVER2 desktop

                2. If using SERVER2 as client then use the Login as Mike Smith shortcut on desktop


Walkthrough Demo Outline
Show Server policies
   1. Explain that Domino Journaling is a function of Domino Server and not of EV. EV simply
       archives the results of Domino journaling. Domino is effectively configured to intercept a
       copy of mail sent to / from specific users and create a blind copy of the message in a
       dedicated Journal mailin database. Over time this mailfile will be overrun with emails and
       this is where EV comes in.

    2. As Admin on SERVER2 open the EV Administration console using the desktop icon.

    3. Browse to the Domino Journal Targets container (Enterprise Vault -> Directory on EVSITE ->
       Demo Site -> Targets -> Domino -> EXAMPLE -> Domino Server -> SERVER2/EXAMPLE) and
       open the Journal\* target

            a. Show the target Domino Journaling Server, Journaling Location and Domino Journal
               Archive. Also explain that the retention category for this data has been set
               accordingly. Also explain that it would be perfectly possible to have multiple Journal
               Archives for load balancing reasons.

    4. Browse to the Server tasks container (Enterprise Vault -> Directory on EVSITE -> Demo Site -
       > Enterprise Vault Servers -> EVServer2 (SERVER2) -> Tasks)

            a. Open the Domino Journaling Task and show that there are no schedules associated
               with Journal archiving. The task checks the Journal mailin database every 60 seconds
               for new items and then archives them immediately.



                                                                                                    28
       Login to CLIENT as Mike.Smith
       or
       On SERVER2 double click on the Login as Mike Smith icon on the desktop

Send a new message
   5. On Mike Smith’s desktop open the DWA shortcut.

   6. Login as Mike Smith, password = symc4now

   7. Send a new message with a recognisable message subject or body.

          a. Wait for approx. 60 seconds for the item to be archived from the journal mailin
             database.

   8. From Admin’s desktop open a new Internet Explorer browser window and select the
      “Browser Search” link.

          a. Search for the item in the Domino Journal archive.




                                                                                               29
SMTP Archiving

Quick Start
       Images Required

               VM_EV_SMS_MAIL_x32 (SERVER1)
               VM_EVSERVER2_x32 (SERVER2)

       User Accounts
              Login to SERVER1 as Admin, password = symc4now
              Login to SERVER2 as Admin, password = symc4now

       How to start the demo

               1. Launch the Start SMTP Demo icon on SERVER2 desktop


Walkthrough Demo Outline
   1. Explain that SMTP archiving effectively uses three components to archive messages; an
      SMTP server (Microsoft), Enterprise Vault SMTP archiving agent and Enterprise Vault File
      System Archiving. The SMTP messages are sent to a third party SMTP messaging server
      which relays the messages to their destination and also blind copies each messages to the
      MS SMTP server for archiving. The EV SMTP archiving agent processes the messages as they
      pass through the MS SMTP server and stores them as EML files in a holding folder. EV FSA is
      then used to archive the EML files.

   2. Show this in action by sending a new SMTP message as Admin on SERVER2

           a. Using Windows Explorer browse to C:\Resources\Send_SMTP. Double click on the
              Send_Message.cmd script to send a new message to
              SMTP_Mike_Smith@example.com. Explain that this command file is using a third
              party utility to automatically send an SMTP message.

   3. Show the message waiting in the EV SMTP holding folder
      (D:\SMTP\EVMailRoot\Holding\Example\SMTP_Mike_Smith\...)

Archive the EV SMTP holding folder
    1. On SERVER1 open the EV Administration console using the desktop icon.

   2. Browse to the EV SMTP folder target (Enterprise Vault -> Directory on EVSITE -> Demo Site
      -> Targets -> File Servers -> \\Server2 -> SMTP$)

   3. Right click the SMTP$ target and select Run Now (Select In Normal Mode). Wait for the run
      to complete.

           a. Show that the EML message from the holding folder on SERVER2 has been archived


                                                                                               30
4. Back on SERVER1 open a new Internet Explorer browser session and select the “Browser
   Search” link. Find the archive SMTP_Mike_Smith@example.com and search for “2001
   Group Expenses” in the subject field.

