Modifying restored canvas file does not trigger DLP violation

Products

• CASB Securlet SAAS
• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard

Issue/Introduction

You notice that the restored Slack Canvas file is not triggering new DLP violation after modifying it.

Cause

This is expected behaviour because once the file is restored by the DLP admin, it is assumed that the file is a false positive. To avoid the file keeps triggering the same policy and gets quarantined again, the file is exempted from the DLP scan. 

Resolution

This behaviour can be changed in the backend. If you wish to enable the rescan for the restored Canvas file, please create a support ticket.