Companies frequently hire contractors and provide them with company email addresses to access internal networks and applications. This creates an issue with contractors having visibility into an entire folders and not just the projects/folders that apply to them. Shield's whitelisting capabilities allow us to limit external email domains, but because contractors are given a company email domain the whitelisting capabilities do not apply.

We would like to be able to create a "Consultants" Managed User Group and whitelist access to break waterfall permission for internal Managed User Groups.

I don't use the activity pane very often, but since I used my iPad docked in landscape mode with an external keyboard, the activity pane opens every time I open a document. Instead of having to minimize the activity pane each time I would prefer to have a setting where it is minimized by default and I open it only if needed.

Provide ability to whitelist devices while Device Trust is enabled. We would like to enable Device Trust requiring both Domain and Certificate. But we also have lab hosts that are not domain members or have issued certificates. We would like to be able to allow hosts not meeting the Device Trust settings to login.

I am running v.5.1.4 IOS for ipad. When I click on a photo in Browse mode to bring it full frame, by default a side panel comes up labeled "Activity." This is very annoying, as I constantly have to click on the photo to make it full frame and eliminate the side panel. My suggestion: this should be a user option, rather than a default that cannot be changed. Most users do not use this Activity feature; why is it the default setting? This is a change on this new version 5.1.4. Please fix this on the next version.

With the recent iOS app update, all PDF’s when previewed in Landscape mode display the “activity” screen on the right hand side by default. This is an unwanted feature and I would prefer defaults to show the "activity" screen collapsed.

When we open a PDF with the Box app (Box for EMM) on iPad, the Activity column appears on the right side of the screen.
It takes a lot of work to maximize this PDF, as you have to make one click each time.
We would like to prevent Activity from being displayed by default when previewing a PDF.

If we use our iPad vertically, Activity will not be displayed, but it is assumed that we will use it horizontally.

We want "Smart Access: Download restriction" to control the download/printing capability of G-Suite apps. We want the integration just like office online which restrict download/print on office online apps.

For security perspective, we want to minimize the risk of data breach, so we are planning to store the confidential files on box and restrict the content to be downloaded to the devices. However currently if user opened the files on G-Suite, the files can be downloaded or printed.

To apply or change a classification, select "Owners/co-owners and editors" in the classification settings, and then click Users with editorial privileges or higher can apply and change the classifications.
However, by implementing a feature that allows configuration of permissions to apply and change each classification created, the Security can be enhanced.

We want to get the activity reports for specific classification(just like specifying the folder).

We need to audit user activities for confidential files every quarter. Current activity reports can only specify the user, date, folder and action, not classification.

To support ethical walls, it would be advantageous to be able to create lists of email addresses for different teams within the same company so that collaboration and shared link access can be restricted. Example for private side, public side employees within an investment bank content could be classified for each with access controls in place to prevent sharing and collaboration.

Box currently only logs successful actions. We would like to see when a user attempts to share content that is blocked by Shield Access policies. From a DLP and insider threat perspective this would be huge in determining what people are attempting to do, not just what they are successful at doing.

Wondering if "device pinning" can register details of devices utilized by the user and allows/disallow the login from it. Why cant it be used as a condition under "Download Restriction". MDM solutions are not yet fully matured to cover all & frequently changing devices types .

When viewing the contents of a folder, it would be beneficial to the user experience to see which items are classified and how without needing to select the item or attempt to preview it.

The new Microsoft Surface Pro X uses an ARM based processor and Box Drive doesn't support ARM processors. I'm sure use of the ARM processors will increase rapidly since it allows for much longer battery life and support cellular data connections.

Currently, only file request link creator can delete the created link. But, it should be controlled by at least Admin/Co-admin as a security stand point of view.

Could we have a variable for approvers Instead of harcoding them to a relay?

For example, if a document contained a metadata field for approver and it was populated with a user, could we use that metadata as a variable for the approval step of the relay workflow?