Realtime DLP Download Scanning enables customers to protect sensitive data stored in SaaS applications, such as OneDrive and SharePoint, from being downloaded by unauthorized parties.
Why do customers need to control sensitive data downloads?
When data is stored on a customer's device or network, it's essential to prevent it from being uploaded to unauthorized locations or accessed by unauthorized personnel. Similarly, when sensitive data is stored in the cloud, customers must ensure that only authorized individuals can download local copies. A common use-case involves granting partners, contractors, customers, or other parties access to view specific data without allowing them to download or create local copies.
Which applications and application categories are supported for download direction?
The download inspection feature is supported by the Cloud Storage, CRM, and Collaboration application categories. Customers can choose to scan downloads either across the entire category or for specific applications within each category. Additionally, we are enhancing our AI-generated content control capabilities, allowing customers to block unwanted content types, such as source code or court citations, across 15 leading generative AI applications.
How to configure the scanning direction in a Realtime DLP rule?
In the Secure Access dashboard go to: Secure > Data Loss Prevention Policy > Add Realtime Rule > Select Destination List and Application to Inclusion > Application Categories.
In the Direction selection options you can select to scan Download, Upload or both directions for application categories or for specific applications within these categories.
Who is eligible for this new feature?
It is available to all Secure Access DLP customers at no additional cost.
Where can I find more information?
Refer to the Secure Access documentation for guidance.
Add a Real Time Rule to the Data Loss Prevention Policy