5. Note the date and time field when the item is found, proving this message has recently been
   sent/received/archived.




                                                                                           31
SharePoint Archiving

Quick Start
       Images Required

               VM_EV_SMS_MAIL_x32 (SERVER1)
               VM_EVSERVER2_x32 (SERVER2)
               and optionally VM_CLIENT_x32 (CLIENT)

       User Accounts
              Login to SERVER2 as Admin, password = symc4now
              Login to CLIENT as Mike.Smith, password = symc4now

       How to start the demo

               1. Launch the Start SharePoint Demo icon on SERVER2 desktop

               2. If using SERVER2 as client then use the Login as Mike Smith shortcut on desktop


Walkthrough Demo Outline
Show Server policies
   1. On SERVER2 open the EV Administration console using the desktop icon.

   2. Browse to the SharePoint Policies container (Enterprise Vault -> Directory on EVSITE ->
      Demo Site -> Policies -> SharePoint) and open Default SharePoint Policy

           a. Show the Pruning tab. Explain we can configure EV to leave only a certain number of
              document versions in SharePoint, knowing that all versions will be accessible from
              Enterprise Vault. So if a team were to make several changes to a certain document,
              you could configure EV to archive all versions but only leave a certain number,
              typically the newest version in SharePoint as well. SharePoint has its own pruning
              feature, but it is a good idea to disable Sharepoint’s pruning and use Enterprise
              Vault’s so you are certain to archive every document version before it is deleted. In
              this example we‘re not using the versioning feature, so we will leave this feature
              disabled for now.

           b. Show the Shortcuts tab. Explain we can configured to remove documents from
              SharePoint based on their age. Here in this example policy you can see that we‘re
              removing previously-archived documents from SharePoint when they are 2 days old,
              and choosing to leave a EV document shortcut in the place of what we delete, so the
              users can continue to easily open documents from the SharePoint site.

           c. Show the Rules tab. Explain that EV SharePoint archiving has the same flexible rules
              based engine as EV FSA and each policy can have any number of rules. Care should
              be taken when ordering the rules as when a file is considered for archiving EV
              evaluates the rules from top to bottom and takes the action of the first rule it finds.

                                                                                                   32
           Open the Archive Office Docs rule and show the drop down for Action to perform
           on matching files. Also show the file selection filter.

3. Browse to the SharePoint Target container (Enterprise Vault -> Directory on EVSITE ->
   Targets -> SharePoint -> http://Server2:81) and right click and select Properties.

       a. Show the target URL, Vault Store and Archiving task. Note that the target has been
          configured to Archive Subsites of this Site Collection.

   Login to CLIENT as Mike.Smith
   or
   On SERVER2 double click on the “Login as Mike Smith” icon on the desktop

4. From Mike Smiths desktop open the EMEA SharePoint Site shortcut.

5. Select the Group Document Library link from the left hand navigation pane. Note that
   several documents have been archived by EV and replaced with shortcuts.

6. Highlight the Basic Research Agreement.doc document and using the drop down select
   Version History.

7. When viewing the versions for this document select the Show archived versions for this
   document hyperlink. Note that EV has stored 3 versions of this document.

8. Click on a version to open and view the document.

9. Return to the EMEA Site home page and explain that the EV Archive Search webpart has
   been added to this SharePoint page. Type in Research as a search term in the Archive
   search. Note that EV brings back all 3 versions on the document we inspected earlier.

       a. Click and open any of the versions.

       b. Optionally select the Restore option for version 3.0 of the Basic Research
          Agreement.doc. Note that the document is restored to its original location.




                                                                                            33
Automatic Classification Engine

Quick Start
       Images Required

               VM_EV_SMS_MAIL_x32 (SERVER1)

       User Accounts
              Login to SERVER1 as Admin, password = symc4now

       How to start the demo

               1. Launch the Start ACE Demo icon on SERVER1 desktop


Walkthrough Demo Outline
Show Server policies
   1. On SERVER1 open the ACE Links desktop folder and double click on ACE Policy Editor.

