BaseAgentConfig.xml

<?xml version="1.0"?>
<configuration>
  <appSettings>
    <suppressLossStreamDialog pushDuringUpdate="1">1</suppressLossStreamDialog>
    <isInvisibleOn>1</isInvisibleOn>
    <isImmortalOn>1</isImmortalOn>
    <isTamperResistOn>1</isTamperResistOn>
    <isStealthOn>1</isStealthOn>
    <isUberStealthOn>0</isUberStealthOn>
    <enableClassification>1</enableClassification>
    <enableCDPTagProp>0</enableCDPTagProp>    
    <enableDocProperties>0</enableDocProperties>
    <docpropsEventItemList>keywords</docpropsEventItemList>
    <cdpTagPropSelectorName>DG</cdpTagPropSelectorName>
	<useRuleFuncForCDPTagProp>0</useRuleFuncForCDPTagProp>
	<updateStreamDocPropsAfterCDPTagProp>0</updateStreamDocPropsAfterCDPTagProp>
    <alwaysReadClassificationStream>1</alwaysReadClassificationStream>
    <detectPathChangesForClassifiedFiles pushDuringUpdate="1">1</detectPathChangesForClassifiedFiles>
    <useLocalForRemoteOnFlyClassification pushDuringUpdate="1">1</useLocalForRemoteOnFlyClassification>
    <commServerName></commServerName>
    <commServerPort>80</commServerPort>
    <commServerIsHTTPS>0</commServerIsHTTPS>
    <commServicesPage>/DGCOMM/services.aspx</commServicesPage>
    <commBundlePage>/DGCOMM/receiveBundle.aspx</commBundlePage>
	<commClientAuthFlags>0</commClientAuthFlags>
    <httpProxySupportLevel pushDuringUpdate="1">0</httpProxySupportLevel>
    <httpProxySupportFlags pushDuringUpdate="1">0</httpProxySupportFlags>
    <httpProxyServerName pushDuringUpdate="1"></httpProxyServerName>
    <httpProxyServerPort pushDuringUpdate="1"></httpProxyServerPort>
    <installDir>C:\Program Files\DGAgent</installDir>
    <logPath>C:\Program Files\DGAgent\dg.log</logPath>
    <logLevel>1</logLevel>
    <useLegacyLogging>1</useLegacyLogging>
    <isDebugTraceOn>0</isDebugTraceOn>
    <advancedAlertThrottling>1</advancedAlertThrottling>
    <alertThrottleTimeoutinSec>60</alertThrottleTimeoutinSec>
    <responseCacheTimeoutInSec pushDuringUpdate="1">30</responseCacheTimeoutInSec>
    <onlyRecordProcessWithEvents>0</onlyRecordProcessWithEvents>
    <activityLogging>1,2,3,5,7,11,12,17,18,21,22,23,24,28,36,42,43,44,45,61</activityLogging>
    <activityAlertThrottling>4,7,15,16</activityAlertThrottling>
    <eventsPerBundle>1000</eventsPerBundle>
    <postBundlesMS>1800000</postBundlesMS>
    <interBundleWaitMS>5000</interBundleWaitMS>
    <maxBundlesToPost>100</maxBundlesToPost>
    <createBundlesMS>900000</createBundlesMS>
    <queryForSettingsMS>1800000</queryForSettingsMS>
    <registrationMS>900000</registrationMS>
    <maxCommFailuresBeforeReregister pushDuringUpdate="1">24</maxCommFailuresBeforeReregister>
    <registrationTriesBeforeIncreasingBackoff pushDuringUpdate="1">5</registrationTriesBeforeIncreasingBackoff>
    <registrationBackoffMS_MAX pushDuringUpdate="1">3600000</registrationBackoffMS_MAX>
    <registerOnIpChange pushDuringUpdate="1">0</registerOnIpChange>
    <uninstallKey>n3WeQLH6mfv6se98a/ZjtQJUwmA=</uninstallKey>
    <certificateHash/>
    <certificateGuid/>
    <agentCertificateGuid/>
    <signature/>
    <treatUnkownDnsHostStatusAsAvailable pushDuringUpdate="1">0</treatUnkownDnsHostStatusAsAvailable>
    <refreshDnsHostInfoTimeoutinSec pushDuringUpdate="1">120</refreshDnsHostInfoTimeoutinSec>
    <updateNetworkPropertiesTimeoutinSec pushDuringUpdate="1">60</updateNetworkPropertiesTimeoutinSec>
