How to Configure a Netskope API Data Protection Policy

9. From the Users menu:
   1. Select a group of users to scan for.
   2. Optionally, click to Exclude Users.
   3. Optionally, click to Exclude User Profiles.
   4. Click Next.
   
   Note: User profiles must be added before they can be displayed here. To upload a CSV file that contains your user profiles, go to Policies, Profiles, User, and then click New User Profile. Complete the steps in the Create User Profile wizard, and then select a user profile. For more information, reference How to Create a Netskope Profile.

This section of the API Data Protection policy page specifies files, objects, and messages that trigger a policy violation.

For Box, you can select one of the following options:

• All Sharing Options: Scans all sharing options like Private, Public, Shared Internally, and Shared Externally.
• Specific Sharing Options: With specific sharing options, you can choose all or specific sharing types, like Private, Public, Shared Internally, or Shared Externally.

For Shared Externally, you can select all or specific external domains if they have been configured for the app that is chosen on the instance page. To set thresholds for when content sharing triggers a policy violation, select Advanced Options and enter the number of internal or external collaborators that must be detected for a policy violation to occur.

• All File Types or Specific File Types to scan.
  

This section of the API Data Protection policy page specifies the type of file activity that is performed by a user.

9. Click Select Activities.
   
10. From the Activity menu:
    1. Optionally, clear the checkbox for default activities.
    2. Optionally, select additional activities.
    3. Click Save.
    
11. Click Next.
    

This section of the API Data Protection policy page specifies the type of DLP profile that triggers a policy violation.

9. From the DLP menu:
   1. Select either DLP or None.
   2. If DLP was selected, click Select Profile and go to Step 10. Otherwise, go to Step 11.
   
   Note: The name of the DLP profile that is selected may differ in your environment.
10. Search for a DLP profile or choose one from the list of predefined and custom profiles and then click Save.
    
11. Click Next.
    

This section of the API Data Protection policy page specifies the action to be taken when a policy violation occurs. The actions vary depending on the app chosen. For some apps, the only action is an alert. Similarly, restrict access options vary depending on the app chosen.

9. Select an action to take from the drop-down list, and then click Next.
   
   Note:

   • The Set File Classification To option is disabled by default. To enable this option, contact Dell Support. To know more about this option, reference the Security Classification on Box section below.
   • For some actions, like Restrict Access, you can select additional options from the adjacent drop-down list. For example, if you selected Specific Sharing Options and Shared Externally in the Content section, then the option to allowlist or blocklist an External Domain appears in the drop-down list.
   • For the Quarantine action, select an existing quarantine profile from the list, or create a new one. For more information about creating a quarantine profile, reference How to Create a Netskope Profile. A DLP profile must be selected to use the Quarantine action.
   • For the Legal Hold action, select an existing legal hold profile from the list, or create a new one. For more information about creating a legal hold profile, reference How to Create a Netskope Profile.

This section of the API Data Protection policy page specifies who and when to notify users about a policy violation.

9. From the Notification menu:
   1. Select how often to notify people.
   2. Select who to send notifications to.
   3. Choose an Email Template for each selected group (Step 9b) from the drop-down menu. If creating a New Template, go to Step 10. Otherwise, go to Step 9D.
   4. Optionally, populate a From Email so that recipients know who set up this policy.
   5. Click Next.
   
10. From the Create Introspection Email Notification Template menu:
    1. Populate a Template Name.
    2. Populate a Subject.
    3. Optionally, use Insert to insert Netskope template variables.
    4. Click Save.

This section of the API Data Protection policy page specifies the name of the policy and allows you to optionally add a description.

9. Populate the Policy Name and then optionally populate a Policy Description.
   
10. When finished, click Save. The policy scans the files and folders specified based on your selections. The action that is chosen occurs when there is a policy violation.