Skip to content

Commit 12c6b6c

Browse files
authored
[Gateway] Sandboxing test policy (#18700)
1 parent 5535b4c commit 12c6b6c

File tree

2 files changed

+19
-1
lines changed

2 files changed

+19
-1
lines changed

src/content/changelogs/casb.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ entries:
1212
- publish_date: "2024-06-03"
1313
title: Atlassian Bitbucket integration
1414
description: |-
15-
You can now scan their Bitbucket Cloud workspaces for a variety of contextualized security issues such as source code exposure, admin misconfigurations, and more.
15+
You can now scan your Bitbucket Cloud workspaces for a variety of contextualized security issues such as source code exposure, admin misconfigurations, and more.
1616
- publish_date: "2024-05-23"
1717
title: Data-at-rest DLP for Box and Dropbox
1818
description: |-

src/content/docs/cloudflare-one/policies/gateway/http-policies/file-sandboxing.mdx

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,24 @@ To begin quarantining downloaded files, turn on file sandboxing:
5555

5656
You can now create [Quarantine HTTP policies](/cloudflare-one/policies/gateway/http-policies/#quarantine) to determine what files to scan in the sandbox.
5757

58+
## Create test policy
59+
60+
To test if file sandboxing is working, you can create a Quarantine policy that matches the [Cloudflare Sandbox Test](https://sandbox.cloudflaredemos.com/):
61+
62+
1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Gateway** > **Firewall policies**, then select **HTTP**.
63+
2. Select **Add a policy**.
64+
3. Add the following expression:
65+
66+
| Selector | Operator | Value | Action |
67+
| -------- | -------- | ----------------------------- | ---------- |
68+
| Host | is | `sandbox.cloudflaredemos.com` | Quarantine |
69+
70+
4. In **Sandbox file types**, select _ZIP Archive (zip)_.
71+
5. From a device [connected to your Zero Trust organization](/cloudflare-one/connections/connect-devices/), open a browser and go to the [Cloudflare Sandbox Test](https://sandbox.cloudflaredemos.com/).
72+
6. Select **Download Test File**.
73+
74+
Gateway will quarantine and scan the file, display an interstitial status page in the browser, then release the file for download.
75+
5876
## Compatibility
5977

6078
### Supported file types

0 commit comments

Comments
 (0)