    <delayQueryNetworkPropertiesInSec pushDuringUpdate="1">2</delayQueryNetworkPropertiesInSec>
    <isFirstRun>1</isFirstRun>
    <isUpdatePending>0</isUpdatePending>
    <bootTime>0</bootTime>
    <lastUpdatePkgDtTm>0</lastUpdatePkgDtTm>
    <appRemediationLicense>0</appRemediationLicense>
    <appRemediationEventsPerBundle>100</appRemediationEventsPerBundle>
    <appRemediationCommBundlePage>/REMEDDGCOMM/ReceiveBundle.aspx</appRemediationCommBundlePage>
    <appRemediationServerName></appRemediationServerName>
    <appRemediationServerPort>80</appRemediationServerPort>
    <appRemediationServerIsHTTPS>0</appRemediationServerIsHTTPS>
    <appRemediationActivityLogging>25,26</appRemediationActivityLogging>
    <appRemediationEnableScreenCI>0</appRemediationEnableScreenCI>
    <appRemediationEnableDynamicMasking>0</appRemediationEnableDynamicMasking>
    <appRemediationDisableMask>2</appRemediationDisableMask>
    <isSubclassOn>0</isSubclassOn>
    <enableURLtoIPTranslations>0</enableURLtoIPTranslations>
    <minimumDiskSpaceRequirement>600</minimumDiskSpaceRequirement>
    <minimumAlertsDiskSpaceRequirement>150</minimumAlertsDiskSpaceRequirement>
    <fileReadFlushTimeoutMS>60000</fileReadFlushTimeoutMS>
    <gfileLingerSeconds>120</gfileLingerSeconds>
    <cdWriteFlushTimeoutMS>60000</cdWriteFlushTimeoutMS>
    <userOpFlushTimeoutMS>60000</userOpFlushTimeoutMS>
    <appDataExchangeFlushTimeoutMS>60000</appDataExchangeFlushTimeoutMS>
    <processCacheFlushTimeoutMS>60000</processCacheFlushTimeoutMS>
    <regmonFlushTimeoutMS>60000</regmonFlushTimeoutMS>
    <commSendTimeoutMS>120000</commSendTimeoutMS>
    <commRecvTimeoutMS>120000</commRecvTimeoutMS>
    <maxEntriesPerProcess pushDuringUpdate="1">25</maxEntriesPerProcess>
    <processCacheHashBits>8</processCacheHashBits>
    <fileobjCacheHashBits>7</fileobjCacheHashBits>
    <tdiCacheHashBits>8</tdiCacheHashBits>
    <stringCacheHashBits>12</stringCacheHashBits>
    <psidCacheHashBits>12</psidCacheHashBits>
    <tsidCacheHashBits>10</tsidCacheHashBits>
    <threadCacheHashBits>12</threadCacheHashBits>
    <gfileCacheHashBits pushDuringUpdate="1">6</gfileCacheHashBits>
    <applyControlRuleBuildCLObj pushDuringUpdate="1">0</applyControlRuleBuildCLObj>
    <dctmTimeoutMS pushDuringUpdate="1">3000</dctmTimeoutMS>
    <disableImplicitFilteringForSourceDriveTypes>remote</disableImplicitFilteringForSourceDriveTypes>
    <disableImplicitFilteringForDestinationDriveTypes>unknown,no root dir,removable,remote,cd,ramdisk,screen,url</disableImplicitFilteringForDestinationDriveTypes>
    <disableImplicitFilteringIfSourceMatchesDestinationDriveTypes></disableImplicitFilteringIfSourceMatchesDestinationDriveTypes>
    <dgfsmonBypassHigh pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_agentbypasshigh" regType="DWOR">0</dgfsmonBypassHigh>
    <dgfsmonBypassLow pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_agentbypasslow" regType="DWOR">0</dgfsmonBypassLow>
    <dgfsmonCiCl pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_enable_cicl" regType="DWOR">5</dgfsmonCiCl>
    <dgfsmonenableonflyclassifcation pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_enableonflyclassifcation" regType="DWOR">1</dgfsmonenableonflyclassifcation>
    <dgfsmonenableclifunknowndrivetypes pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_enable_clif_unknown_drivetypes" regType="DWOR">1</dgfsmonenableclifunknowndrivetypes>
