Salesforce Policy Incidents
The Policy Incidents page is a central repository of all incidents that have violated Policies. All Services are consolidated on this page, or you can choose to view the violations occurring in just Salesforce Service. When you upload files to Salesforce as an attachment, then the Skyhigh CASB DLP Policy scans the uploaded files for malware.
If malware is detected, Skyhigh CASB generates an incident. If an email notification is configured, then you receive a malware alert email. You can see the details of the malware in the email.
You can upload more than one file for each service request. To identify the malware in the files, you need to configure the Item ID in Skyhigh CASB. The Item ID is the File ID in Salesforce and it identifies a specific file uploaded in Salesforce.
Find the page at Incidents > Policy Incidents. For generic information, see Policy Incidents Page.
Configure Item ID in Skyhigh CASB
To view the attachments in Salesforce, configure the Item ID in Skyhigh CASB:
- Go to Incidents > Policy Incidents.
- Under Service Name, select the Salesforce.
- Under Actions > Settings, click Edit Table Columns.
- Select the Item Id and click Save Table Settings.
- The Item Id column is added to the Policy Incident table.
- To view the required file or attachment in Salesforce, copy the Item Id and paste into the browser after the Salesforce URL. Construct the URL as shown:
https://<Salesforce URL> 00P0o00002E6Ui7EAF
To view Salesforce attachments:
- Click the incident in the table to see the Cloud Card for details.
Here, Path refers to the parent object. Using the parent object, you can view the Salesforce attachments.
- Copy the Path and paste into the browser after the Salesforce URL. Construct the URL as shown:
https://<Salesforce URL> 0010o00002kZ0msAAC.
- To view attachments under the parent object, go to Notes & Attachments.
Configure Item ID in Email Template
To receive malware details through email notification, configure the Item ID in the Email Template:
- Go to Policy > Policy Settings > Email Templates.
- Select the Category as Data Loss Prevention and Type as Send Email Notification To and click the Email Notification from the table.
- Under Variables, select Item ID.
- Under Email Body, enter the text of the body to configure the email notification and use the formatting tools to style the text as shown.
NOTE: You may also click Restore Default to remove your changes.
- Click Save.
Now, the malware details are shared as an email notification in the configured format.