List view
Quick Start
Quick Start
User Guide
User Guide
Policies & GuardRails
Policies & GuardRails
Witness Anywhere: Remote Device Security
Witness Anywhere: Remote Device Security
Witness Attack
Witness Attack
Administrator Guide
Administrator Guide
File Attachments
Note: In order for scanned attachments to be blocked for an AI App, there must be a Policy with the Data Protection guardrail enabled, the Inspect Attachments checkbox checked, the AI App included as a Destination, and a Guardrail Action of Block. Read below for details.
File Attachments Configuration
To view and configure the ABP, Navigate to the Policy Console, and click on the Attachment Block Policy row.
At the top of the ABP console is a list of AI Applications, that can be individually configured to block or allow attachments.
When attachments are allowed for an individual application, the files will be scanned for content in violation of your Data Protection Guardrails. GuardRail Actions can be chosen to block or allow file attachments that match your GuardRail settings.
File attachments for all apps are allowed by default. This is displayed at the bottom of the ABP console labeled “For all other applications:”. Currently you can not configure ABP to block all applications.
Blocking File Attachments With Policies
Note: When the Inspect Attachments feature is enabled in the Data Protection GuardRail, the Warn and Route GuardRail Actions do not function, and Warn messages are not displayed in the AI Application. Block and None are the only valid and functional GuardRail Actions in the initial release.
In order for scanned attachments to be blocked for an AI App, there must be a Policy with the Data Protection guardrail enabled, the Inspect Attachments checkbox checked, the AI App included as a Destination, and a Guardrail Action of Block. See the File Attachments documentation for details.
After attachments are scanned, prompts continue to be processed by the rest of your Policies.
File Attachments In Conversations
The Conversation Details slide-out sidebar displays information on files processed. Files less than 100MB are supported. Larger files and files containing malware are blocked.
Responses from applications containing files are not scanned or blocked, allowing users to save them as needed.
File Attachments In Alerts
Blocked attachments will generate alerts in the Alerts console. Alerts with blocked file attachments will display the text “Confirm File Upload” in the Intent column.
The sidebar displays the details of the alert.
File Attachments Supported
Currently all text-based files can be scanned. For example, all files that can be opened and read with a text editor. Examples include:
- Plain Text:
.txt,.log,.eml
- Source Code:
.c,.cpp,.java,.js,.html,.css,.pyetc...
- Markup and Data:
.xml,.json,.csv,.tsv
- Documents:
.rtf,.docx,.md(Markdown)
- Configuration:
.ini,.cfg,.rc,.reg
- Other:
.sh(shell scripts),.ps(PostScript)
- MS Office:
.docx.pptx.xlsx
- PDFs