Help shape the future of Box
Welcome to Box Pulse, our product feedback tool powered by UserVoice. Got an idea for how to improve Box? Share it with us and gather support or vote on other people's ideas. Your feedback is essential to informing roadmap decisions and shaping the future of our products. Thanks for joining our community!
See user guide here.
264 results found
-
IP Whitelisting
Please find our use case below for your better understanding and let us know how Box can support our requirements.
We are working with multiple clients, and our primary focus is data handling, especially PII data. Currently, we have a centralized storage system (File Server) to store client data files and folders, which are accessible by both internal users and clients, based on the access permissions we provide.
We are now planning to create Box accounts for each client, store the data there, and grant access to files/folders for our internal users as external collaborators. In this setup, the Box…
1 vote -
Require comments when changing classification labels and keep history
Require comments when changing classification labels and keep history
Currently Box Shield does not allow the reason or history to be kept when changing.
We would like to see a comment input field added to the UI when making changes, and also made mandatory in the administrator settings.If it is a file, we would like to leave the comment entered in the comment (activity) field of the file so that the end user can check the history.
For folders, we would like to leave them as undeletable txt files, etc.Such a feature would allow all users above the…
1 vote -
VS Exposure-type Ransomware
Suggestion.
Box Shield classification labels should be able to prohibit downloading via Box desktop (BoxDrive) or via linked apps, even if you are the co-owner or owner.Background Threat.
Currently, the mainstream of ransomware worldwide is not of the encryption type, but of the exposure-type or dual-threat-type.
Version control functions are not effective against exposure-type and dual-threat ransomware.
An effective countermeasure against this type of ransomware is to prohibit the downloading of confidential files that should not be disclosed on the dark web.Issue to solve.
Box Shield's no-download access policy and access policy restricting linked apps do not target…1 vote -
Box Classification Settings: provide ability to restrict modifications to Admins and Co-Admins
Currently, Box Classification configuration allows you to restrict classification modifications to Owner, Co-Owner, Editor, and Viewer Uploader. We would like to add Admin and Co-Admin to this list. Thank you!
1 vote -
Shield Classification UI option should gray out when user does not have permissions to update classification
If the user does not have access to classify content, they should not get this option to change the classification in shield.
1 vote -
Information Barriers Segment Report
Add an Admin Console report that can easily show which users are within Information Barrier segments. or add information barriers to the current User Details report. The current User Details report does not pull any values from the Information Barriers segments.
1 vote -
Update Shield Access Policy Restriction for Box Sign
For the Box Sign Request Restriction, add the option allow a signature request, but require additional security controls (e.g., signer authentication, password) for the signature request.
We need the ability to send sensitive content for signature but don't want it sent using a public link.
1 vote -
Allow Shield Location Rule Restriction By Folder
Currently Shield's Location Restriction rule is applied to the entire EID by user/groups. It would be helpful to be able to set this up by specific folder(s) or folder structure.
Ex. Team A is not allowed to view specific content while in Location X, however Team B is able to. Currently the restriction would be set on the EID level and both teams would be under this restriction.
We could exclude group B or other groups from the rule however Group A would still be restricted from accessing other content within the EID.
1 vote -
Additional info in Anomalous Download Shield e-mail notifications
It would be very helpful to see "Previous weekly download amount", "anomalous download amount" and the "delta" on Anomalous download e-mail notifications. We use these to identify notifications that require further investigation, but these are only available by clicking into the reports which make this kind of detection difficult to scale and manage.
1 vote -
Allow groups to be specified as 'notified to' in Box Shield Threat Detection Rules
Only user accounts can be specified for the 'Notification Destination' of the Threat Detection rules in Box Shield.
Since maintenance is required when the person in charge changes, it should be possible to specify a group.■In Japanese：
Box shieldに存在する検出ルールの「通知の送信先」は、ユーザーアカウントのみが指定できます。
担当者が変わったときメンテナンスが必要になるので、グループを指定できるようにしてください。1 vote -
Shield access policy to restrict shared link creation
Have the option to restrict shared link creation with Box Shield access policy
1 vote -
Secure admin only download of 'malicious' files for analysis
Admins should be able to download Box Shield tagged malware without marking the file safe for everyone. That way a security admin could download the file and scan it with their own security tools. That’s the only real way to diagnose if a file is malicious or just a false positive.
