Box securlet response actions mapped to DLP response actions

Products

• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS
• Data Loss Prevention
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Detection Service

Issue/Introduction

Box securlet response actions mapped to DLP response actions.

Resolution

Box	Enforce Payloads	CASB Remediation	DLP Remediation
Remediation Supported	breaklinks/unshare	File Access - Remove shared link	Remove Shared Links in Data-at-Rest
Type of Exposures		public, internal,external
Remediation Supported	share_expire	File Access - Set link expiration	Not supported
Type of Exposures		public, internal,external
Remediation Supported	quarantine	Preserve content - Copy	Not supported
Type of Exposures		public, internal, external, unexposed
Remediation Supported	quarantine	Preserve content - Move	Quarantine Data-at-Rest (Without marker File)
Type of Exposures		public, internal, external, unexposed
Remediation Supported	quarantine	Preserve content - Move with Tombstone	Quarantine Data-at-Rest (With marker File)
Type of Exposures		public, internal, external, unexposed
Remediation Supported	file_access_internal_edit	File Access - Update File Permission - Anyone with the Link	Set File Access to 'Internal Edit'
Type of Exposures		internal, external, public
Remediation Supported	file_access_all_read	Not supported	Set File Access to 'All Read'
Type of Exposures		internal
Remediation Supported	file_access_internal_read	Not supported	Set File Access to 'Internal Read'
Type of Exposures		internal
Remediation Supported	collab_access_read	Collaborator Access - Update Collaborator role - Viewer	Set Collaborator Access to 'Read'
Type of Exposures		external
Remediation Supported	collab_access_edit	Collaborator Access - Update Collaborator role - Editor	Set Collaborator Access to 'Edit'
Type of Exposures		external
Remediation Supported	collab_access_remove	Collaborator Access - Remove external collaborator	Remove Collaborator Access
Type of Exposures		external
Remediation Supported	Selective_collab_access_remove	Collab_remove(selective)-manual remediation	selective_collab_access_remove - Custom payload
Type of Exposures		external
Remediation Supported	restore	Restore -manual remediation	restore_file (smart response rule)
Type of Exposures

 

Enforce Response Rule (DAR) that are not supported for Box in Enforce or, CASB

Prevent download, copy, print

Delete Data-at-Rest

Encrypt Data-at-Rest

Perform DRM on Data-at-Rest

Tag Data-at-Rest

Custom Action on Data-at-Rest

Set File Access to 'All Read'

Set File Access to 'Internal Read'