Question
In File DLP, the internal/external determination may differ from what you expect.
Please explain how the determination is made.
Answer
In File DLP, the internal/external determination is based on the domains registered with HENNGE.
If the determination for the target files differs from your expectation, please check whether the address of the file's shared user is registered with HENNGE.
Additionally, in the following cases, the determination may differ from what you expect.
Pattern where files shared only internally are determined as "external"
When overall sharing settings are changed in Microsoft 365 / Google Workspace
File DLP determines whether external sharing exists based on the link sharing information of files and folders.
Therefore, even if the sharing link is disabled for the entire tenant after files or folders have been shared externally, File DLP will still determine them as "external".
In this case, since the tenant-wide settings take precedence, the files in question cannot actually be accessed from outside.
Changing the overall sharing settings on the groupware side can cause this behavior regardless of whether it is before or after File DLP is implemented.
Please be aware of this when introducing File DLP into environments where sharing links have been disabled in the past, or when changing the sharing scope during operation.
If past sharing links are detected as risks due to this issue, you can take action from the File DLP risk detection policies or use Auto Remediation Policies to delete past links.
Pattern where files shared externally are determined as "unknown"
If you are using "Target Audience" in Google Workspace, "Target Audience" is treated as a separate sharing scope called "unknown-Target Audience", and internal/external determination cannot be made.
This is due to a limitation of the Google API, which cannot determine whether external accounts are included in the "Target Audience".
In the future, File DLP is considering adding a feature that allows customers to determine internal/external status for each "Target Audience".
Reference: About Target Audience (external site)
Translation Disclaimer
This article has been automatically translated from the original Japanese version
for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.
In the event of any discrepancies or questions regarding the content, the official
Japanese version shall prevail.