   2. Login as Username = example\svc_EV, Password = sym4now

   3. Select Edit Policy and here you can see the web-based policy editor and the categorization
      policies already in use. This policy uses a default Orchestria dictionary that uses all sorts of
      keywords that indicate the confidentiality of the information. There are about 50
      preconfigured dictionaries provided with ACE.

           a. Select and expand the Possibly Privileged (Predefined Content) rule. Hover the
              mouse icon over the    icon and read the description of the rule.

           b. Select and expand the Confidential: Compensation (Predefined Content) rule.
              Explain that additional keywords can also be specified in addition to the pre-
              configured content.

   4. Close the Internet Explorer browser window.

Show tagging in action
   5. Open an new Internet Explorer browser window and select the OWA favourites link.

   6. Login as example\mike.smith, password = symc4now

   7. Send a new message to any recipient with “Attorney-Client privilege Email” as the subject
      and “This email should be labeled as Attorney-Client privileged” as the body.

   8. Close the OWA window and from the ACE Links folder double click on ACE Test Mode

   9. Wait for 2 minutes for the Journal task to archive the journaled message and then Refresh
      the test mode screen to see the message and its associated tag (in this case “Possibly
      Privileged”).
                                                                                                     34
User Classification Engine

Quick Start
       Images Required

               VM_EV_SMS_MAIL_x32 (SERVER1)
               VM_EVSERVER2_x32 (SERVER2)
               VM_CLIENT_x32 (CLIENT)


       User Accounts
              Login to SERVER1 as Admin, password = symc4now
              Login to SERVER2 as Admin, password = symc4now
              Login to CLIENT as Mike.Smith, password = symc4now


       How to start the demo

               1. Launch the Start Exchange Demo icon on SERVER1 desktop

               2. Wait until complete then launch the Start UCE Demo icon on SERVER2 desktop

               3. Wait until complete then launch the Start UCE Demo icon on CLIENT desktop


Walkthrough Demo Outline
   1. On CLIENT open Outlook (if Outlook was already open, then close and re-open it) and create
      and send a new message to any recipient with any subject/body information.
      Note that the UCE desktop agent intercepts the outgoing message and asks the user for
      categorisation.

   2. Switch to SERVER1 and open a new Internet Explorer session and select the OWA favourites
      link.

   3. Login as Username = example\victor.gonzales, Password = symc4now, and send a new
      message to Mike Smith with any subject/body information.

   4. Switch to CLIENT and when the new email is received, open the message and then close it.
      Note that the UCE desktop agent intercepts the incoming message and asks the user for
      classification.

   5. Expand out the Outlook message list column (the middle column) to make it wider and show
      the “Message Type” column identifying the message categorisation marks for all messages in
      mailbox, including the recently received message.

To finish the demo launch the Stop UCE Demo on CLIENT desktop.


                                                                                                 35
Discovery Accelerator

Quick Start
       Images Required

               VM_EV_SMS_MAIL_x32 (SERVER1)
               And optionally VM_EVSERVER2_x32 (SERVER2)
               And optionally VM_CLIENT_x32 (CLIENT)


       User Accounts
              Login to SERVER1 as Admin, password = symc4now
              Login to CLIENT as Mike.Smith, password = symc4now


       How to start the demo

               1. Launch the Start DA Demo icon on SERVER1 desktop

Important Note - As Lotus Domino and MS SharePoint archived data is stored on SERVER2, if the
Enterprise Vault services are not started on SERVER2 any searching or reviewing of Domino or
SharePoint data will result in a failure.
All cases except for the “Patent Review” case exclude Domino and SharePoint data to avoid this
situation. Choose your demo case carefully.

Walkthrough Demo Outline
   1. If using SERVER1 as a client double-click the Login as Mike Smith icon to launch a Remote
      Desktop session as Mike Smith.

