Adding or editing a cloud discovery scan

Use the Main > Policy Management > Discovery Policies > Cloud Discovery Scans > Cloud Discovery Scan Properties page in the Data Security module of the Forcepoint Security Manager to create or edit a cloud discovery scan.

To access the Cloud Discovery Scan Properties page, do one of the following:

• Click New in the toolbar at the top of the content pane on the Cloud Discovery Scans page to add a new scan.
• Click an existing scan name in the table on the Cloud Discovery Scans page to update an existing scan.

A Cloud Discovery Scan Properties page appears. To create or edit a scan:

1. Enter or update a Scan name and Description for the scan.
2. Mark Enable scan to enable the cloud discovery scan.
3. Choose a cloud application from the drop-down list for the new scan.

   The Cloud Application field lists all unassigned cloud applications created from the Cloud Applications page (for example, Dropbox-Test Instance).

   Only applications that support data at rest are shown in the drop-down list. Data at rest is enabled for all supported assets in the CASB portal. To disable Data at rest, go to the CASB portal and modify the relevant asset. Each cloud application can be assigned to only one scan.

   Note that you cannot change the Cloud application name when you edit the scan.

   Note: A cloud application in Forcepoint DLP is referred to as asset in Forcepoint CASB.
4. Use the Discovery Policies section to determine which policies to apply during the scan.
   Do one of the following:

   • Select All discovery policies to prompt Forcepoint DLP to search for data that matches the rules in all deployed policies.
   • Select Selected policies to apply only certain policies in this scan, then select the policies to apply.
5. To save the changes and return to the Cloud Discovery Scans page, click OK.
6. To deploy all the configured changes, click Deploy.