How I can quarantine downloading files from File Sharing Sites

Hi All,
In my Cloud SandBox, I have set the “quarantine” at the First-time Action when I download the MS Office files,but they are not seem to quarantined when I download the files from only File sharing sites like Google Drive.
In the Web Insights log, it says “Allowed - No Active Content”. How can I quarantine these?

Hi Chou,

The “Allowed - No Active Content” you see in the logs means that the engine running before the Sandbox has concluded the file did not have sufficient active content to be malicious. And decide that sandboxing for this file is not needed.

If you have suspicion that this file really is malicious and want to force in through the Sandbox, you can use the Sandbox API.

https://help.zscaler.com/zia/api#/Cloud%20Sandbox%20Submission/submitFile

Regards,
Michiel

1 Like