About
By default, Secure Share is available for all users. However, some customers may want to restrict access to Secure Share for internal reasons or if they elect to not purchase Secure Share. This article will discuss the options available and provide instructions for each.
Option 1: Implement a Provisioning Group
If your Virtru team as completed a Google sync or Entra ID sync with Virtru, you can implement a provisioning group to limit access to Secure Share: Secure Share Licensing for Synced Orgs (Provisioning Group)
A provisioned user will not see any changes to their experience. However, non-provisioned users will see significant changes:
- Users will have the ability to receive files from licensed users
- Users will be able to send files if they receive a request link from a licensed user
- Users will NOT be able to access the outbound Share function to initiate a Secure Share flow
- Users will NOT be able to access the Request function to initiate a Secure Share flow
If you want these restrictions to apply to all users in the org:
-
Create a Secure Share Provisioning Group
-
Put NO users in the provisioning group
-
Refresh your sync in the Control Center
Option 2: Firewall/Network Restrictions
If syncing is not an option or you would like to block all Secure Share access (even when interacting with a licensed user), you can implement network restrictions to block Secure Share functions:
- Block https://*.secure.virtru.com/secure-share/ - This will block the entire site, stopping users from initiating shares, receiving files, or sending files back via another user's request link
- Block https://*.secure.virtru.com/secure-share/outbound - This will block the ability to initiate an Outbound share
- Block https://*.secure.virtru.com/secure-share/inbound - This will block the ability to send a request email
- Block https://*.secure.virtru.com/secure-share/sharing/ - This will block the ability to reply to another user's request link
- Block https://*.secure.virtru.com/secure-share/shared/ - This will block the ability to access files shared to the user