File Activity Monitoring Global Settings

When File Activity Monitoring is enabled with the following default policy settings:

  • Maximum number of files tracked simultaneously: 100

  • Number of days unused files are tracked: 30 days

For more information about File Activity Monitoring, see Monitoring File Activity to Identify and Prevent Data Exfiltration.

Available for Windows-based and Mac-based server policies.

A monitored endpoint assigned a recording policy with File Activity Monitoring enabled requires a minimum of 4GB of RAM.

File Activity Monitoring policy is set from the Recoding Policy settings (see Configuring Recording Policy Settings).

File Activity Monitoring Global Settings include:

  • Assigned File Activity Monitoring Policy: Select which policies you want to assign. The drop-down list includes the default policy and any other policy you created. From here you can copy any policy or delete a policy, except the default policy. Policies are created in the File Activity Monitoring Policies tab.

The following settings can be applied when monitoring a large number of files and should be changed by advanced users only:

  • Enable file activity monitoring: enable/disable file monitoring.

  • Maximum number of tracked files: maximum number of files File Activity Monitoring tracks simultaneously (range 10 -1000).

  • Maximum period for tracking unused files (in days): number of days an unused file is tracked. (range 0 - 500). The tracking period is unlimited when set to 0 days.

  • Assigned File Activity Monitoring Policy: select which policies you want to assign. The drop-down list includes the default policy and any other policy you created. From here you can copy any policy or delete a policy, except the default policy. Policies are created in the File Activity Monitoring Policies tab.

  • Enable Box sync folders monitoring as entry point: start tracking files copied from Box cloud storage sync folder to local or network drive (as a new entry point). From the time a file is infiltrated into the Box cloud storage sync folder, all its activities are tracked, and any event will be tracked in file history and diaries. Currently only Box Drive and Box Sync applications installed on the default Box installation location are supported.

  • Enable MIP label monitoring: enables MIP label monitoring upon entry or exfiltration of a tracked file or when a non-tracked file is exfilltrated. (See MIP Integration.)

Related Topic:

Tracked Files