To apply inline policies based on user activity such as uploads or posts, in cloud apps that create or shares content, follows the steps as shown below:
- Navigate to Policies > Real time Protection > New Policy > Cloud App access.
- Under ‘Source’ section, select Users/User groups or Organizational Unit. Options selected here will apply in the policy being created.
- Under ‘Source’ section, select ‘ADD CRITERIA’ drop down option.
- Select ‘Access method’ option and select the required source of traffic and proxy type (forward, reverse).
- To apply policies based on cloud apps that create or share content, navigate to ‘Destination’ section of the policy creation template, and select the ‘Category’’ option. Select categories such as Cloud storage, Collaboration for creation and sharing of content.
- In the ‘Activities and Constraints’ section where activities that have to act as constraints can be placed in the policy.
- Under ‘Profiles & Action’ section in the policy creation template, select the desired action to be taken.
- To view the alerts generated by the policy created, navigate to Skope IT > Alerts. Select the policy created in the filter. The results displayed can be exported and analyzed offline with the Export button. Ensure that ‘Username’ field is selected in the list of fields displayed or exported.
To learn more: Real-time Protection Policies