Question
In File DLP, the determination of Internal / External may sometimes differ from what is expected.
Please explain the mechanism for this determination.
Answer
File DLP determines Internal / External based on the domains registered with HENNGE.
If the determination for a target file is different from what you expect, please check whether the email address of the file's collaborator is registered with HENNGE.
Additionally, the determination may differ from what is expected in the following cases.
Pattern: A file shared with "Internal" users only is determined as "External" sharing
When the global sharing settings in Microsoft 365 / Google Workspace are changed
File DLP determines the presence of external sharing based on the link sharing information of the file and folder.
Therefore, even if a file or folder was shared externally, and subsequently the setting to disable sharing links was applied tenant-wide, File DLP will still determine it as "External".
In this case, since the tenant-wide setting takes precedence, the file cannot actually be accessed externally.
Please be aware of this if you change the global sharing range on the Groupware side after introducing File DLP.
Pattern: A file shared to “External” are marked as “Unknown”
When using "Target Audiences" in Google Workspace, the "Target Audience" is treated as a distinct sharing scope called "Unknown - Target Audience," and it is not possible to determine whether it is internal or external.This is due to limitations in the Google API, which prevent determining whether a "Target Audience" includes external accounts.In the future, we are considering adding a feature to File DLP that will allow customers to manually designate "Target Audiences" as either internal or external.
Reference: About target audiences (External site)