12.1 Watermark Policies

12.1.1 Screen Watermark Policy

Access Watermark → Screen Watermark Policy. Administrators can apply a watermark template to client machines' screens to display custom watermarks, preventing sensitive information leakage via screenshots or photography.

Screen Watermark Policy Attributes:

Attribute Description
Watermark Template Select a watermark template to define watermark content. Templates are managed under Category Management → Watermark Templates → Screen Watermark Template.
Display Mode Choose Full-Screen Watermark or Application Window Watermark. Full-screen displays the watermark across the entire screen; window watermark applies only to specified program windows.
Application Select programs that trigger the screen watermark when running.
Authorized Software Select licensed software that triggers the watermark when running.
Website Specify websites where the watermark appears in the browser window. This works only when Display Mode is set to Application Window Watermark. Website addresses can be full URLs or include wildcards.
Window Class Name Specify window class names to control full-screen watermark application. This works only when Display Mode is set to Full-Screen Watermark. Multiple class names can be separated by semicolons. Names can be exact or use wildcards. Only foreground windows match the policy; closed or minimized windows do not.

Note:

  • The Authorized Software option appears only when a valid encryption license is registered.

12.1.2 Print Watermark Policy

Access Watermark → Print Watermark Policy. Administrators can apply watermark templates to printed documents, adding custom images or text to protect document copyrights.

Print Watermark Policy Attributes:

Attribute Description
Printer Type Options include Shared, Network, Local, and Virtual printers. If none are selected, all types are considered selected by default. After saving, all four types will be checked.
Printer Description Specify printer names. You can target a printer on a networked computer, e.g., \\server\* for all printers on \\server, or SomePrinter for a specific printer named SomePrinter.
Print Job Specify print job names, supporting wildcards.
Watermark Template Select a watermark template to define watermark content. Templates are managed under Category Management → Watermark Templates → Print Watermark Template.
Application Specify the application used for printing.
Authorized Software Specify licensed software for printing.

Note:

  • The Authorized Software option appears only when a valid encryption license is registered.

12.1.3 Document Watermark Policy

Access Watermark → Document Watermark Policy. Administrators can apply watermark templates to documents, ensuring that files carry custom watermarks when shared or saved externally. This provides a deterrent effect for users and enables traceability of potential data leaks.

Document Watermark Policy Attributes:

Attribute Description
Action Options: Add Watermark or Do Not Add Watermark. Default is Add Watermark.
Watermark Template Select a document watermark template to define watermark content. Templates are managed under Category Management → Watermark Templates → Document Watermark Template.
Backup Copy When checked, files triggered by the policy are backed up and can be viewed under Watermark → Document Watermark Logs.
Minimum Backup File Size Specify the minimum file size for backup in KB.
Maximum Backup File Size Specify the maximum file size for backup in KB.
External Sharing Apply watermarks when files are sent through external sharing channels.
File Name Specify file paths or names, supporting wildcards. Default is empty, meaning all files are included.
Copy to Removable Drive Apply or skip watermarks on files copied to removable drives.
Copy to Network Drive Apply watermarks to files copied to network shared paths. By default, all network paths are controlled; custom paths are supported.
Include Scope Specify network paths to include, e.g., \\server\temp or \\server\temp\*. Only files sent to these paths are processed.
Exclude Scope Specify network paths to exclude. Files sent to these paths are not processed.
IM File Transfer Apply watermarks to files sent via IM tools. Requires the Instant Messaging module.
Chat Tools Supported chat platforms include:QQ, ICQ, MSN Messenger, Yahoo, TM, Lanxin, Skype, RTX, LSC, ALI, Fetion, Google Talk, Baidu Hi, 263EM, FeiQ, MSNLite, Marketing QQ, Enterprise QQ, Lianwo LINE, Qunying CC, LYNC, Enterprise WeChat, Activity Message, KK, IMO Class Chat, DingTalk, Feishu, Zalo, WhatsApp, Microsoft Teams.
IM Image Transfer Apply watermarks to images sent via IM tools. Requires the Instant Messaging module.
Chat Tools Supported chat platforms include: QQ, ICQ, MSN Messenger, Yahoo, TM, Lanxin, Skype, RTX, LSC, ALI, Fetion, Google Talk, Baidu Hi, 263EM, FeiQ, MSNLite, Marketing QQ, Enterprise QQ, Lianwo LINE, Qunying CC, LYNC, Enterprise WeChat, Activity Message, KK, IMO Class Chat, DingTalk, Feishu, Zalo, WhatsApp, Microsoft Teams.
IM Screenshot Apply watermarks to screenshots captured from IM tools. Requires the Instant Messaging module.
Chat Tools Supported chat platforms include: QQ, ICQ, MSN Messenger, Yahoo, TM, Lanxin, Skype, RTX, LSC, ALI, Fetion, Google Talk, Baidu Hi, 263EM, FeiQ, MSNLite, Marketing QQ, Enterprise QQ, Lianwo LINE, Qunying CC, LYNC, Enterprise WeChat, Activity Message, KK, IMO Class Chat, DingTalk, Feishu, Zalo, WhatsApp, Microsoft Teams.
Send Email Adds a watermark to attachments in sent emails; requires the Email Control module.
Sender Adds a watermark to email attachments sent by specified senders; can select from the email address library or enter manually. If left blank, applies to all senders.
Recipient Adds a watermark to email attachments received by specified recipients; can select from the email address library or enter manually. If left blank, applies to all recipients.
Upload Document Adds a watermark to files uploaded via browsers, Baidu Netdisk client, or Weiyun client; requires the Web Browsing Control module.
Website or Network Address Specifies browser upload addresses; files uploaded to these addresses will have watermarks applied. Supports wildcards *, e.g., *baidu.com*, and multiple addresses separated by commas.
Decrypt File Adds a watermark to files that are decrypted; requires the Encryption module.
File Landing Operations Adds a watermark to files that are newly created, modified, or renamed locally.
Document Type
Included Range Sets local included paths and file types. Multiple paths can be configured; files within this range will be processed during creation, modification, or renaming.
Excluded Range Sets local excluded paths and file types. Multiple paths can be configured; files within this range will not be processed.

Note:

  • 1. User-level policies do not support local file operations (landing operations) control.
  • 2. Policies by default support penetrating compressed files to identify files within. If a file inside a compressed archive matches the policy, it will be watermarked; other files that do not match the policy remain unaffected.

12.1.4 Circulation Traceability Policy

Select Watermark -> Circulation Traceability Policy. By configuring this policy, administrators can embed invisible traceable information into files when they are sent externally or saved locally, enabling effective file tracking.

The properties of the circulation traceability policy include:

Policy Attribute Description
Action Options: Add traceability information / Do not add traceability information. Default is to add traceability information.
Traceability Information Specify the traceable information to be embedded.
Backup Copy When checked, backups of files triggering the policy are saved and can be viewed under Watermark -> Document Circulation Log.
Minimum Backup File Size Specify the minimum file size in KB.
Maximum Backup File Size Specify the maximum file size in KB.
External Operation Adds traceability information when the file is sent via external channels.
File Name Specify the files that trigger the policy, supporting file paths, names, and wildcards. Default is empty, meaning all files.
Copy to Removable Drive Adds traceability information to files copied to removable drives. Requires the Document Operation Control module.
Copy to Network Drive Adds traceability information to files copied to network shared paths. Requires the Document Operation Control module. Default applies to all network paths but can be customized.
Include Scope Specify network paths to include. Only files transferred to these paths will be processed. Format: \\server\temp or \\server\temp\*. Multiple paths can be set.
Exclude Scope Specify network paths to exclude. Files transferred to these paths will not be processed. Multiple paths can be set.
IM File Transfer Adds traceability information to files sent via IM tools. Requires the Instant Messaging module.
Chat Tools Supported chat tools include QQ, ICQ, MSN Messenger, YAHOO, TM, Lanxin, SKYPE, RTX, LSC, ALI, FETION, Google Talk, Baidu Hi,263EM, FeiQiu, MSNLite, Marketing QQ, Enterprise QQ, LINE, Qunying CC, LYNC, WeCom (Enterprise WeChat), Activity Message, KK, IMO Class Chat, DingTalk, Feishu, Zalo, WhatsApp, Microsoft Teams.
IM Image Transfer Adds tracking information to images sent via IM tools; requires the Instant Messaging module.
Chat Tools Supported chat tools include QQ, ICQ, MSN Messenger, YAHOO, TM, Lanxin, SKYPE, RTX, LSC, ALI, FETION, Google Talk, Baidu Hi, 263EM, FeiQiu, MSNLite, Marketing QQ, Enterprise QQ, LINE, Qunying CC, LYNC, WeCom (Enterprise WeChat), Activity Message, KK, IMO Class Chat, DingTalk, Feishu, Zalo, WhatsApp, Microsoft Teams.
Send Email Adds tracking information to attachments sent via email; requires the Email Control module.
Sender Specifies the sender whose email attachments will have tracking information added. You can select addresses from the email classification library or enter manually. Leave empty to apply to all senders.
Recipient Specifies the recipient whose received email attachments will have tracking information added. You can select addresses from the email classification library or enter manually. Leave empty to apply to all recipients.
Match Single Recipient Only When checked, the policy applies as long as at least one recipient matches the configured recipients.
Upload Control Adds tracking information to files uploaded via browsers, Baidu Netdisk client, or Weiyun client; requires the Web Browsing Control module.
Website or Network Address Specifies the upload address in the browser. Files uploaded to this address will have tracking information added. Supports wildcards (*), e.g., baidu.com, and multiple addresses separated by commas.
Decrypt File Adds tracking information to files that are decrypted; requires the Encryption module.
Local Operations Adds tracking information to files created, modified, or renamed locally.
Include Scope Sets local paths and file types to include. Multiple paths can be set. Only files in the included scope are processed during creation, modification, or renaming.
Exclude Scope Sets local paths and file types to exclude. Multiple paths can be set. Files in the excluded scope are not processed.

Note:

  • User-level policies do not support controlling local (on-device) operations.

12.1.5 Document Watermark Permissions

By default, clients cannot manually add or remove document watermarks. Administrators can log in to the console, select Watermark → Document Watermark Permissions, and configure permissions for manual watermark management on the client side.

Add Watermark

Settings are as follows:

Option Description
Allow Manual Document Watermarking A feature toggle. When enabled, the client can right-click a document and see the "Add Document Watermark" option to manually add a watermark. When manually adding a watermark on the client, users can choose from administrator-defined watermark templates or create and select a local custom watermark template. Custom templates are stored only on the current client machine.
File Type Select the types of documents to which the watermark will be applied.
Watermark Template Choose a watermark template to define the watermark content. Templates can be managed under "Category Management → Watermark Templates → Document Watermark Templates."
Allow Custom Watermark If checked, users can create and select custom watermark templates locally when manually adding watermarks. If unchecked, users can only choose from predefined templates set by the administrator in the console.
Backup Files If checked, files that trigger the watermark policy will be backed up and can be viewed under "Watermark → Document Watermark Log."
Backup Range Specify the file size range for backups. Only files within this range will be backed up.

Remove Watermark

The configuration options are as follows:

Option Description
Allow manual removal of document watermark If checked, the client's right-click menu on a document will show "Document Watermark → Remove Document Watermark", allowing manual removal of watermarks.
File Type Select the types of documents from which watermarks can be removed.
File Name Specify the included and excluded files for watermark removal.
Include Files Remove watermarks from files that meet the inclusion criteria; supports wildcards.
Exclude Files Do not remove watermarks from files that meet the exclusion criteria; supports wildcards.
Backup Files If checked, files that trigger the policy will be backed up and can be viewed under "Watermark → Document Watermark Log."
Backup Range Specify the file size range for backup. Only files within this range will be backed up.

Note:

  • Only explicit watermarks can be removed. Document IDs, implicit universal watermarks, implicit image number watermarks, and tracking information will not be removed.

Don't see what you're looking for?

Visit our knowledge base
Know more about AnySecura
Read latest news
Discover what's happening now
Need assistance?
Contact us now