Restrict file types for downloads and uploads in isolation profiles to enforce
granular data loss prevention policies and control which file types users can transfer in
isolation.
Previously, Remote Browser Isolation (RBI) limited administrators to allowing or
blocking all downloads or all uploads during isolation, regardless of file type.
This lack of flexibility forced administrators to choose between allowing all file
transfers, which could lead to security issues, or blocking all file transfers,
which could result in usability issues and user dissatisfaction.
You can now use isolation profiles in RBI to
specify the types of files users can upload or
download, enabling more granular control over data transfers during
isolated browsing sessions. The new capability helps to enhance the security posture
by reducing the attack surface and preventing various types of cybersecurity
threats. It also helps in data exfiltration by controlling which categories of file
types a user is able to upload.
Key use cases include permitting users to download only document files, blocking
downloads of executable files, or permitting transfers of only specific approved
file types. The granular controls enable you to balance security and usability by
tailoring allowed file types to your organization's needs. Configuring file type
filtering enhances your data loss prevention capabilities and provides an additional
layer of protection against potential threats introduced through file transfers.