Asking us to mark it safe by chatting with the user is far from best practice
1 vote -
internal collaboration
Add a "Internal Collaboration Restriction" option for Box shield access policy. My company uses file classifications that are intended to inform users so that they know to restrict sharing of files to only those who need to know. It would be great to use the justification feature that already exists in the External collaboration restriction but within our domain.
1 vote -
Classification labels are also applied to partial matches for words set in "Custom Term"
Classification labels are also applied to partial matches for words set in "Custom Term"
カスタム用語で設定された単語が部分一致した場合にも分類ラベルを適用内容
Classification labels are assigned only when an exact match is registered in the file for the file condition "custom term" in the Management Console > Classification > Classification Policy.
If you want to assign a classification label to a partially matched term, you need to register all the terms in the "custom term".
To save time and effort in registering, please improve the system so that classification labels are assigned even when partially matching words are found in the file.＜Japanese＞
管理コンソール＞分類＞分類ポリシーのファイル条件「カスタム用語」について完全一致した語句がファイル内に登録されている場合のみ分類ラベルが付与される
部分的に一致している語句も分類ラベル付与対象としたい場合、すべての語句を「カスタム用語」に登録する必要がある
登録する手間を省くため、部分的に一致した語句がファイル内に記載されている場合も分類ラベルが付与されるように改善してほしい1 vote -
Add file extensions of .mus and .sib to automated classification in Box Sheild
Add the file extensions .mus and .sib for music notation software to automated classification functions to assist with the protection of I.P.
1 vote -
Ability to have an Access Rule that limits an anonymously shared link to an IP address range.
We have documents stored in Box that we have used the anonymous shared link option. The reason we need this link is to manage the number of Box licenses. We have a large number for folks that need to view or download these documents and do not need to update or edit them. So a license does not make sense for them. We do what to limit access to these links to the internal folks only. We have explored setup of Access Rule to limit, being anonymous link, the rule does not apply. We would like to add the ability…
1 vote -
Shield Classifications Available for Certain Folders Only
Currently, if you create a classification label it will be available to apply to any folder or file. The ask is for the option to make the classification label available to apply in only certain folders.
An example of a use case is for an ITAR classification label - users should only apply this label to content in a contained ITAR folder. While in other folders they should not see the option to apply this label in the dropdown.
Auto classification policies currently has a similar feature, 'Folder Criteria'. For the classification labels, it would be great to have a…
1 vote -
after upload, Apply classification based on the parent folder classification, not the parent,... parent folder
- if you apply classification to a folder A all subfolder will be classified : Good
- You can remove that classificaiton to a subfolder B of the folder A : good
- if you upload a file to folderB , that file will be classified same as the Folder A (the parent parent folder) : Bad
This doesn't really make sense and create a new layer of waterfall access right but based on the classification this time. Which create duplicate in other areas and make it really hard for our employee to use classification.
Note that this also applied to automatically generated…
1 vote -
The BoxShield "Sign Request Restrictions" feature should be improved so that signature PDF and Log files can be generated.
In the BoxShield "Restrict BoxSign Requests" function, by selecting Access Policy > Security Control > Restrict External Collaboration > [Existing and New External Collaboration], signatures can be made, but no signature PDF or Log file is generated.
Please improve so that signature PDF and Log files can be generated normally when signing.＜Japanese＞
BoxShield「BoxSignリクエストの制限」機能にて、アクセスポリシー＞セキュリティコントロール＞外部コラボレーションの制限＞[既存および新規の外部コラボレーション]選択によって、署名はできるが署名PDF・Logファイルは生成されない。
署名した際に、普通に署名PDFおよびLogファイルが生成できるよう改善してほしい。1 vote -
Custom Classification Colors
Ability to add HEX codes to classification color schema.
1 vote
- Don't see your idea?