Skip to content

[Gateway] Sandboxing test policy #18700

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 6 commits into from
Dec 12, 2024
Merged

[Gateway] Sandboxing test policy #18700

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
ad01af8
Add test site procedure
maxvp Dec 11, 2024
2ffc1cd
Rename section
maxvp Dec 11, 2024
bcf78dc
Fix changelog typo
maxvp Dec 11, 2024
02d5203
Merge branch 'production' into max/gw/sandbox-demo
maxvp Dec 11, 2024
7ea335c
Update file-sandboxing.mdx
maxvp Dec 12, 2024
978ff9d
Merge branch 'production' into max/gw/sandbox-demo
maxvp Dec 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/content/changelogs/casb.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ entries:
- publish_date: "2024-06-03"
title: Atlassian Bitbucket integration
description: |-
You can now scan their Bitbucket Cloud workspaces for a variety of contextualized security issues such as source code exposure, admin misconfigurations, and more.
You can now scan your Bitbucket Cloud workspaces for a variety of contextualized security issues such as source code exposure, admin misconfigurations, and more.
- publish_date: "2024-05-23"
title: Data-at-rest DLP for Box and Dropbox
description: |-
Expand Down
18 changes: 18 additions & 0 deletions src/content/docs/cloudflare-one/policies/gateway/http-policies/file-sandboxing.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,24 @@ To begin quarantining downloaded files, turn on file sandboxing:

You can now create [Quarantine HTTP policies](/cloudflare-one/policies/gateway/http-policies/#quarantine) to determine what files to scan in the sandbox.

## Create test policy

To test if file sandboxing is working, you can create a Quarantine policy that matches the [Cloudflare Sandbox Test](https://sandbox.cloudflaredemos.com/):

1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Gateway** > **Firewall policies**, then select **HTTP**.
2. Select **Add a policy**.
3. Add the following expression:

| Selector | Operator | Value | Action |
| -------- | -------- | ----------------------------- | ---------- |
| Host | is | `sandbox.cloudflaredemos.com` | Quarantine |

4. In **Sandbox file types**, select _ZIP Archive (zip)_.
5. From a device [connected to your Zero Trust organization](/cloudflare-one/connections/connect-devices/), open a browser and go to the [Cloudflare Sandbox Test](https://sandbox.cloudflaredemos.com/).
6. Select **Download Test File**.

Gateway will quarantine and scan the file, display an interstitial status page in the browser, then release the file for download.

## Compatibility

### Supported file types
Expand Down
Loading