Safeguard and Trusted Applications

Question

Good afternoon, 
 
 We are running into an issue with Safeguard Trusted Application settings and Solidworks and Draftsight applications. 
 
 We have Engineering drawings which are encrypted with policies from Safeguard. I have added the exceptions below to the Trusted Applications list already, however, we still seem to be unable to open any of our encrypted drawings. I have made sure that the policy sync has been completed on the end user(s) machines. 
 
 List of Exceptions: 
 C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe C:\Program Files\Dassault Systemes\DraftSight\bin\DraftSight.exe C:\Program Files\SolidWorks Corp\SolidWorks\SLDWORKS.exe C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiController.exe C:\Program Files\Dassault Systemes\DraftSight\bin\draftsighthelper.exe 
 
 We originally started with the top 3 exceptions and that seemed not to work, so we went through the folder and added exceptions for all executable's we thought that might have been related to opening documents within the application. 
 
 Please note that we cannot open documents that are encrypted by double-clicking on them, or dragging them to the application. The applications have no issues opening unencrypted versions of these drawings. 
 
 Safeguard Management Center Version: 8.20.0.83 
 Safeguard End user application version: 8.20.0.83

Jasmin · Accepted Answer

Hi Dallas Turner 
 It is not best to practise to apply policies at the root level. Instead of that assign policy to the group of computers or users. 
 To check Synchronized or location-based encryption, Go to File encryption policy, you have assigned and check whether the encryption method mentioned there is application-based encryption or location-based encryption.

Neil_Evolve · Answer

Hi Dallas, 
 Synchronized encryption is based upon file extension, you can also target specific locations. 
 See: docs.sophos.com/.../AppBasedFileEncryption.html 
 Location-based encryption encrypts all files in a location according to the assigned policy. You assign Trusted Applications for file-based encryption in the relevant General Settings policy. 
 See: https://docs.sophos.com/esg/sgn/8-1/admin/en-us/esg/SafeGuard-Enterprise/concepts/FileShareAbout.html 
 See: docs.sophos.com/.../PolicySettingsGeneralSettings.html 
 As for policies and where you assign them, see: https://docs.sophos.com/esg/sgn/8-1/admin/en-us/esg/SafeGuard-Enterprise/concepts/Policies.html 
 
 Hope this helps.