How to create a Protect policy for Gatelets to block users from sharing files via OneDrive to public domains (with exceptions)

Products

• CASB Gateway
• CASB Gateway Advanced

Issue/Introduction

Businesses that have a requirement to block file sharing via Gatelets to public domains, but still need to allow some file sharing exceptions.

Environment

CloudSOC 
OneDrive

Resolution

Work through the following steps to whitelist specific Gmail accounts and block all others:

• Logon to your CloudSOC tenant as a System Administrator.
• Hover your mouse over the Protect icon on the left column, then hover over and click on Policies.

​
 

• Click on +New in upper right corner of the Window
  • Select Policy in the dropdown
  • Enter a Policy Name (required)
  • Create as File sharing via Gatelet policy

• • Under 'Cloud Service' select the desired target, i.e. OneDrive, or leave at "Any".
    • Select "Any" domain and "Anyone" in "Shared by" - or a Selective to enter a specific User's email address for initial testing.
    • 
    • Select sharing for "Anyone" in "Shared with".
      • Add exceptions for the desired user accounts under "Shared with".
      • 
    • Select "Block activity" under "Define Response"
      • 
    • Scroll back to the top and click 'Save Policy'