Request to add a new variable to Custom Content Aware Protection Notifications in the System Parameters

Products Endpoint Protector Ideas
,
1

What is a one sentence summary of your feature request?

Request to add a new variable to Custom Content Aware Protection Notifications in System Parameters.

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

Currently, the available variables for Custom Content Aware Protection Notifications are fileName, type, threatName, and threatMatch.

With these variables alone, it is difficult to identify which destination the file upload was blocked from when a file is uploaded through an application.

If the destination information shown in the logs (such as the application or service involved in the upload) could be added as a variable to Custom Content Aware Protection Notifications, administrators and users would be able to clearly understand where the upload was blocked directly from the custom notification. This would improve visibility and make it easier to guide users when a block occurs.

How do you currently solve the challenges you have by not having this feature?

Currently, since the destination information is not included in the parameters of the custom notification, it is not possible to identify which application caused the block by only looking at the notification.
As a result, administrators must check the logs separately, which creates additional inconvenience.

2 Likes
2

Thank you for sharing this idea!

We understand the value of having destination context, such as the application or service involved in the blocked upload, available as a variable in Custom Content Aware Protection Notifications. As you noted, this would make it easier for administrators and end users to understand where an action was blocked without having to check the logs separately.

We have shared your request with the relevant teams for review from both a product and technical perspective. We appreciate the detailed explanation and use case, and we will update this thread when we have more information to share.

Kind regards,
Mihai