File Activity Monitoring Policies

A File Activity Monitoring policy is a set of configuration options for file tracking that is applied to monitored endpoints simultaneously.

For high granularity control on what is monitored, you can define the following for each policy:

  • Entry Point Filters: Files entering (downloaded to) an endpoint you want to monitor. You define URL and/or file extension filters.

  • Exit Point Filters: Files exiting (uploaded from) an endpoint you want to monitor. You define URLs and/or file extension filters.

File Monitoring policies are listed in the File Monitoring Policies list. By default, a File Activity Monitoring policy is defined to monitor all files entering and exiting endpoints. You can copy and edit this policy and create new policies.

To view the list of available policies, select Configuration > Endpoint Management > Recording Policies and select the File Activity Monitoring Policies tab.

In the example below, Include All is the name of the default policy. You cannot delete the default policy.

Any modifications you make in a File Activity Monitoring policy can be viewed for auditing purposes in the Audit > Configuration Changes tab of the Web Console.

Setting up a File Activity Monitoring Policy

  1. Select Configuration > Endpoint Management > Recording Policies and select the File Activity Monitoring Policies tab.

    The File Monitoring Policies List displays.

  2. Click to Create or select the policy you want.

    The File Monitoring Policies page displays.

  3. Enter a Policy Name.

  1. Create/update the list of URLs you want. For more information about how to manage the list, Bulk Lists.

  2. Select the monitoring method from the drop-down list.

    1. All URLs (Filtering disabled): There is no filter. All files from any URL are monitored.

    2. Only the following URLs: Monitor only the files from URLs selected in the list.

    3. All except the following URLs: Monitor all files except those from URLs selected in the list.

  1. Create/update the list of file extensions you want. For more information about how to manage the list, see

  2. Select the monitoring method from the drop-down list.

    1. All file extensions (filtering disabled): There is no filter. All files from with any file extension are monitored.

    2. Only the following file extensions: Monitor only the files with file extensions selected in the list.

    3. All except the following file extensions: Monitor all files except those with file extensions selected in the list.

  1. Create/update the list of URLs you want. For more information about how to manage the list, see Bulk Lists.

  2. Select the monitoring method from the drop-down list.

    1. All URLs (Filtering disabled): There is no filter. All files to any URL are monitored.

    2. Only the following URLs: Monitor only the files from URLs selected in the list.

    3. All except the following URLs: Monitor all files except those with URLs selected in the list.

  1. Create/update the list of file extensions you want. For more information about how to manage the list, see Bulk Lists.

  2. Select the monitoring method from the drop-down list.

    1. All file extensions (filtering disabled): There is no filter. All files with any file extension are monitored.

    2. Only the following file extensions: Monitor only the files with file extensions selected in the list.

    3. All except the following file extensions: Monitor all files except those with file extensions selected in the list.