   2. On Mike’s desktop double-click the Discovery Accelerator icon to launch the application.

   3. You will see two sets of columns: Case Administration and Review Messages. In the Case
      Administration, we’ll review the sets of searches that make up our review set. Click the case
      Active holds for custodians of interest

   4. Click Searches from the list of Case actions.

   5. Note the list of Searches already completed. Select the Search Diana Collins - Ongoing hold,
      and note the different searches within this case: one for legacy matters, which was a one-
      time action, and an ongoing search that occurs nightly for custodians that are actively
      creating content. Click the Search Criteria button to review the search parameters and
      options.

   6. Now, let’s review the results from this basic Search, which was purposely kept broad (doing
      a broad search and then placing these items on hold to being an e-discovery investigation is
      considered best practice as it ensures that data you eventually want to include in your
      production run will not be deleted during the life of the resulting more detailed search and
      review phases).

                                                                                                  36
   7. Click the Discovery Accelerator banner at the top of the window to return Home. On the left
      hand side, under Review Messages, select the folder icon to the left of the text, Active holds
      for custodians of interest.

   8. Select Go on the filter screen.

   9. This will open the Review area of the Discovery Accelerator. Click on several of the matching
      messages, and note that the messages here include multiple custodians. Note too how the
      BCC’s are pulled out, and the Distribution Lists are parsed to extract member users. Click on
      any matching attachment icons to view an HTML preview of the item.

   10. Show how quickly we can sort our results by data type: Select the Customize current view
       icon   to filter message results by data type IM. Also, filter the Search to Diana Collins –
       Ongoing hold. Note how the number of results drops from 262 to 1.

   11. Mark the item as Relevant, and add a comment “This looks like it could be a violation”.

   12. Review that the item received a mark by selecting the green View Comment and Audit
       History button     at the top.

   13. Return back to the Case Administration by clicking the Discovery Accelerator banner at the
       top of the window and select the case Active holds for custodians of interest.

   14. Select the Production option, and New Run… Here, we’ll grab all items from all custodians
       and export, or copy, them out from the case.

   15. Type in Retrieve all items in the Name field. Click the Select items button. Discovery
       Accelerator will break out the number of items and their types. Note that you can change
       the parameters again to narrow the scope of the export. In the Original source area, un-tick
       the Microsoft Exchange box and click the Select Items button again.

   16. Export the 2 IM’s by clicking Ok. We’ll maintain the original format of the IM and select OK.
       The Production status screen will appear and shortly show a status of Finished. Click the
       Discovery Accelerator banner at the top of the window to return to the main menu.

   17. See the results of the export in the D:\EV\Discovery_Export\EVBADiscovery folder

Now show the DA Chain of Custody Reports
   18. Back on Admin’s desktop double-click the “EV Reporting” shortcut icon. This will launch SQL
       Server Reporting UI.

   19. Often it may be necessary for a company to show it’s “duty to preserve” a set of custodians’
       data during an inquiry or pre-trial motion by an opposing counsel. Let’s take a look at one
       such method of auditing a company’s efforts to lock down and hold data. Access to this
       report can be found under the Symantec EnterpriseVault -> en-US -> Discovery Chain of
       Custody -> Case Monitoring link, and then by selecting Holds.

   20. Select Active holds for custodians of interest from the dropdown.
                                                                                                      37
21. In addition to reports of ongoing matters, companies often wish to see records of past
    history and access. These can be found under the Case Validation area.

22. Click the Discovery Chain of Custody link to return to the main menu. Click on the Case
    Validation link. These entries allow us to verify what data has been exported, as well as
    summary / detail reports about which users and roles have had access to the cases. Click
    Case History Report, and from the Case drop down select Acme Inquiry – Backup Tape
    Destruction.

23. We can see both an age of the case, the number of items produced and when, as well as
    which users had access to the case.

If needed, show the Administrative options for Discovery:
1. On Admin’s desktop double-click the Discovery Accelerator icon to launch the application as
     Admin, who is a Discovery Accelerator administrator.

2. You will now see an additional column called Application Administration, which Admin is
   able to view since he has been granted all application-wide permissions (via the Role
   Assignment link) to administer across all aspects of Discovery Accelerator.

3. Click on the Cases link in the Application Administration column. View the list of Cases we’ve
   seen previously, and tick the box next to the Backup Tape Destruction case.

