search cancel

Box shared link is not imported into the DLP incident sharing URL field

book

Article ID: 254323

calendar_today

Updated On:

Products

Data Loss Prevention CASB Securlet SAAS With DLP-CDS Data Loss Prevention Cloud Detection Service for REST

Issue/Introduction

In CloudSOC you can see 2 links for a document in Box that has a shared link.

Shared Link: https://xxxxx.box.com/s/xxxxxxxxxxxxxxxxxxxxxxxxxxx
Private Link: https://xxxxx.box.com/files/0/f/xxxxxxxxxxxxxx/1/xxxxxxxxxxxxxxxxx

DLP does not show this “Shared Link” anywhere so it is hard for the DLP incident reviewer to view in Box.

In the Enforce console, the incident only shows the private link.
The private link is displayed in these two fields:
Sharing URL - In the "File Information (DAR Only)" field.
HTTP URL - In the "Site/Application Details" field.

Environment

Release: 15.x, 16

Resolution

A Feature Request has been submitted asking if the DLP incident "Sharing URL" can be changed to display the CloudSOC "Shared Link".
Or if the CloudSOC "Shared Link" can be added to a new field in the DLP incident.

If you would like this feature, open a support case and ask the Support Engineer to add your company to the existing FR.