    <dgfsmondisablestreamstealth pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_disableStreamStealth" regType="DWOR">0</dgfsmondisablestreamstealth>
    <dgfsmonTaggingIgnoreList pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_taggingIgnoreList" regType="STRI">winword8.doc excel9.xls mspub.pub pwrpnt11.pot normal.dot opa11.bak</dgfsmonTaggingIgnoreList>
    <dgfsmonDpExtensionList pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_dpextensionsList" regType="STRI">pdf, vsd, ppt, zip, rtf, txt, pub, doc, dot, docx, docm, dotm, dotx, xls, xla, xlt, xlsx, xltx, xlsm, xlsb, xltm, xlam, pot, pps, ppa, pptx, potx, potm, ppts, ppsm, ppam, mpp, mpt, vst, pptm, ppsx, vsdx, vss</dgfsmonDpExtensionList>
    <dgfsmonMaxFileSizeOnFlyClassification pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_maxfilesize_onflyclassification" regType="DWOR">10240</dgfsmonMaxFileSizeOnFlyClassification>
    <dgfsmonDoClassifyModTimeInterval pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGFSMon" regName="dgfsmon_do_classify_mod_time_milliseconds" regType="DWOR">100</dgfsmonDoClassifyModTimeInterval>
    <dgmasterDisableImplicitFiltering pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="g_config_disableImplicitFiltering" regType="DWOR">0</dgmasterDisableImplicitFiltering>
    <dgmastereSataOverRide pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="g_config_eSataOverRide" regType="DWOR">0</dgmastereSataOverRide>
    <dgmasterDisableImplicitFilteringFileOpen pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="g_config_disableImplicitFilteringFileOpen" regType="DWOR">0</dgmasterDisableImplicitFilteringFileOpen>
    <dgmasterMaxFileHistory pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="g_config_MaxFileHistory" regType="DWOR">100</dgmasterMaxFileHistory>
    <dgmasterHookCDROM pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="hookCDROM" regType="DWOR">1</dgmasterHookCDROM>
    <dgtdimonAgentDirectTCP pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters\DGTDIMon" regName="AgentDirectTCP" regType="DWOR">0</dgtdimonAgentDirectTCP>
    <dgrootDisableRecursiveBSOD pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGRoot\Parameters" regName="disableRecursiveBSOD" regType="DWOR">1</dgrootDisableRecursiveBSOD>
    <dgmasterDisableRecursiveBSOD pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="disableRecursiveBSOD" regType="DWOR">1</dgmasterDisableRecursiveBSOD>
    <dgmasterSupportedGINA pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="supportedGINA" regType="STRI">msgina.dll,msgina,ctxgina.dll,nwgina.dll,sbgina.dll</dgmasterSupportedGINA>
    <dgrootEnableCorruptionDetection pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGRoot\Parameters" regName="EnableCorruptionDetection" regType="DWOR">0</dgrootEnableCorruptionDetection>
    <dgmasterEnableCorruptionDetection pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="EnableCorruptionDetection" regType="DWOR">0</dgmasterEnableCorruptionDetection>
    <dgmasterMaxPreFifoEventsToRecord pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="maxPreFifoEventsToRecord" regType="DWOR">1000</dgmasterMaxPreFifoEventsToRecord>
    <dgmasterMaxBufManagerAllocation pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="bufmgr_max_allocation" regType="DWOR">251658240</dgmasterMaxBufManagerAllocation>
    <dgmasterExtensionsForTagsInCDP pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGMaster\Parameters" regName="extensionsForTagsInCDP" regType="STRI">pdf,vsd,ppt,zip,rtf,txt,pub,doc,dot,docx,docm,dotm,dotx,xls,xla,xlt,xlsx,xltx,xlsm,xlsb,xltm,xlam,pot,pps,ppa,pptx,potx,potm,ppts,ppsm,ppam,mpp,mpt,vst,pptm,ppsx,vsdx,vss</dgmasterExtensionsForTagsInCDP>
	  <restrictShares pushDuringUpdate="1">0</restrictShares>
    <restrictSharesMsg pushDuringUpdate="1">Shares with EVERYONE access are not allowed by the company.</restrictSharesMsg>
    <eventStreamInfo>1</eventStreamInfo>
    <fileStateStreamInfo>1</fileStateStreamInfo>
    <scannerStreamInfo>1</scannerStreamInfo>
    <classifyFileOnNetworkShare>0</classifyFileOnNetworkShare>
    <sendMailEventLevel>0</sendMailEventLevel>
    <sendMailIncludeSubject>1</sendMailIncludeSubject>
    <sendMailExpandNetworkGroups>1</sendMailExpandNetworkGroups>
    <sendMailBlockSendifGroupExpansionFails>0</sendMailBlockSendifGroupExpansionFails>
    <sendMailExpandedNetworkGroupTimeoutMinutes>60</sendMailExpandedNetworkGroupTimeoutMinutes>
    <sendMailSuppressOutlookSendUnencryptedButton>0</sendMailSuppressOutlookSendUnencryptedButton>
    <sendMailDGxheaderControl>2</sendMailDGxheaderControl>
    <dgxheaderOn>0</dgxheaderOn>
    <bypassDGKillSignatureVerification>0</bypassDGKillSignatureVerification>
    <eventCacheEnable>0</eventCacheEnable>
    <eventCacheLimit>20000</eventCacheLimit>
    <eventCacheExpirationSeconds>300</eventCacheExpirationSeconds>
    <enableWinHttpAndSPDYHooks>0</enableWinHttpAndSPDYHooks>
    <!-- DG Browser Plugins -->
    <!-- disabledBrowserPlugins is comma delimited

           Enable all = 0 FireFox = 1 Chrome = 2 -->
    <disabledBrowserPlugins>0</disabledBrowserPlugins>
    <!-- eg. <chromeExtensionInstallForcelist>icgdohkgjiligeccmcbeehemjofhdned;https://clients2.google.com/service/update2/crx</chromeExtensionInstallForcelist> -->
    <chromeExtensionInstallForcelist></chromeExtensionInstallForcelist>
    <!-- chromePolicies uses JSON -->
    <!-- eg. {"IncognitoModeAvailability":1,"DeveloperToolsDisabled":1,"URLBlacklist":{"1":"cnn.com","2":"example1.com","3":"example1.com"},"DGExtUrlFilter":{"0":"dyndns.org:8000","1":"supportvcenter.support.local:9443"}} -->
    <chromePolicies>{"IncognitoModeAvailability":1,"DeveloperToolsDisabled":1}</chromePolicies>
    <!-- eg. {"DGExtUrlFilter":{"0":"dyndns.org:8000","1":"supportvcenter.support.local:9443"}} -->
    <!-- <fireFoxPolicies>{"DGExtUrlFilter":{"0":"dyndns.org:8000","1":"supportvcenter.support.local:9443"}}</fireFoxPolicies> -->
    <!-- classification -->
    <dgclassifyIgnoreProcessAsyncWriteFlag>1</dgclassifyIgnoreProcessAsyncWriteFlag>
    <!-- features -->
    <featureAME>0</featureAME>
    <featureAFE>0</featureAFE>
    <featureCOT>0</featureCOT>
    <featureACI>1</featureACI>
    <featureTVA>0</featureTVA>
    <featureBBS>0</featureBBS>
    <featureDOC>0</featureDOC>
    <featureBJUC>0</featureBJUC>
    <featureBJUCI>0</featureBJUCI>
    <ucPolicy></ucPolicy>
    <bjuciPartnerID>12</bjuciPartnerID>
    <bjuciUpdateCacheTimeoutMS>360000</bjuciUpdateCacheTimeoutMS>
    <bjucEnableRefreshConfiguration>1</bjucEnableRefreshConfiguration>
    <!-- MIP -->
    <mipPartnerId>15</mipPartnerId>
    <!-- ame -->
    <ameGetSessionKeyIntervalSec>43200</ameGetSessionKeyIntervalSec>
    <ameBlindCopyAddress></ameBlindCopyAddress>
    <ameSendShadowCopyCriteria>0</ameSendShadowCopyCriteria>
    <ameSendShadowCopyWhenBlockedMail>1</ameSendShadowCopyWhenBlockedMail>
    <ameSendPasswordViaEmail>1</ameSendPasswordViaEmail>
    <ameProcessMailBody  pushDuringUpdate="1">1</ameProcessMailBody>
    <ameEncryptMailBody>0</ameEncryptMailBody>
    <ameSingleZip>0</ameSingleZip>
    <ameSecureWholeEmailOnAnyItemSecured>0</ameSecureWholeEmailOnAnyItemSecured>
    <amePasswordDeliveryMethod>0</amePasswordDeliveryMethod>
    <amePasswordDisplayType>1</amePasswordDisplayType>
    <ameEncryptMailAttachments>1</ameEncryptMailAttachments>
    <!-- bbs -->
    <bbsGetSessionKeyIntervalSec>43200</bbsGetSessionKeyIntervalSec>
    <bbsSendPasswordViaEmail>1</bbsSendPasswordViaEmail>
    <bbsPasswordDisplayType>1</bbsPasswordDisplayType>
    <bbsEnableDecryption>1</bbsEnableDecryption>
    <!-- doc -->
    <docAciProcessDestForContent>0</docAciProcessDestForContent>
    <!-- cot -->
    <cotProtectedServerListUpdateIntervalSec>604800</cotProtectedServerListUpdateIntervalSec>
    <cotProtectedServerListExpirationIntervalSec>172800</cotProtectedServerListExpirationIntervalSec>
    <!-- tva -->
    <tvaClientListDefault>1</tvaClientListDefault>
    <tvaRepeatTokenInterval>10000</tvaRepeatTokenInterval>
    <tvaReplayChecking>0</tvaReplayChecking>
    <!-- afe -->
    <afe-getSessionKeyIntervalSec>43200</afe-getSessionKeyIntervalSec>
    <afe-markFileEncrypted>1</afe-markFileEncrypted>
    <afe-reportNTFSName>1</afe-reportNTFSName>
    <afe-keyCacheTimeout>60</afe-keyCacheTimeout>
    <afe-persistSessionKeys>1</afe-persistSessionKeys>
    <afe-enableWholeDiskEncryption>0</afe-enableWholeDiskEncryption>
    <samEncryptionEnabled>0</samEncryptionEnabled>
    <afe-contextMenuEnabled pushDuringUpdate="1">0</afe-contextMenuEnabled>
    <afe-Attach_IgnoreNetHosts>tsclient</afe-Attach_IgnoreNetHosts>
    <!-- scanner -->
    <scanFixedDrives>0</scanFixedDrives>
    <scanMappedNetworkDrives>0</scanMappedNetworkDrives>
    <scanRemovableDrives>0</scanRemovableDrives>
    <scanRunOnInstall>0</scanRunOnInstall>
    <scanStartTime>0100</scanStartTime>
    <scanEndTime>0500</scanEndTime>
    <scanPeriodicTimeoutHours>65535</scanPeriodicTimeoutHours>
    <scanPeriodicPriority>0</scanPeriodicPriority>
    <scanScheduledPriority>2</scanScheduledPriority>
    <scanDaysOfWeek></scanDaysOfWeek>
    <!-- doc properties -->
	<docpropsProcessSrcFileForContent>1</docpropsProcessSrcFileForContent>
    <docpropsProcessDestFileForContent>1</docpropsProcessDestFileForContent>
    <docpropsCodePage pushDuringUpdate="1">0</docpropsCodePage>
    <dgapiCodePage pushDuringUpdate="1">0</dgapiCodePage>
    <!-- above 2 represents CP_ACP  65001 gets CP_UTF8 -->
    <!-- aci  -->
    <aciVerifyEntities pushDuringUpdate="1">1</aciVerifyEntities>
    <aciVerifyModuleName pushDuringUpdate="1">dgcivrfy.dll</aciVerifyModuleName>
    <aciThreadPoolSize pushDuringUpdate="1">4,6,10,12</aciThreadPoolSize>
    <aciCreateHeaderOnlyIfClassified pushDuringUpdate="1">0</aciCreateHeaderOnlyIfClassified>
    <aciMaxFilesPerHDGCI pushDuringUpdate="1">50</aciMaxFilesPerHDGCI>
    <aciLogEntityScores pushDuringUpdate="1">0</aciLogEntityScores>
    <aciTangibleCharacters pushDuringUpdate="1"></aciTangibleCharacters>
    <aciMaxSecondsPerFile>10</aciMaxSecondsPerFile>
    <aciScannerMaxSecondsPerFile pushDuringUpdate="1">0</aciScannerMaxSecondsPerFile>
    <aciEnableCaseSensitivity pushDuringUpdate="1">1</aciEnableCaseSensitivity>
    <aciAppendedText pushDuringUpdate="1">\t\tThis is the end of the line.\r\nThis is the end of the file.</aciAppendedText>
