Skip to main content

Configure Cloud Storage Scanning for Box in Nebula

Cloud Storage Scanning supports scanning for malicious files in your enterprise level Box account. Configure a continuous or scheduled scan to check for any malicious files currently in your users' Box folders.

The following scan frequencies are available:

  • On-Demand: An on-demand scan of your cloud storage folders. Click Scan under the Actions column on the Cloud Storage Scans page to initiate the scan.
  • Daily: A scheduled scan that runs daily at the specified time. 
  • Weekly: A scheduled scan that runs on certain days of the week at the specified time.
  • Monthly: A scheduled scan that runs on a certain day of the month at the specified time.
  • Continuous: A continuous scan that checks for new and updated files. Check Include existing files to initiate a scan on all files before monitoring for changes to them. 

For more information, see Should I run a scheduled scan, continuous scan, or a combination of both. 

Nebula Requirements

  • The Nebula Super Admin or Administrator must be a Box Enterprise Admin or Co-Admin.

Box Configuration

A Cloud Storage Scanning application must be created in Box:

  1. Log in to https://app.box.com/ as a Box Enterprise Admin or Co-Admin.
  2. Create a new Custom App with Client Credentials Authentication. For more information, see App creation steps.
  3. Set the App Access Level to App + Enterprise Access. For more information, see Application Access.
  4. Enable Multi-Factor Authentication in order to fetch the client secret. For more information, see Multi-Factor Authentication Set Up for Your Account.
  5. Set the permissions for the application. For more information, see Application Scopes.
    1. Under Application Scopes, enable the following:
      • Write all files and folders stored in Box
      • Manage users
      • Manage enterprise properties
    2. Under Advanced Features, enable Make API calls using the as-user header.
  6. Under the Authorization tab, review and submit the application for authorization. For more information, see Authorizing Custom Applications in Sandbox and Production Environments.
  7. Under the General tab, record the Enterprise ID. 
  8. Under the Configuration tab, record the Client ID and Client Secret. 

Nebula Configuration

Once the Enterprise ID, Client ID, and Client Secret have been recorded, configure a cloud storage scan for Box:

  1. On the left navigation menu, go to Configure > Cloud Storage Scans.
  2. In the top-right, click Add a Scan.
  3. Enter a name for the scan configuration.
  4. Select Box and enter the Enterprise Id, Client Id, and Client Secret.
  5. Click Connect to Provider.
  6. In the Items to scan tab, select which users or folders to scan.
  7. In the Quarantine tab, toggle on Enable Quarantine to allow Cloud Storage Scanning to automatically quarantine malicious files.
  8. Select a user for the quarantine folder. A folder that contains all quarantined objects from this scan configuration is automatically created in the selected user's directory. 
  9. Select the default or customize the tombstone file. A tombstone file is created and replaces the original file when a file is quarantined. It is designed to provide information or instructions for users.
  10. In the Scan frequency tab, select a scan frequency.
    Note: Scheduled scans run in Coordinated Universal Time (UTC).
  11. In the top right, click Save.

Return to Malwarebytes Cloud Storage Scanning guide.

Related articles