Skip to content

Commit 5cce55f

Browse files
committed
Add Mermaid chart
1 parent ceb5ccc commit 5cce55f

File tree

1 file changed

+26
-0
lines changed

1 file changed

+26
-0
lines changed

src/content/docs/cloudflare-one/policies/gateway/http-policies/file-sandboxing.mdx

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,32 @@ In addition to [anti-virus (AV) scanning](/cloudflare-one/policies/gateway/http-
1515

1616
When your users download a file, Gateway will first scan the file with AV scanning. If AV scanning detects malware, Gateway will block the download and log the result. If AV scanning does not detect malware, Gateway will send the file to the sandbox. While in the sandbox, Gateway will monitor the inputs and outputs of the file. While the files are quarantined, Gateway will present a scanning page to your users. If a file passes scanning, Gateway will release the file from quarantine and download it to your user's device. If the file contains malware, Gateway will block the request and log the match as a Block decision in your [HTTP logs](/cloudflare-one/insights/logs/gateway-logs/#http-logs).
1717

18+
```mermaid
19+
flowchart TD
20+
A(["User starts file download"]) --> B["File sent to AV scanner"]
21+
B --> C["Malicious file detected?"]
22+
C -- Yes --> D["Download blocked"]
23+
C -- No --> G["File sent to sandbox"]
24+
G --> n1["First time file appears?"]
25+
K["Malicious activity detected?"] -- Yes --> N["Download blocked"]
26+
K -- No --> n3["Download allowed"]
27+
n1 -- Yes --> n2["Interstitial page displayed for user during scan"]
28+
n2 --> K
29+
n1 -- No --> K
30+
31+
B@{ shape: subproc}
32+
C@{ shape: diam}
33+
D@{ shape: terminal}
34+
n1@{ shape: diam}
35+
K@{ shape: diam}
36+
N@{ shape: terminal}
37+
n3@{ shape: terminal}
38+
n2@{ shape: display}
39+
style D stroke:#D50000
40+
style N stroke:#D50000
41+
style n3 stroke:#00C853
42+
```
43+
1844
## Get started
1945

2046
To begin quarantining downloaded files, turn on file sandboxing:

0 commit comments

Comments
 (0)