Testing Shield in Trial Mode

When certain criteria are met, Box enables prospective Box Shield customers to test Shield capabilities during a 30-day trial (also known as proof of concept, or POC). This topic explains how to use the "Shield Trial Mode" feature, which enables you to test Shield's classification-based security controls in your production environment of Box during a trial without impacting the Box experience for the majority of your managed users.

If you're interested in deploying Shield on a trial basis, please contact your account team to request a Shield trial.

Setting up Shield testing in Trial Mode is done in 4 steps:

• Step 1: Select users for the Shield trial
• Step 2: Create new classification label(s)
• Step 3: Configure Shield Smart Access policies
• Step 4: Apply classifications and test access policy enforcement

Step 1: Select users for the Shield trial

After Box enables your Shield trial, first determine the Box users in your organization who will test Shield's classification-based access controls. This may be a group of individuals in your IT or Security teams, or a small department or functional team in your organization.

To configure a list of users for Shield trial:

1. In the Admin Console's left pane, click Shield.
2. In the top of the Shield window, click Access Policies.
3. In the top-right corner, click Configure Trial Users. Box displays the Configure Shield Trial window.
4. Select one of the following options:
   • Disable for all managed users
   • Enable for all managed users
   • Enable for select users
   • Enable for everyone except select users

      

     Note: Box recommends you select Enable for select users to limit the Shield Trial to a small group of users. Type Box users by name or email address. As you type, Box displays names of users you can select (see screenshot below). 
5. In the bottom-right corner of the window, click Save.

Step 2: Create new classification label(s)

Next, create new classification label(s) ("trial classifications") for the purposes of your Shield trial. For instructions on how to create, modify, or delete classification labels, see Classification Labels. If you are already using Box classifications in your Box environment, you will still need to create new classification labels for the Shield trial purposes - for example, [TEST CONFIDENTIAL].

Step 3: Configure Shield Smart Access policies

You can now create Shield Smart Access policies for your new classification labels, which will be enforced for only the group of Shield trial users. Refer to our Using Smart Access article to create an access policy.

Step 4: Apply classifications and test access policy enforcement

You can now ask your Shield trial users to begin classifying files and folders using the new labels, and test out the access policy enforcement and restrictions.  Shield trial users can apply trial classifications to files or folders that are owned by Shield trial users.

• Box recommends your Shield trial users apply trial classifications only to previously unclassified files and folders.  If a Shield trial user applies a trial classification to a previously classified file, non-Shield trial users will not see a classification on the file. 
• Shield trial users will not see the Classify option in the Preview mode of files that are not owned by a Shield trial user.  The only exception is in the All files page, where all users will see the Classify option, but a non-trial user will not be able to classify any file.  Only users who you enabled for Shield trial will be able to apply a classification label or edit the classification label for a file they own.

Ending the Shield trial

At the end of your 30-day trial, Shield will be disabled from your production environment. All trial classification labels created during the 30-day trial will be permanently deleted, and all files and folders that had a trial classification will become unclassified. All other trial data, i.e., access policies, detection rules, alerts, will also be permanently deleted.

Note: 

• Shield's automated classification is not available in Shield trial.
• Shield's Microsoft Information Protection integration is not supported in Shield trial.