Citrix ShareFile: Configuring the Data Protection API Connector

Placeholder article - do not delete

Overview

The Data Protection API provides out-of-band visibility and control for sanctioned cloud apps. To provide Data Protection with access to an app, you need to set up an integration with the required application. For more information, see What is the Data Protection API?.

To configure the Data Protection API integration, you need to:

Configure the integration within the SaaS application
Create the API connector in the CMA

A SaaS Security API license is required.

Configuring the ShareFile Integration

In your ShareFile account, identify the Client ID and Client Secret.

Step 1: Configure the Integration in your ShareFile Account

To configure the ShareFile integration:

Log in to your ShareFile account (https://api.sharefile.com/).
Click Get an API Key / Request OAuth Key.
Add the following details:
- Application Name: Choose a name
- Application Description: Add a description
- Redirect URI: https://cc.catonetworks.com/redirect/cas/appconnector/callback
- Contact / Company: Add your contact details
Click Generate API Key.
Copy and save the Client ID and Client Secret so they can be entered into the CMA.

Step 2: Create the API Connector in the CMA

After you have set up an integration with the required application, add the details in the CMA.

To create the API connector in the CMA:

From the navigation menu, click Resources > Integrations.
Click the Configured Integrations tab.
Click New.

The New Integration panel opens.
Select the SaaS Application you want to add.
In the Capability drop down select Data And Threat Protection.
Add the details created during step one.
Click Save.
The app is visible on the Integrated Apps table with a Connected status.

Adding ShareFile Rules to the Data Protection Policy

The Data Protection policy can monitor and manage the files and folders that your users upload with ShareFile.

Understanding ShareFile Actions

When you create a Data Protection rule, you can define different actions to monitor or remediate the policy violations when the rule is matched. Each action automatically generates an event, and you can also choose to receive an email notification. For more about Data Protection API events, see Analyzing Data Protection API Events.

These are the actions you can set for the Data Protection engine to perform when a rule is matched:

Monitor: Detects and logs matching activity without enforcing any change, providing visibility for auditing and analysis.
Remove Share: Automatically revokes sharing links or access to prevent external or unauthorized file access

Configuring ShareFile Rules

Use the Data Protection page to add the SaaS application rules in your Data Protection policy.

Create a Data Protection rule to define the traffic that is scanned by Data Protection API. Create separate rules for each SaaS app connector, and then define the criteria which determines which traffic is scanned.

To configure rules:

From the navigation pane, select Security > App & Data API Protection and select or expand Data Protection.
Click New. The New Rule panel opens.
In Application Connector, select the ShareFile app.
Configure the required settings for the rule (see below for more information).
Select an Action.
(Optional) Define the tracking options for the rules to generate email notifications.

For more information about events and email notifications, see Account Level Alerts and System Notifications.
Click Save. The rule is added to the Data Protection policy.

Analyzing Data Protection API Events

The Home > Events page shows all the Data Protection API events for your account. The powerful search tools let you drill-down and identify the few events that contain the relevant data that you need.

Data Protection API events can be identified by the following fields:

Event Type - Security
Sub-Type - SaaS Security API Data Protection

You can learn more about using the Events page here.

Explaining the Data Protection API Events Fields

Field Name	Description
Connector Name	Name for the connector that is defined for the rule
Connector Type	SaaS app that is defined for this connector
DLP Profile	DLP Content Profile that generated this event
File Name	Name of the attached file
File Size	Size of the attached file
File Type	File type for the attached file
Matched Data Types	Data Types in the Content Profile that matched the rule
Collaborators	Email addresses of the users that received the file
Rule	Name of the rule in the Data Protection policy
Owner	File owner
Severity	Severity defined for the rule
Sharing Scope	Sharing Options for the Dropbox attachment