Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Cohesity Alta SaaS Protection Administrator's Guide
  3. Configure Tagging policies
  4. About the Tagging policy
Cohesity Alta SaaS Protection Administrator's Guide

About the Tagging policy

Tagging policies act as protection to prevent accidental exposure of organizational data by assigning tags to data policies. These tags function at the Hub level and are assigned upon ingestion or when content matches specified RegExs or Tagging policies. The assigned Tags outline the output behaviors for the data.

Table:

Tag policy

Description

Regular expressions (RegExs)

RegExs can identify patterns representing sensitive content and associate one or more tags to determine protection behaviors. They are evaluated during Cohesity Alta SaaS Protection search indexing.

Tagging policies

Tagging policies offer a more granular way of applying Tags at the Stor level. Use Tagging policies if a particular Stor's content needs a unique level of protection that requires you to leverage Stor-level metadata in the policy definition for applying Tags.

The tags can have one or more Tag Behaviors enforced on items with the associated Tag through RegEx or Tagging policy.

Table: Tag Behavior

Tag Behavior

Description

Legal Hold

It assigns a legal hold status, which blocks any deletion.

Prevent Discovery Export

It prevents internal and external sharing and blocks access to the item by the Cohesity Alta SaaS Protection End-User portal or a stub.

Prevent User Retrieval

It blocks any user from retrieving the item, either through the Cohesity Alta SaaS Protection End-User portal or a stub, and also works to prevent sharing (both internal and external).

Prevent deletion

It blocks the user from deletion of items.

For more information on adding Tags and Tagging policies,

See Add Tags.

See Add/edit Tagging policies .

Feedback

Was this page helpful?
Previous

Configure Tagging policies

Next

Add Tags

Feedback

Was this page helpful?