Scheduled maintenance planned for September 30, 2023.

Print

Using Shield Lists

Admin , Box Shield , Article , New , Instruction , Rollout

 

Creating Shield Lists

For customizing Threat Detection and Smart Access, Box Shield enables you to create Shield lists, which are lists of locations, domains, applications,  host IP addresses, or email addresses that you can later either include in or exclude from your threat detection rules.

Shield List Limits

The following table describes the limits in Shield lists.

Item Limit
IP addresses 100,000
Locations 100,000
Domains 100,000
Applications The same # of applications an enterprise can integrate with Box.
Email addresses 15,000

To create a list of locations:

The locations that can be used in Shield location lists are countries.

  1. In the Admin Console's left pane, click Shield.
  2. In the top of the Shield window, click Lists.
  3. In the top-right corner of the list window, click Create Shield List and select Locations.
  4. In Shield List Name, type a name for your Shield list.
  5. In Description, type a summary of the list's purpose.
  6. Click Add Countries.
  7. Type a comma-separated list of country names. As you type, Box displays names of countries you can select.
  8. In the top-right corner of the window, click Next.
  9. Click Create List. You may need to refresh the window to see the updated lists.

To create a list of domains:

  1. In the Admin Console's left pane, click Shield.
  2. In the top of the Shield window, click Lists.
  3. In the top-right corner of the list window, click Create Shield List and select Domains.
  4. In Shield List Name, type a name for your Shield list.
  5. In Description, type a summary of the list's purpose.
  6. In Enter Domains, type a comma-separated list of domains.
  7. In the top-right corner of the window, click Next.
  8. Click Create List. You may need to refresh the window to see the updated lists.

To create a list of applications:

  1. In the Admin Console's left pane, click Shield.
  2. In the top of the Shield window, click Lists.
  3. In the top-right corner of the list window, click Create Shield List and select Applications.
  4. In Shield List Name, type a name for your Shield list.
  5. In Description, type a summary of the list's purpose.
  6. In Enter Applications, type the name of an application. As you type, Box displays the list of applications currently available to your account. Select an application.
  7. In the top-right corner of the window, click Next.
  8. Click Create List. You may need to refresh the window to see the updated lists.

To create a list of host IP Addresses:

  1. In the Admin Console's left pane, click Shield.
  2. In the top of the Shield window, click Lists.
  3. In the top-right corner of the list window, click Create Shield List and select Host IP Addresses.
  4. In Shield List Name, type a name for your Shield list.
  5. In Description, type a summary of the list's purpose.
  6. In Enter IP Address/CIDR Blocks (IPv4), type a comma-separated list of host IP addresses.
  7. In the top-right corner of the window, click Next.
  8. Click Create List. You may need to refresh the window to see the updated lists.

To create a list of email addresses:

  1. In the Admin Console's left pane, click Shield.
  2. In the top of the Shield window, click Lists.
  3. In the top-right corner of the list window, click Create Shield List and select Email Addresses.
  4. In Shield List Name, enter a descriptive a name for your Shield list.
  5. In Description, enter a summary of the list's purpose.
  6. In Enter Email Addresses, enter one or more valid email addresses, separated by either commas or new lines.
  7. In the top-right corner of the window, click Next.
  8. Click Create List. You may need to refresh the window to see the updated lists.

Note
 You can also use your Shield lists as an allowlist or denylist when defining detection rules in Threat Detection or restrictions in Smart Access, as shown in the following table:

List Type Usage
Locations Detection rules: Suspicious location
Domains Access policies: External collaboration restriction
Applications

Access policies: Application restriction
IP addresses Detection rules: Suspicious location
Email addresses Access policies: External collaboration restriction

 

Modifying a list

To modify a list:

  1. In the Admin Console's left pane, click Shield.
  2. In the top of the Shield window, click Lists.
  3. Click a list's name.
  4. In the top-right corner of the window, click Edit.
  5. After editing the list, in the top-right corner of the window click Save.

 

Deleting a list

To delete a list:

  1. In the Admin Console's left pane, click Shield.
  2. In the top of the Shield window, click Lists.
  3. Click a list's name.
  4. In the top-right corner of the window click Delete.

Related articles