    <aciMaxMatchLength>0</aciMaxMatchLength>
    <aciMatchWholeWord>1</aciMatchWholeWord>
    <aciAllowOverlap>0</aciAllowOverlap>
    <aciAllowMultipleResults>0</aciAllowMultipleResults>
    <aciEnableComponents>1</aciEnableComponents>
    <aciEnableSoftHyphenFiltering>1</aciEnableSoftHyphenFiltering>
    <aciIdolConnTimeoutMs>5000</aciIdolConnTimeoutMs>
    <aciEnableUniqueMatches>0</aciEnableUniqueMatches>
    <aciProcessDestFileForContent>1</aciProcessDestFileForContent>
    <aciMaxIdxTempFilesToDeletePerBatch>100</aciMaxIdxTempFilesToDeletePerBatch>
    <!-- When changing either aciEngineType or aciEngineModule manually, BOTH must be synchronized. -->
    <!-- aciEngineType == 0 == aciEngineModule == DGCI2.DLL -->
    <!-- aciEngineType == 1 == aciEngineModule == DGCI_ATTIVIO.DLL -->
    <aciEngineType>0</aciEngineType>
    <aciEngineModule regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGScan\Parameters" regName="aciModuleName" regType="STRI">DGCI2.DLL</aciEngineModule>
    <!-- Note:  for ADI "0" means ZERO, i.e., return ZERO matches -->
    <aciEntityStopCount>100</aciEntityStopCount>
    <aciMaxTaggedEntities pushDuringUpdate="1">1000</aciMaxTaggedEntities>
    <aciEngineMaxBytesToProcess>10485760</aciEngineMaxBytesToProcess>
    <aciFileReadDelayIntervalMS pushDuringUpdate="1">0</aciFileReadDelayIntervalMS>
    <aciScannerFileReadDelayIntervalMS pushDuringUpdate="1">0</aciScannerFileReadDelayIntervalMS>
    <aciScannerExtractEntitySleepIntervalMS pushDuringUpdate="1" regHive="HKLM" regKey="SYSTEM\CurrentControlSet\Services\DGScan\Parameters" regName="aciScannerExtractEntitySleepIntervalMS" regType="DWOR">0</aciScannerExtractEntitySleepIntervalMS>
    <contentInspectionConfigFile pushDuringUpdate="1">ciconfig.xml</contentInspectionConfigFile>
    <aciEngineParameters32 pushDuringUpdate="1">dginspect.exe -J-Xmx100m -J-XX:MaxPermSize=30m -J-XX:ReservedCodeCacheSize=5m -J-XX:MinHeapFreeRatio=5 -J-XX:MaxHeapFreeRatio=10 -J-Xrs -cmd start verdasys-base.xml verdasys.xml</aciEngineParameters32>
    <aciEngineParameters64 pushDuringUpdate="1">dginspect.exe -J-Xmx160m -J-XX:MaxPermSize=60m -J-XX:ReservedCodeCacheSize=5m -J-XX:MinHeapFreeRatio=5 -J-XX:MaxHeapFreeRatio=10 -J-Xrs -cmd start verdasys-base.xml verdasys.xml</aciEngineParameters64>
    <aciEngineDeleteLogsAfterDays pushDuringUpdate="1">7</aciEngineDeleteLogsAfterDays>
    <!-- When this is set to true this makes every stage in the workflow single instanced and reused. When it is set to false, there can be multiple instances of stage. NOTE: this will use more memory when set to false. The default is true. -->
    <aciEngineAllComponentsThreadSafe pushDuringUpdate="1">true</aciEngineAllComponentsThreadSafe>
    <!-- This determines how many instances of stages in the workflow will be created. Set the above property to false and this to a number greater than 1 to have multiple advte instances. The default is 1. -->
    <aciEnginePerformanceDefaultInstances pushDuringUpdate="1">1</aciEnginePerformanceDefaultInstances>
    <!-- This determines how many web reqeusts can be processed at the same time. When all threads used up subsequent requests will queue up. The default is 1. -->
    <aciEngineNumThreads pushDuringUpdate="1">1</aciEngineNumThreads>
    <aciEngineMaxChunkSize pushDuringUpdate="1">131072</aciEngineMaxChunkSize>
    <!-- ipc -->
