Exclude detected files with the safelist

​

Safelist Feature Overview

The safelist feature marks public files detected by Externally shared content management overview as safe. Once marked, these files are excluded from future detection alerts. The feature supports the following use cases. This page explains the setup steps for each one.

​

Flow for Excluding Files from Detection

To exclude a file from detection, complete the following steps:

1. Create a safelist: Create a safelist to exclude files from detection.
2. Add exclusion conditions: Set exclusion conditions (files, domains, email addresses, etc.) on the safelist you created.
3. Activate the safelist: Sync the service to activate the safelist.
4. Exclude from detection: After the sync completes, the safelist takes effect. Matching files are excluded from detection starting with the next sync.

​

How to Create a Safelist

Create a safelist from the Service > [Files] tab. There are two ways to create a safelist and add files to it.

• Select a detected file and create or add it directly to a safelist.
• Check the file’s sharers, then create a safelist based on the sharers and add them.

Choose the method that fits the detected file or your situation.

​

Add a File Directly to a Safelist

1. From the menu on the right side of the detected file, click [Add to Safelist].
   1. If no safelist exists yet, you create one in the next step.
   2. If a safelist already exists, you can add the condition to it directly.

​

Check Sharers, Then Add to a Safelist

1. From the menu on the right side of the detected file, click [Share].
2. The file’s sharer list appears. Click [Add to Safelist].
   1. If no safelist exists yet, you create one in the next step.
   2. If a safelist already exists, you can add the condition to it directly.
   

​

Creating a Safelist

1. Click [+ Create a new safelist].
2. Enter any name for the safelist.

Use case 1: Marking all access to a public file as safe

1. Check Allow public access. This marks all access to the file as safe and excludes it from detection. If you enable this option, you cannot set domain or email exclusion conditions.
2. Click Create to save the safelist. In the next step, add the target file under Files: Use case 1.

Use cases 2 and 3: Marking files shared with related domains or email addresses as safe Check Allow access from all files. This marks access from the specified domains or emails as safe for all files, including future detections. If you enable this option, you cannot check Allow public access. To save the safelist, you must add a domain or an email address. Add one in the next step, then save the safelist.

​

Adding Exclusion Conditions to a Safelist

​

Files: Use case 1

1. See Add a File Directly to a Safelist and add the file you want to exclude to a safelist. Check the safelist with Allow public access enabled, then click [Add to Safelist].
2. Review the details, then click Add.

​

Domains: Use case 2

1. Click Domain, enter the domain you want to exclude in the domain field, then click + Add.
2. Click Create, then review the list of added domains. Click Confirm.

• When you specify a domain, its subdomains are automatically excluded as well. For example, if you exclude @example.com, files shared with @hoge.example.com are also excluded.
• To exclude a file shared with multiple domains as safe, the safelist must include every recipient domain for that file.

​

Email addresses: Use case 3

1. Click Email address, enter the email address you want to exclude in the email address field, then click + Add.
2. Click Create, then review the list of added email addresses. Click Confirm.

​

Activating a Safelist

Right after you create a safelist and add conditions, the safelist is not yet active (not yet applied).

1. To activate the safelist, sync files for the target service (workspace) once. Run the sync from Sync in the Files tab. The safelist activates after the sync completes.
   Syncing a workspace from the Account tab or the Integration > Status tab does not activate the safelist. You must run the sync from the Sync button in the Files tab.
2. After the sync completes, confirm that the safelist status shows as applied.

​

Viewing the Safelist List

You can view your configured safelists from the [Safelist List] button. To edit or delete a safelist, use the menu on the right side. After you make a change, the safelist returns to a not-yet-applied state. Run the sync again to apply the change.

​

Checking the Exclusion Results

Files matching an active safelist are excluded from detection at the next file sync after the safelist activates. Check the File tab or Notifications tab to confirm the alert count. Confirm that the target files no longer appear as detected.

​

FAQ

​

Q. The “Sharing settings” screen shows a group address as (0). Why doesn’t it disappear?

A. Register the address in a safelist using the following steps.

1. In the Files tab, click the three-dot menu [︙] on a file in the file list, then click [Share].
2. On the “Sharing settings” screen, click the three-dot menu [︙] next to the group address shown as (0). Then click [Add to Safelist] to register it.
3. The target file is excluded from detection at the next file sync after the safelist activates.