Create Data Security Policy Example

In this example, a data security policy will be created for monitoring for any malicious file containing malware or virus. Alert notification will be sent to the FortiCASB user, file owner, and FortiAnalyzer.

1. Go to Data Protection > Policies > Scan Policies.
2. Click +Add New to add new data security policy.
3. In Data Security Policy Name, name the policy as "AV and Malware Monitor"



4. Click Enabled toggle switch button to enable the policy.
5. In Match Criteria section, click Files Added Within drop down menu, select "Time Frame: All Time".



6. In File Types, click Select All.



7. In Access Permissions, click Select All
8. In File Activity Triggers, click Select All
9. In SaaS Applications, click Select All.



10. In DLP Pattern, only enable all Malware type DLP patterns and disable the rest.



11. In Action section, turn on Quarantine Files to quarantine malwares if detected.
12. In Send Email Notification, turn on FortiCASB Users, and enter a user below to be notified.



13. Turn on Notify File Owners alert and edit the notification contents.



14. Turn on Send Alerts to FortiAnalyzer to send alerts to FortiAnalyzer.
15. Click Add New Data Security Policy to finish.