    <ipcMessageTimeout pushDuringUpdate="1">0</ipcMessageTimeout>
    <!-- QDB processor -->
    <qdbIpcSendChannelSize pushDuringUpdate="1">12288</qdbIpcSendChannelSize>
    <qdbIpcReceiveChannelSize pushDuringUpdate="1">12288</qdbIpcReceiveChannelSize>
    <qdbThreadPoolSize pushDuringUpdate="1">3,4,5,6</qdbThreadPoolSize>
    <dgLogMaxBackupLogs pushDuringUpdate="1">10</dgLogMaxBackupLogs>
    <dgLogMaxSizeInKB pushDuringUpdate="1">51200</dgLogMaxSizeInKB>
    <!-- START feature umco options -->
    <!-- umcoTagFilter => tells AME to filter out these unwanted tags retrieved from the email x-header -->
    <umcoTagFilter pushDuringUpdate="1"></umcoTagFilter>
    <!-- END   feature umco options -->
    <!-- START Feature Status Manager -->
    <statusManagerSendIntervalMS>1800000</statusManagerSendIntervalMS>
    <statusManagerSendAllIntervalMS>86400000</statusManagerSendAllIntervalMS>
    <!-- END   Feature Status Manager -->
    <getExpeditedDataMS>300000</getExpeditedDataMS>
    <classifyDestFilesAfterFolderMoveOnSameVolume>1</classifyDestFilesAfterFolderMoveOnSameVolume>
    <reportFilesAfterFolderMoveOnSameVolume>1</reportFilesAfterFolderMoveOnSameVolume>

    <componentListsEnvVarsToExpand>|windir|systemroot|systemdrive|programfiles|programfiles(x86)|</componentListsEnvVarsToExpand>
      <componentListsMaxAggregateCount>5000000</componentListsMaxAggregateCount>
    
    <!-- Cassini Web Inspection Proxy-->
    <wipDisable>0</wipDisable>
    <wipPort>3128</wipPort>
    <wipDebugLogLevel></wipDebugLogLevel>
    <wipSuppressBrowserCache>0</wipSuppressBrowserCache>
    <wipFsDriverEnable>0</wipFsDriverEnable>
    <!-- for pre-7.5 DGMC deployments -->
    <wipOneCrlUrl pushDuringUpdate="1">https://onecrl.msp.digitalguardian.com/onecrl/onecrl.json</wipOneCrlUrl>
    <!-- hidden configuration items-->
    <wipDebugPort pushDuringUpdate="1">0</wipDebugPort>
    <wipAgingPeriodInSeconds pushDuringUpdate="1">300</wipAgingPeriodInSeconds>
    <!-- Cassini Web Inspection Proxy-->
	
    <!-- Start Agent Cloud Communication -->
    <cloudCommsEnabled>0</cloudCommsEnabled>
    <maxBackoffInterval>6000000</maxBackoffInterval>
    <minBackoffInterval>300000</minBackoffInterval>
    <holdDownTime>300</holdDownTime>
    <!-- End Agent Cloud Communication-->

    <!-- ACI Sample Match-->
    <aciSampleMatchingEnabled>0</aciSampleMatchingEnabled>
    <aciSampleMatchNumOfCharsBefore>25</aciSampleMatchNumOfCharsBefore>
    <aciSampleMatchNumOfCharsAfter>25</aciSampleMatchNumOfCharsAfter>
    <aciSampleMatchNumOfAllEntities>100</aciSampleMatchNumOfAllEntities>
    <aciSampleMatchNumPerEntity>25</aciSampleMatchNumPerEntity>
    <!-- ACI Sample Match-->

    <agentRole>roleMed</agentRole>
    <!--=====AGENT ROLE DEFINITION BEGIN ======-->
    <roleDisabled defaultProcessFlags="SK+TR+NI+NE+NC+ND+NH+NA+NB+NV+NP+NN" driverDisableMaskAdjust="" defaultHookMask="" roleDisplayName="Disabled"></roleDisabled>
    <roleLow defaultProcessFlags="SK+NI+NE+NC+ND+NH+NA+NB+NV+NP+NN" driverDisableMaskAdjust="" defaultHookMask="" roleDisplayName="Low = SK+NI+NE+NC+ND+NH+NA+NB+NV+NP+NN"></roleLow>
    <roleMed defaultProcessFlags="NI+NH" driverDisableMaskAdjust="" defaultHookMask="" roleDisplayName="Med = NI+NH"></roleMed>
    <roleHigh defaultProcessFlags="NH" driverDisableMaskAdjust="" defaultHookMask="" roleDisplayName="High = NH"></roleHigh>
    <!--=====AGENT ROLE DEFINITION END ======-->
  </appSettings>
</configuration>