Secure Internet and SaaS Access (ZIA)
Configuring the Data at Rest Scanning Malware detection Policy Exceptions
Optionally, you can configure the SaaS Security Data at Rest Scanning Malware Detection policy exceptions for sanctioned SaaS applications.
For example, you can create an exception for your organization’s CEO if you don’t want to inspect the emails your CEO receives. If your organization has a security research group maintaining a malicious files repository that must be exempt from inspection, you can also create an exception for the group.
To configure Malware Detection policy exceptions:
- Go to Policy > SaaS Security > Data at Rest Scanning.
- Click Malware Detection.
- In the Malware Detection tab, choose one of the following SaaS application types from the drop-down menu:
- Collaboration
To create exceptions for collaboration applications:
- Click the Exceptions tab.
- Under Do Not Inspect Content From Any of the Following:
- Senders: Select the users you want to exempt from inspection. You can search for users or click the Add icon to add a new user.
- Groups: Select the groups you want to exempt from inspection. You can search for groups or click the Add icon to add a new group.
- Departments: Select the departments you want to exempt from inspection. You can search for departments or click the Add icon to add a new department.
- Click Save and activate the change.
- CRM
To create exceptions for CRM applications:
- Click the Exceptions tab.
- Under Do Not Inspect Content From Any of the Following:
- Owners: Select the users you want to exempt from inspection. You can search for users or click the Add icon to add a new user.
- Groups: Select the groups you want to exempt from inspection. You can search for groups or click the Add icon to add a new group.
- Departments: Select the departments you want to exempt from inspection. You can search for departments or click the Add icon to add a new department.
- Click Save and activate the change.
- Email
To create exceptions for email applications:
- Click the Exceptions tab.
- Under Do Not Inspect Content From Any of the Following:
- Senders: Select the users you want to exempt from inspection. You can search for users or click the Add icon to add a new user.
- Groups: Select the groups you want to exempt from inspection. You can search for groups or click the Add icon to add a new group.
- Departments: Select the departments you want to exempt from inspection. You can search for departments or click the Add icon to add a new department.
- Click Save and activate the change.
- File Sharing
To create exceptions for file sharing applications:
- Click the Exceptions tab.
- Under Do Not Inspect Content From Any of the Following:
- Owners: Select the users you want to exempt from inspection. You can search for users or click the Add icon to add a new user.
- Groups: Select the groups you want to exempt from inspection. You can search for groups or click the Add icon to add a new group.
- Departments: Select the departments you want to exempt from inspection. You can search for departments or click the Add icon to add a new department.
- Click Save and activate the change.
- ITSM
To create exceptions for ITSM applications:
- Click the Exceptions tab.
- Under Do Not Inspect Content From Any of the Following:
- Owners: Select the users you want to exempt from inspection. You can search for users or click the Add icon to add a new user.
- Groups: Select the groups you want to exempt from inspection. You can search for groups or click the Add icon to add a new group.
- Departments: Select the departments you want to exempt from inspection. You can search for departments or click the Add icon to add a new department.
- Click Save and activate the change.
- Source Code Repository
To create exceptions for source code repository applications:
- Click the Exceptions tab.
- Under Do Not Inspect Content From Any of the Following:
- Editors: Select the users you want to exempt from inspection. You can search for users or click the Add icon to add a new user.
- Groups: Select the groups you want to exempt from inspection. You can search for groups or click the Add icon to add a new group.
- Departments: Select the departments you want to exempt from inspection. You can search for departments or click the Add icon to add a new department.
- Click Save and activate the change.
- Collaboration