How to Configure a Netskope API Data Protection Policy

9. From the Users menu:
   1. Select a group of users to scan for.
   2. Optionally, click to Exclude Users.
   3. Optionally, click to Exclude User Profiles.
   4. Click Next.

This section of the API Data Protection policy page specifies files, objects, and messages that trigger a policy violation.

For Box, you can select one of the following options:

• All Sharing Options: Scans all sharing options like Private, Public, Shared Internally, and Shared Externally.
• Specific Sharing Options: With specific sharing options, you can choose all or specific sharing types, like Private, Public, Shared Internally, or Shared Externally.

For Shared Externally, you can select all or specific external domains if they have been configured for the app that is chosen on the instance page. To set thresholds for when content sharing triggers a policy violation, select Advanced Options and enter the number of internal or external collaborators that must be detected for a policy violation to occur.

• All File Types or Specific File Types to scan.

This section of the API Data Protection policy page specifies the type of file activity that is performed by a user.

9. Click Select Activities.

10. From the Activity menu:
    1. Optionally, clear the checkbox for default activities.
    2. Optionally, select additional activities.
    3. Click Save.

11. Click Next.

This section of the API Data Protection policy page specifies the type of DLP profile that triggers a policy violation.

9. From the DLP menu:
   1. Select either DLP or None.
   2. If DLP was selected, click Select Profile and go to Step 10. Otherwise, go to Step 11.

10. Search for a DLP profile or choose one from the list of predefined and custom profiles and then click Save.

11. Click Next.

This section of the API Data Protection policy page specifies the action to be taken when a policy violation occurs. The actions vary depending on the app chosen. For some apps, the only action is alert. Similarly, restrict access options vary depending on the app chosen.

9. Select an action to take from the drop-down list, and then click Next.

This section of the API Data Protection policy page specifies who and when to notify users about a policy violation.

9. From the Notification menu:
   1. Select how often to notify people.
   2. Select who to send notifications to.
   3. Choose an Email Template for each selected group (Step 9B) from the drop-down menu. If creating a New Template, go to Step 10. Otherwise, go to Step 9D.
   4. Optionally, populate a From Email so that recipients know who set up this policy.
   5. Click Next.

10. From the Create Introspection Email Notification Template menu:
    1. Populate a Template Name.
    2. Populate a Subject.
    3. Optionally, use Insert to insert Netskope template variables.
    4. Click Save.

This section of the API Data Protection policy page specifies the name of the policy and allows you to optionally add a description.

9. Populate the Policy Name, and then optionally populate a Policy Description.

10. When finished, click Save. The policy scans the files and folders specified based on your selections, and the action that is chosen occurs when there is a policy violation.