>
    Examples of User Activity Policies
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. Manage Policy for Sanctioned SaaS Apps in Data Security
    4. User Activity Policies
    5. Examples of User Activity Policies
    Download PDF
    SaaS Security

    Examples of User Activity Policies

    Table of Contents

    Examples of User Activity Policies

    Examples of user activity policies on Data Security.
    The following are some examples of how to configure user activity rules.
    Objective
    Criteria
    Value
    Send an alert if any user downloads more than 500 files in a day.
    Activity
    Count or Frequency
    Target Type
    Action
    Download
    500, 1 day
    File
    Send Admin Alert
    Send an alert for failed logins on Salesforce.
    Activity
    Cloud Apps
    Action
    Failed Login
    Salesforce
    Send Admin Alert
    Log any activity from a malicious IP address.
    Activity
    IP Address
    Action
    Any Activity
    127.31.52.12
    Log only
    Send an alert if a user outside of paloaltonetworks.com uploads an executable file.
    Activity
    Domain
    Target Name
    Target Type
    Action
    Upload
    Any Domain Except paloaltonetworks.com
    *.exe
    File
    Send Admin Alert
    Log an activity when users change their passwords.
    Activity
    Target Type
    Action
    Edit
    Password
    Log only

    © 2025 Palo Alto Networks, Inc. All rights reserved.