Enable Cloud Malware Protection for Dropbox Tenants

Umbrella supports Cloud Malware protection for all files within your Dropbox deployment, including those in Dropbox teams folders.

Table of Contents

• Prerequisites
• Limitations
• Authorize a Tenant
• Edit a Tenant
• Revoke Authorization

Prerequisites

• You must have an active Dropbox tenant and the person doing the installation must be a Dropbox Team Admin
• Chrome or Firefox (recommended) with pop-up blockers and ad blockers disabled (only for the duration of
  authorization)

Limitations

• A tenant that fails to authenticate cannot be deleted.

Authorize a Tenant

1. Navigate to Admin > Authentication.
2. Under Platforms, click Dropbox.
3. Under the Cloud Malware section, click Authorize New Tenant to add a Dropbox tenant to your Umbrella environment.

4. In the Dropbox Authorization dialog box, check the checkbox to verify you meet the prerequisite, then click Next.

5. Enter the tenant name, then click Next.

6. Select a Response Action for Umbrella to automatically apply to Dropbox files found with malware, then click Next.

• Choose Monitor to cause Umbrella to log files detected with malware. You will be able to manually quarantine these files from the Cloud Malware report.
• Choose Quarantine to:

• Move the file into a folder named Cisco_Quarantine_Malware in the root path of the admin who authorized the tenant, remove all collaborators, and change the file owner to the Dropbox admin.
• Replace the file in its original location with a text file named filename.ppt_Cisco_Quarantined.txt explaining to the original file owner that the file is identified as malware and for more information to contact their organization administrator.

7. Click Next to be redirected to the Dropbox's login page.

8. Log in to Dropbox with admin credentials to grant access.

You are redirected to Umbrella and a message appears showing the integration was successful. It may be up to 24 hours for the integration to be confirmed and appear as Authorized.

9. Click Done to complete.

Edit a Tenant

You can change the Response Action you have selected for a tenant.

1. Navigate to Admin > Authentication.
2. Under Platforms, click Dropbox.
3. In the Cloud Malware section , under Action, click Edit. You can edit any tenant.

4. Select a Response Action for Umbrella to automatically apply to Dropbox files found with malware, then click Next.

   • Choose Monitor to cause Umbrella to log files detected with malware. You will be able to manually quarantine these files from the Cloud Malware report.
   • Choose Quarantine to:

   • Move the file into a folder named Cisco_Quarantine_Malware in the root path of the admin who authorized the tenant, remove all collaborators, and change the file owner to the Dropbox admin.
   • Replace the file in its original location with a text file named filename.ppt_Cisco_Quarantined.txt explaining to the original file owner that the file is identified as malware and for more information to contact their organization administrator.

5. Click Next to complete.

6. The new Response Action is displayed.

Revoke Authorization

1. Navigate to Admin > Authentication.
2. Under Platforms, click Dropbox.
3. Under Action, click Revoke. You can revoke any authorized tenant.

4. Confirm to proceed. The selected account will no longer be authorized.

---

Revoke Authorization for a Platform < Enable Cloud Malware Protection for Dropbox > Enable Cloud Malware Protection for Box Tenants