File shared externally triggers multiple times

Products

• CASB Gateway Advanced
• CASB Advanced Threat Protection
• CASB Audit
• CASB Gateway
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS

Issue/Introduction

Files shared at the folder level can re-trigger without a user re-sharing the file.

Resolution

File collaboration can be updated from the parent folder. After the file rights are updated the file can trigger when re-scanned. This could cause confusion as the last action may not be the sharing of the file.

Response actions can remove collaboration at the file level but not the parent folder level. The scenario could cause the policy to trigger again because the folder has the permission.

Consider if the SaaS has the ability to block end users from adding collaborators to folders or consider a different response such as Quarantine.