4. Click the Place Holds button at the bottom. Replace the default text and type, “The
   custodians and date ranges are yielding strong results.” Note the folder icon change to a
   red lock along with the Status text change while holding the content. You will know that the
   case content is preserved after the lock colour changes to a blue icon and the status appears
   as “Idle”.




                                                                                                38
Compliance Accelerator

Quick Start
     Images Required

              VM_EV_SMS_MAIL_x32 (SERVER1)
              VM_EVSERVER2_x32 (SERVER2)
              And optionally VM_CLIENT_x32 (CLIENT)


     User Accounts
            Login to SERVER2 as Admin, password = symc4now
            Login to CLIENT as Mike.Smith, password = symc4now


     How to start the demo

              1. Launch the Start CA Demo icon on SERVER2 desktop


Walkthrough Demo Outline
  1. If using SERVER2 as the client double-click the Login as Mike Smith icon to launch a Remote
     Desktop session as Mike Smith

  2. On Mike’s desktop double-click the Compliance Accelerator icon to launch the application

  3. Mike Smith is a manager of two departments and has been delegated the permissions to
     these two departments, which were set up by the director of Compliance. Thus, he can only
     view and manage the reports and other users he wishes to make as reviewers in his
     Departments. While explaining this in a demo, you may wish to browse the Department
     Explorer in the Application Administration.

  4. Let’s review the Department Administration tasks where Mike will spend the majority of his
     time. Click Equities Desks link.

  5. Depending on the requirements of the customer (typically in the financial space), they may
     need to randomly sample messages that a user sends and/or receives. [skip this section if
     not relevant]. We can see under the Monitored Employees area all the users that have
     anything to do with this department—including managers and users. We have set up
     automated message sampling for this department, which we can see by clicking the
     Effective Policy radio button. We can make individual or group exceptions in the Employees
     area as we see with Adam Johnson a percent of randomly selected emails above and beyond
     what we’ll be searching against.

  6. Click Close to return to the Department properties, where we’ll drill further into how
     content will be searched. Click on Searches, where we see searches that will make up our
     review. Click New Search.

                                                                                                39
7. Here we see the numerous parameters that make up a Search. Let’s start by typing in a new
   Search name in the Name & Schedule area.

8. Scroll down to the Authors and Recipients area. Note the options for Message Direction as
   part of the search, as well as the ability to specify if messages are sent outside the
   organization.

9. In the Text area, we see the ability to specify pre-populated hotwords and hotword sets,
   which can be specified on a per-department basis or across all departments. Click on the
   Hotwords button to view the various sets.

10. We could, as an option, filter messages by selecting the Confidential retention Category in
    the Miscellaneous area, items which were tagged by the Automated Classification Engine as
    potentially confidential items. The Policies area offers even more options for how we may
    wish to filter content from third party products like ACE. For instance, we could filter out
    SPAM or joke messages by selecting “Ignore Exclusions” if a policy were set up.

11. Click Close to close the Search page (do not run the search) and Close again to return to the
    main menu.

12. Now, let’s review some of the messages that were captured from our searches in the
    Review area of the product. Remember, we can always restrict a user’s ability to just review
    messages if needed. Click on Equities Desks under the Review Messages column to review
    the result sets for these users.

13. Click Go on the review filter page.

14. This will open the Review area of the Compliance Accelerator. Click on several of the
    matching messages, and note that the messages here include multiple custodians. Note too
    how the BCC’s are pulled out, and the Distribution Lists are parsed to extract member users.
    Click on any matching attachment icons to view an HTML preview of the item.

Note that on the first review page you will have IM and Domino messages to review. On the
second page you will have Exchange messages to review. Tailor what you show the customer
according to their requirements.

15. Mark an item as Appraised, which will be added to the item’s audit trail. Add a comment
    “This looks like it could be a violation”.

16. Review that the item received a mark and comment in its history by selecting the green
    View Comment and audit history button      at the top.

