Page tree
Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 4 Next »

Beginning with version 20.2, FileCloud supports integration with McAfee CASB.

This enables you to use McAfee CASB's to apply extensive DLP rules to monitor user events in FileCloud such as uploading, updating, and downloading files, sharing files and folders, and logging in for potential security issues. If a CASB DLP rule is violated, McAfee takes steps such as informing the user, deleting or quarantining a file or folder, or deleting a shared link.

For example, you could set up McAfee CASB to monitor the content files when they are shared in a public FileCloud folder, and if the keyword confidential is found, to movs the file to a quarantine folder and send an email informing the admin.

To enable McAfee CASB:

  1. Open the configuration file:
    Windows: XAMPP DIRECTORY/htdocs/config/cloudconfig.php
    Linux: /var/www/config/cloudconfig.php
  2. Add the lines:

    define("TONIDOCLOUD_CASB_ENABLE", true); 
    define("TONIDOCLOUD_REMOTE_CASB_AUTHKEY", "7cCtfh8IsnOyJQpWJG6XYjiMZhCEdrnC");
    
    For better security, change TONIDOCLOUD_REMOTE_CASB_AUTHKEY to any alphanumeric string.

To receive information about events, McAfee registers a webhook with FileCloud, which enabes FileCloud to push information about events as they occur to McAfee CASB.

FileCloud's pushes information to McAfee a user performs one of the following actions:

  • adds a file
  • updates a file
  • adds an external file
  • downloads a file
  • logs in successfully
  • creates a share
  • creates an account
  • deletes an account

McAfee responds to events that may compromise security using FileCloud's API. FileCloud's API includes the following endpoints:

  • register
  • deregister
  • getwebhook
  • downloadfile
  • upload
  • deletefile
  • getshareinformation
  • removeuserfromshare
  • removegroupfromshare
  • deleteshare
  • getuserinformation

For more information about using these APIs, see the API documentation at xxxxx (or does each action get a separate link?)

  • No labels