Enable Cloud Malware Protection for Dropbox Tenants

Umbrella supports Cloud Malware protection for all files within your Dropbox deployment, including those in Dropbox teams folders.

Table of Contents

• Prerequisites
• Limitations
• Authorize a Tenant
• Edit a Tenant
• Revoke Authorization

Prerequisites

• You must have an active Dropbox tenant and the person doing the installation must be a Dropbox Team Admin
• Chrome or Firefox (recommended) with pop-up blockers and ad blockers disabled (only for the duration of authorization)

Limitations

• A tenant that fails to authenticate cannot be deleted.
• Umbrella attempts to quarantine a file will fail if that file has been locked from the Dropbox application. This may occur if Dropbox has detected malware in the file. In such a case, the lock placed by Dropbox takes precedence over Umbrella’s ability to detect or remediate DLP violations or malware.

Authorize a Tenant

1. Navigate to Admin > Authentication.
2. In the Platforms section, click Dropbox.
3. In the Cloud Malware section, click Authorize New Tenant to add a Dropbox tenant to your Umbrella environment.

4. In the Dropbox Authorization dialog box, check the checkbox to verify you meet the prerequisite and then click Next.

5. Enter the tenant name and then click Next.

6. Select a Response Action for Umbrella to automatically apply to Dropbox files found with malware and then click Next.

• Choose Monitor to cause Umbrella to log files detected with malware. You will be able to manually quarantine these files from the Cloud Malware report.
• Choose Quarantine to:

• Move the file into a folder named Cisco_Quarantine_Malware in the root path of the admin who authorized the tenant, remove all collaborators, and change the file owner to the Dropbox admin.
• Replace the file in its original location with a text file named filename.ppt_Cisco_Quarantined.txt explaining to the original file owner that the file is identified as malware and for more information to contact their organization administrator.

7. Click Next to be redirected to the Dropbox's login page.

8. Log in to Dropbox with admin credentials to grant access.

You are redirected to Umbrella and a message appears showing the integration was successful. It may be up to 24 hours for the integration to be confirmed and appear as Authorized.

9. Click Done to complete.

Edit a Tenant

You can change the Response Action you have selected for a tenant.

1. Navigate to Admin > Authentication.
2. In the Platforms section, click Dropbox.
3. In the Cloud Malware section , for Action, click Edit. You can edit any tenant.

4. Select a Response Action for Umbrella to automatically apply to Dropbox files found with malware and then click Next.

   • Choose Monitor to cause Umbrella to log files detected with malware. You will be able to manually quarantine these files from the Cloud Malware report.
   • Choose Quarantine to:

   • Move the file into a folder named Cisco_Quarantine_Malware in the root path of the admin who authorized the tenant, remove all collaborators, and change the file owner to the Dropbox admin.
   • Replace the file in its original location with a text file named filename.ppt_Cisco_Quarantined.txt explaining to the original file owner that the file is identified as malware and for more information to contact their organization administrator.

5. Click Next to complete.

6. The new Response Action is displayed.

Revoke Authorization

1. Navigate to Admin > Authentication.
2. In the Platforms section, click Dropbox.
3. For Action, click Revoke. You can revoke any authorized tenant.

4. Confirm to proceed. The selected account will no longer be authorized.

---

Enable Cloud Malware Protection for Box Tenants < Enable Cloud Malware Protection for Dropbox > Enable Cloud Malware Protection for Google Drive Tenants