What is a one sentence summary of your feature request?
Enable filtering in the Content Aware Report based on the presence or absence of a File Shadow, regardless of EPP server/client version.
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
Have the possibility to filter events/ logs within the Content Aware Report using the File Shadow field. Currently, when attempting to use this filter, the interface displays the message: “Utilize the File Shadow Filter exclusively with EPP Server and Client versions released prior to year 2024.”
This restriction prevents organizations running newer EPP versions from leveraging File Shadow data efficiently during investigations. File Shadows are an important component in understanding potential data exfiltration.
The need for this enhancement becomes even more critical considering that all server and client versions released prior to October 2025 will soon become obsolete, no longer supported. As a result, the current limitation will effectively render the File Shadow filter unusable for all supported deployments going forward.
Content Aware Protection reporting capabilities should be updated to enable File Shadow based filtering for supported EPP server and client versions. This would ensure consistent reporting capabilities, reduce manual investigation effort, and maintain feature relevance as older versions reach end-of-life.
How do you currently solve the challenges you have by not having this feature?
At the moment, EPP administrators have no automated method to determine which events contain a File Shadow. They must manually inspect individual entries within the report, an approach that is inefficient, incomplete, and prone to human error.