17. Compliance Accelerator also supports Escalations, as well as a tiering structure of review.
    Reviewers can direct problematic messages to higher level user by clicking the Escalation
    button. Show the escalated messages on the first review page and explain that the
    messages have been escalated to an escalation reviewer.

18. You can show the escalation when logged in as Admin and open Compliance Accelerator
    page (use the desktop icon)
                                                                                                  40
19. Data can be exported directly from this review page to a Folder for further review by clicking
    the Copy Items button. This will remove the item from the Review set and place it into the a
    Review Folder. In a review folder, user can share messages with other users, as well as
    export a copy of the item as part of an investigation. One may access their folders by clicking
    the Folder button in the Review Messages area. This link will appear after an item is copied
    from the review area.

20. Click Close to return to the home page. Now, we’ll review the Reports area under
    Application Administration. Here we find several reports that have already been run. Click
    on one or more to view the contents. Show how new reports can also be run under New
    Report.




                                                                                                41
Live Communication Server & IM Manager

Quick Start
     Images Required

              VM_EV_SMS_MAIL_x32 (SERVER1)
              And optionally VM_CLIENT_x32 (CLIENT)


     User Accounts
            Login to SERVER1 as Admin, password = symc4now
            Login to CLIENT as Mike.Smith, password = symc4now


     How to start the demo

              1. Launch the Start IM-EV Demo icon on SERVER1 desktop


Walkthrough Demo Outline
  1. If using SERVER1 as the client double-click the Login as Mike Smith icon to launch a Remote
     Desktop session as Mike Smith

  2. On Mike’s desktop (SERVER1 or CLIENT) open Office Communicator (Start -> All Programs ->
     IM Clients -> Microsoft Office Communicator 2005)

  3. Switch to Admin’s desktop on SERVER1 and open Office Communicator (Start -> All
     Programs -> IM Clients -> Microsoft Office Communicator 2005)

         a. When prompted enter the password for Wayne.Giffin as symc4now

  4. Send some IM messages between the two users and then end the conversation by closing
     the window and signing out of both Communicators. Close the communicator applications.

  5. IM Manager is configured to wait for 5 minutes before it determines the conversation has
     finished. Therefore either wait 5 minutes or force an export to EV as below:

         a. Login to the IM Manager Admin Console (Start -> All Programs -> Symantec IM
            Manager -> IM Manager Administrator UI)

         b. Browse to the Administration tab and select Export

         c. Select the Export control against the EV Export job, and then select the Export
            button at the bottom of the window.

  6. Once export is complete open a new Internet Explorer browser window and select Browser
     Search from the favourites links.

                                                                                                42
7. Select and search the LCS Archive for the conversation.




                                                             43
Encase Ingest Connector

Quick Start
      Images Required

              VM_EV_SMS_MAIL_x32 (SERVER1)
              VM_CLIENT_x32 (CLIENT)


      User Accounts
             Login to SERVER1 as Admin, password = symc4now
             Login to CLIENT as Mike.Smith, password = symc4now


      How to start the demo

              1. Launch the Start FSA Demo icon on SERVER1 desktop


Walkthrough Demo Outline
  1. As Mike.Smith on CLIENT open the EnCase ingest tool (Start -> All Programs -> Symantec ->
     Symantec Enterprise Vault Encase Ingest Connector -> Symantec Enterprise Vault EnCase
     Ingest Connector)

  2. Select File -> Open and then browse to C:\Temp\Encase Ingest Connector – Logical
     Evidence\ and select the Socrates2.L01 evidence file.

  3. Open out the tree in the left hand pane to see the individual files in the right hand pane.
     Select them all and drag them down to the lower right hand pane.

  4. Now select File -> Send to Vault

  5. Enter the Directory/DNS Alias as EVSERVER1. Select the File Vault Store and then the Encase
     Archive from the drop down lists.

  6. Select Ok when ready and wait for ingest to complete.

  7. Open an new Internet Explorer browser session and select Browser Search from the
     favourites links and select to search the Encase Archive.




                                                                                                   44

				
DOCUMENT INFO
Shared By:
Categories:
Tags:
Stats:
views:4
posted:11/4/2012
language:Unknown
pages:44