跳转至主要内容
  • 快速、轻松地下订单
  • 查看订单并跟踪您的发货状态
  • 创建并访问您的产品列表

How to Configure a Netskope API Data Protection Policy

摘要: A Netskope API Data Protection policy may be configured by following these instructions.

本文适用于 本文不适用于 本文并非针对某种特定的产品。 本文并非包含所有产品版本。

症状

To discover existing data residing within your sanctioned cloud services, create an API Data Protection policy with the wanted options and actions. The Netskope UI guides you through the process of configuring policies for each of your cloud apps on a single web page.


Affected Products:

Netskope


原因

Not applicable.

解决方案

To configure an API Data Protection policy:

  1. In a web browser, go to the Netskope web console:
    • United States Datacenter: https://[TENANT].goskope.com/
    • European Union Datacenter: https://[TENANT].eu.goskope.com/
    • Frankfurt Datacenter: https://[TENANT].de.goskope.com/
Note: [TENANT] = The tenant name in your environment.
  1. Log in to the Netskope web console.

Netskope web console

  1. Click Policies.

Policies

  1. Click API Data Protection.

API Data Protection

  1. Click New Policy.

New Policy

  1. In the Application section, select the app.

Selecting an application

  1. In the Instance section, select the app instance for the policy.

Selecting an app instance

  1. Click Next, and then go to the topic in this guide that matches the section you are configuring on the New API Data Protection policy page.

Next

Settings may be configured for:

  • Users
  • Content
  • Activity
  • Data Loss Prevention (DLP)
  • Action
  • Notification
  • Set Policy

For more information about settings, click the appropriate control.

Note: For more information about what settings may be configured for each application, reference Netskope API Data Protection Overview.
  1. From the Users menu:
    1. Select a group of users to scan for.
    2. Optionally, click to Exclude Users.
    3. Optionally, click to Exclude User Profiles.
    4. Click Next.

Users menu

Note: User profiles must be added before they display here. To upload a CSV file that contains your user profiles, go to Policies > Profiles > User, and then click New User Profile. Complete the steps in the Create User Profile wizard, and then select a user profile. For more information, reference How to Create a Netskope Profile.

This section of the API Data Protection policy page specifies files, objects, and messages that trigger a policy violation.

Note: The available content options differ based on the application that is selected in Step 6. For more information about available content, reference Netskope API Data Protection Overview.

For Box, you can select one of the following options:

  • All Sharing Options: Scans all sharing options like Private, Public, Shared Internally, and Shared Externally.
  • Specific Sharing Options: With specific sharing options, you can choose all or specific sharing types, like Private, Public, Shared Internally, or Shared Externally.

For Shared Externally, you can select all or specific external domains if they have been configured for the app that is chosen on the instance page. To set thresholds for when content sharing triggers a policy violation, select Advanced Options and enter the number of internal or external collaborators that must be detected for a policy violation to occur.

  • All File Types or Specific File Types to scan.

Selecting content to scan

This section of the API Data Protection policy page specifies the type of file activity that is performed by a user.

Note: The available content options differ based on the application that is selected in Step 6. For more information about available content, reference Netskope API Data Protection Overview.
  1. Click Select Activities.

Selecting activities

  1. From the Activity menu:
    1. Optionally, clear the checkbox for default activities.
    2. Optionally, select additional activities.
    3. Click Save.

Activity menu

  1. Click Next.

Next

DLP

This section of the API Data Protection policy page specifies the type of DLP profile that triggers a policy violation.

  1. From the DLP menu:
    1. Select either DLP or None.
    2. If DLP was selected, click Select Profile and go to Step 10. Otherwise, go to Step 11.

DLP menu

Note: The name of the DLP Profile that is selected may differ in your environment.
  1. Search for a DLP profile or choose one from the list of predefined and custom profiles and then click Save.

Selecting a DLP profile

  1. Click Next.

Next

This section of the API Data Protection policy page specifies the action to be taken when a policy violation occurs. The actions vary depending on the app chosen. For some apps, the only action is alert. Similarly, restrict access options vary depending on the app chosen.

Note: For a list of supported actions per cloud app, reference Netskope API Data Protection Overview.
  1. Select an action to take from the drop-down list, and then click Next.

Selecting an action

Note:
  • The Set File Classification To option is disabled by default. To enable this option, contact Dell Support. To know more about this option, reference the Security Classification on Box section below.
  • For some actions, like Restrict Access, you can select additional options from the adjacent drop-down list. For example, if you selected Specific Sharing Options and Shared Externally in the Content section, then the option to allowlist or blocklist an External Domain appears in the drop-down list.
  • For the Quarantine action, select an existing quarantine profile from the list, or create a new one. For more information about creating a quarantine profile, reference How to Create a Netskope Profile. A DLP profile must be selected to use the Quarantine action.
  • For the Legal Hold action, select an existing legal hold profile from the list, or create a new one. For more information about creating a legal hold profile, reference How to Create a Netskope Profile.

This section of the API Data Protection policy page specifies who and when to notify users about a policy violation.

  1. From the Notification menu:
    1. Select how often to notify people.
    2. Select who to send notifications to.
    3. Choose an Email Template for each selected group (Step 9B) from the drop-down menu. If creating a New Template, go to Step 10. Otherwise, go to Step 9D.
    4. Optionally, populate a From Email so that recipients know who set up this policy.
    5. Click Next.

Notification menu

  1. From the Create Introspection Email Notification Template menu:
    1. Populate a Template Name.
    2. Populate a Subject.
    3. Optionally, use Insert to insert Netskope template variables.
    4. Click Save.

Create Introspection Email Notification Template menu

This section of the API Data Protection policy page specifies the name of the policy and allows you to optionally add a description.

  1. Populate the Policy Name, and then optionally populate a Policy Description.

Set Policy

  1. When finished, click Save. The policy scans the files and folders specified based on your selections, and the action that is chosen occurs when there is a policy violation.

Save


To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

其他信息

 

视频

 

受影响的产品

Netskope
文章属性
文章编号: 000126831
文章类型: Solution
上次修改时间: 20 12月 2022
版本:  12
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。