cloud  based storage/upload prevention

pma111
pma111 used Ask the Experts™
on
we are reviewing our data leakage controls and there is a point in policy regarding uploading company data to 'cloud storage; (e.g. forbidden). There are tight controls on USB/DVD/Email etc, but I was wondering:
1) what the common/free cloud storage solutions are in 2019, and..
2) as a company from a policy enforcement perspective, is it as simple as blocking access to those cloud storage websites via your web filter/proxy to enforce this, or is it a bit more complicated than that. And if there is more to it, what other types of controls need to be in operation.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
AlanConsultant

Commented:
One issue you might run into if you block storage sites, is that many people now share files, rather than attaching them via email.

That might then mean your users cannot download / access files 'sent' that way.
Pete LongTechnical Consultant

Commented:
Look at DLP (Data Loss Prevention) Most Large AV Vendors have a solution, McAfee and Symantec certainly do.

Regards,
Top Expert 2016

Commented:
So does Microsoft.
Distinguished Expert 2018
Commented:
DLP is one option as Pete has mentioned, even though it can get quite complex. Other options would include having a proxy which blocks out most storage sites.

... is it as simple as blocking access to those cloud storage websites via your web filter/proxy to enforce this, or is it a bit more complicated than that. And if there is more to it, what other types of controls need to be in operation.
This depends. Allowing a storage service tends to open the service as a whole, not just the particular instance you're hoping for.  Plus you have to really pay attention to what is categorized as a storage service, as it might impact more (or less) than what you're hoping for. If you're trying to prevent data from going authorized places as a whole, you also need to pay attention to other vectors such as email and USB (which I know you've already mentioned having controls for). You're also going to need to makes sure that you understand use cases.
You can also look at Forcepoint filtering solution ( previously Websense)  or Cisco Umbrella - They both can integrate into your environment and can provide very granular access to these storage sites based on users or groups - they also have remote agents for laptops

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial