Skip to main content

App Conditional Policy

App conditional policies are features that finely manage access permissions and isolation security policies for the created app. Access to the app can be controlled based on conditions such as members, location, and time, and various security policies can be applied.

Table of Contents​

Basic

Policy Settings

Management

Basic Screen Composition​

The conditional policy screen is composed as follows.

  • Conditional Policy Tab: A tab where you can apply conditional policies to apps created in Home
  • Priority: Display policy priorities (the smaller the number, the higher the priority)
  • Add Policy: Create a new policy using the [Add Policy] button in the top left corner
  • Search: Policy name, members, target app, usage status, and various other conditions can be searched.
  • Policy Application Status Inquiry: Policy list top button bar's [Policy Application Status Inquiry] button to check the application history by policy and the policies not applied.

You can search for policies based on various criteria, including policy name, members, target apps, conditions, enforcement policies, and usage status.

Types of Search Filters​

FilterSearch MethodDescription
Policy NameIncluded SearchSearch for policy names containing keywords
MembersInclude Search + Dropdown SelectionUser (Name·Email), Group, Department Search, Assignment/Exception Classification Selection, Multiple Selection Available
TargetDropdown selectionSearch by app name or app representative URL, multiple selections allowed
UsageDropdown selectionUse / Not Use Selection
conditionInclude Search + Dropdown SelectionSearch by location (IP), time, device conditions, multiple selections available
Execution PolicyDropdown selectionAccess Allow/Deny, Isolation Security Policy (Allow All/Restricted Use), Select Additional Authentication Methods, Multiple Selections Possible

Member Search Details​

  • When you enter a name or email in the search box, results will be displayed in real-time in a dropdown.
  • Allocation / ExceptionYou can distinguish between cases where a tab is selected and assigned to a policy and where it has been handled as an exception.
  • All membersis fixed at the bottom of the dropdown and is included in the search results only when selected directly.
  • Location : 위치 제한 없음or enter a registered location name to search. The results are위치명 | IP 범위It will be displayed in the format.
  • time : 시간 제한 없음You can search by entering the registered time name. The results are시간명 | 시간 범위It will be displayed in the format.
  • Device : 모든 디바이스, Desktop, Tablet, MobileSelect an option.

Execution Policy Search Details​

  • Access Policy: Allow access / Block access selection
  • Isolation Security Policy: Allow all / Select limited use
  • Additional authentication methods: Not used / Email verification / OTP verification / Passkey (WebAuthn) verification selection (applies only to access permission policies)

Search Condition Combination Rules​

  • Between filters (AND condition): If you set multiple different filters, only the policies that satisfy all conditions simultaneously will be displayed.
  • Filter inside (OR condition): If you select multiple items within the same filter, any policy that matches at least one will be displayed.
  • Each set condition is displayed in the form of tags, and the tags'×You can remove individual conditions with the button.

⚠️ Priority changes are not possible when search filters are applied. To change the priority, please clear all search filters.

Policy Application Status Inquiry​

Clicking the [Policy Application Status Inquiry] button at the top of the policy list opens a modal where you can view the application history of conditional policies and the non-applied policies by period.

  • Modal Title: Policy Application Status Inquiry
areaContent
Query Period[Start Date] ~ [End Date] Calendar Selection
tabApplied Policies / Unapplied Policies
DownloadDownload Excel of the search results using the button in the upper right [↓]

Applied Policies Tab​

For the specified period, to the user**Policies Actually Applied (Heating)**Displays the list.

Table Column Configuration

columnDescription
PriorityCurrent priority number of the policy
Policy NamePolicy Name (Click to move to the edit details screen)
DescriptionPolicy Description
Policy Usage StatusCurrently in use / Not in use status
Application Count ↑↓Number of times the policy was applied during the inquiry period (thousand unit comma display, sortable)
Recent application date ↑↓The most recent date the policy was applied within the query period (sortable)

💡 The application count and recent application date columns can be sorted in ascending/descending order. When sorting the application count in ascending order, you can quickly check policies with low usage frequency at the top.

How to use

  1. [Policy Application Status Inquiry] Click the button → Open modal
  2. Setting the query period (start date ~ end date)
  3. Check the Applied Policies Tab
  4. Sort by clicking the header of the Application Count or Recent Application Date column
  5. Clicking on the policy name allows you to navigate to the detailed editing screen of that policy.
  6. Download Excel of the search results by clicking the button [↓] in the upper right corner.

Unapplied Policy Tab​

during the specified period**Policy that has never been applied (heating)**Displays the list.

Table Column Configuration

columnDescription
PriorityCurrent priority number of the policy
Policy NamePolicy Name (Click to move to the edit details screen)
DescriptionPolicy Description
Policy Usage StatusCurrently in use / Not in use status

How to use

  1. [Policy Application Status Inquiry] Click the button → Open modal
  2. Setting the query period (start date ~ end date)
  3. Select the Unapplied Policies tab
  4. Check the list of policies that were not applied even once during the period
  5. Clicking on the policy name allows you to navigate to the detailed editing screen of that policy.
  6. Download Excel of the search results by clicking the button [↓] in the upper right corner.

💡 By regularly checking for non-applicable policies and organizing unnecessary ones, you can reduce the complexity of policy management and optimize the security environment.

Get Policy​

You can import and register a JSON file (single policy) or a ZIP file (multiple policies) that contains the backup of the conditional policy.

How to use

  • Download: Check the item checkbox > Click the [Download Policy] button on the top button bar
    • When selecting 1: Download JSON file
    • When selecting more than 2: Download as a ZIP file.
  • Import: Click the [Get Policy] button to select and register the backed-up JSON file or ZIP file.

Add Policy​

Clicking on [Add Policy] will take you to the new conditional policy page, where you can set the following items.

  • Policy Basic Information
  • condition
  • Execution Policy
  • Settings

Policy Basic Information​

Policy Name​

  • name(Required): Up to 20 characters can be entered
  • Description(Optional): Up to 200 characters can be entered.

The conditional policy name is a required value, and you must enter a unique name to identify the policy.

Members​

Set users or groups to be included or excluded from this conditional policy.

allocation

  • All users: Apply policies to all users
  • Select User or Group: Search and select a specific user or group
    • Search by entering a username or group name in the search box.
    • The selected user or group can be confirmed in the box below.

Exclusion

  • Specify users or groups to exclude from the policy
  • Excluded members are not subject to the policy regardless of assignment status.
  • The 'All Users' option cannot be used in the exclusion list.
  • If you select members to exclude, you can check the list of excluded members in the box below.

Target App​

  • Select the app or app group to which this conditional policy will be applied.
  • Only the selected app or group will have the policy applied.
  • You can select multiple apps, and you can also select by app group.

Setting Conditions​

Set conditions such as location and time to be used for policy judgment. Based on the assigned conditions, determine the user's access environment and decide whether to apply the policy.

Location Conditions​

You can choose from the following two items for the location (IP) condition.

  • All Locations(default): Apply policy at all locations without specific location conditions
    • Exception selection: To exclude only specific locations among all locations, specify the locations to be excluded through 'exception selection'.
  • Select Registered Location: Select from the locations registered in the conditions section of the Security365 Management Center.
    • Click 'Select a Location' to check the list of registered locations.
    • [+Register Location] : Click to add a new location condition
    • Exception Selection: To exclude a specific location from the selected locations, use 'Exception Selection'

Time Condition​

You can choose from the following two time conditions.

  • All time(Default): Always apply policy without specific time limits
    • Exception selection: To exclude only specific time zones among all times, specify the time to exclude through 'exception selection'.
  • Select Registered Time: Select from the registered times in the conditions section of the Security365 Management Center.
    • Click 'Select a Time' to check the list of registered times.
    • [+Add Time] : Click to add a new time condition
    • Exception Selection: To exclude a specific time zone from the selected time, use 'Exception Selection'

Condition Management Notes​

  • The location and time conditions can be registered/deleted/edited in the [Condition Items] menu of the Security365 Management Center.
  • Use exception selection to finely configure when complex conditions are required.

Execution Policy​

Access Policy​

Sets the access permissions for members when they want to access the subject to this conditional policy.

Access Permission

  • Access Denied: Completely block app access under the given conditions
  • Access Allowed: Allows app access and enables the setting of additional authentication methods.

Additional authentication methods(Can be set only when access is allowed)

  • Not in use: Accessing the target without additional authentication
  • Email Verification: An authentication code input window appears and the authentication process begins.
    • Time limit: 5 minutes
    • If you do not receive the authentication code within the time, click 'Resend Authentication Code'
  • OTP Authentication: Initial registration QR code and recovery key guidance
    • Enter the authentication code after registration to proceed with authentication.
  • Passkey (WebAuthn) Authentication: A supplementary authentication method that verifies your identity using passkeys registered on the user's device, such as fingerprints, PINs, and security keys. It provides a higher level of security than email and OTP authentication, allowing for quick access using only biometric authentication without entering an authentication code.

Passkey (WebAuthn) Authentication Workflow

  1. Display Additional Authentication Modal: When you access the target app, at the top of the screenAdditional AuthenticationA modal will be displayed. A message stating "Verification is required using a passkey (fingerprint, PIN, security key, etc.) for secure access." will be provided along with the [Authenticate] button. The passkey has a higher security requirement level than other two-factor authentication methods, so the authentication window must be opened as a popup. This modal is a step to open the popup with the user's **click (gesture)** to bypass the browser's popup blocker.
  2. Biometric Authentication Process: Clicking [Authenticate] will open the authentication window (popup) and display the message "Authenticate with security key or biometric program." You will verify your identity using the registered passkey on the device through fingerprint, PIN, or security key on the OS authentication screen such as Windows Security.
  3. Access Allowed: If authentication is successful, the authentication window will close and access to the originally requested app will be granted.
  • Display a notification popup saying "Authentication has failed." when authentication fails.
  • Unable to access the specified target

Other Matters — Passkey authentication requires that the passkey (passwordless) credentials for the user are pre-registered to function. If the authentication window does not open or if authentication continues to fail, please request SOFTCAMP to verify whether the passkey (passwordless) credentials are registered.

Isolation Security Policy​

Set policies to control user behavior within the app. All behavior control items can choose whether to allow or block.

Keyboard Input​

  • Allow/Deny Settings
  • When blocked: A message "Input via keyboard is prohibited by policy." is displayed at the bottom center.
  • Allow/Deny Settings
  • Allowed: Free movement to all sites
  • Block: Can only navigate to the representative URL and associated URLs.
  • When accessing a blocked site: Redirect to the "This action is prohibited by policy." guidance page.

File Security​

File Upload​

  • Allow/Deny Settings
  • Additional settings when allowed:

File Download​

  • Allow/Deny Settings
  • When blocked: "This action is prohibited by policy. Downloading is prohibited by policy." Move to the information page, return to the previous screen with the close button.
  • Additional settings when allowed:
    • Extension Limit: Control the downloadable file extensions (belowExtension Restrictions — Block / Allow MethodReference)
    • Repository Selection: My PC File Folder / SHIELDGate File Folder (SHIELDrive storage can be specified if selected)
  • Precautions When Using SHIELDrive Storage
    • The member must be assigned to SHIELDrive storage to be available.
    • Unable to download files if there is no storage allocation

Extension Restrictions — Block / Allow Method​

Select the extension control method for file upload and download.격리 보안 정책 > 파일 보안 > 파일 업로드 / 파일 다운로드ofExtension LimitSet in.

Selecting Extension Control Method

Select one of the two methods from the button at the top of the extension restriction.

  • Block Extension: Only the registered extensions are blocked, and all others are allowed. (Existing method)
  • Allowed extensions: Only the registered extensions are allowed, and all others are blocked.

Registering Extensions

  • Enter the extension one by one in the input field and**[+]**If you add it with a button, it will be displayed in the form of a chip.
  • Enter only the file extension. For example:png ( .pngeven if you enterpngwill be registered.)
  • The input field guidance is displayed as "Enter the blocked file extensions." / "Enter the allowed file extensions." depending on the method.
  • If you enter an already added extension again, a message will be displayed saying "This extension is already added."

⚠️ File upload and file download**Cannot be set as "Allowed Extensions" at the same time.**If one side is changed to "Allow Extensions," the other side will automatically switch to "Block Extensions."

User Guidance When Blocked

If the file is blocked due to extension restrictions, a message "Attachment request failed" will be displayed on the user screen, along with the following information.

  • Allowed extensions: (List of extensions registered as allowed in the "Allowed Extensions" method)
  • Blocked file: (blocked file name)

Clipboard Access​

Control copy/paste between the isolated browser and the user PC. Individual settings available for each direction:

  • Whether to allow clipboard access from the isolated browser to the user's PC
  • Allowing Clipboard Access in Isolated Browser on PC
  • When blocked: "Clipboard usage is prohibited by policy." notification is displayed at the bottom center.

Session Maintenance​

  • Enabling session persistence protects the data on the screen through the lock screen when there is no screen activity during idle time.
  • Idle time setting available when activated (in minutes)
  • When idle time elapses, the screen is immediately locked, and you can return to the work page through the 'Refresh' button.

Screen Marking​

  • Activation/Deactivation settings available
  • When activated: Display a watermark on the screen containing user name, email information, etc.
  • Data Leakage Prevention and Enhanced Accountability
  • The screen mark display method can be customized in the 'Business System > Security Screen Settings > Screen Marking/Watermark Settings' menu.
  • Available for use/not in use setting
  • When activated: Display a watermark on the screen containing user name, email information, etc.
  • Data Leakage Prevention and Enhanced Accountability
  • The watermark display method can be customized in the menu 'Business System > Security Screen Settings > Screen Marking/Watermark Settings'.

Video Conference Mode​

  • Activate in work systems that require video conferencing
  • Activation Limitations: SHIELDGate shortcut feature unavailable (shortcut icon not provided in the upper right corner)
  • Settings for Optimizing Video Conference Performance

Context Menu​

  • Available for use/not in use setting
  • When activated: Individually control the context menu items displayed when right-clicking in the RBI browser by target.
  • Context Menu Settings > Clicking the link opens the detailed settings slide. The current setting status is summarized text (e.g:32개 표시 | 2개 숨김) is indicated.

Context Menu Detailed Settings

Individually control the menu items to be displayed for each clickable target area by turning them ON/OFF.

areaDescription
Page Background AreaContext menu displayed on right-clicking empty space (Back, Forward, Refresh, Print, View Page Source, Inspect, etc.)
Text Selection AreaContext menu displayed after right-clicking after dragging text (copy, print, etc.)
linkMenu displayed when right-clicking on a link (Open in new tab, Copy link address, etc.)
imageContext menu displayed when right-clicking on an image (Save image, Copy image, etc.)
videoMenu displayed when right-clicking on the video (Play/Pause, Save Video, etc.)
AudioMenu displayed when right-clicking on the audio (Play/Pause, Save Audio, etc.)
Input FieldContext menu displayed on right-clicking the text input field (Cut, Copy, Paste, etc.)
  • Each item within the area is controlled by an individual ON/OFF toggle,All ON / All OFFYou can toggle all items in the area at once with a button.
  • bottomInitializationClicking the button will reset all items to their default values.
  • If all items in a specific area are OFF, the context menu will not be displayed when you right-click in that area.

⚠️ Shortcut Key Integration: If you set the menu item to OFF, the associated keyboard shortcuts will also be blocked. (e.g.: Print item OFF →Ctrl + PBlock)

⚠️ Browser Top Button Constraints: Setting the back/forward/refresh menu items to OFF does not block clicks on the navigation buttons at the top of the browser. Shortcut keys (Alt+←, F5Only (etc.) will be blocked.

  • Video/Audio: You can control the basic playback-related menu for video and audio, and it is applied based on the standard context menu items of the browser.
  • Shortcut keys: The browser's default shortcuts associated with context menu items are controlled together, while custom shortcuts are excluded.

Data Security — Input Sensitive Information Check​

Input Prompt Firewall (formerly Custom Overlay) feature, which checks for sensitive information (such as regular expressions) in the text entered by the user,Before the original text is delivered to the siteControls. This item is displayed according to company settings.

Settings

  • Input Sensitive Information Check(ON/OFF): Turns inspection on or off for this policy target. It operates as follows depending on the inspection method.
  • Self-Inspection (Regular Expression): If you turn the inspection ON,Regular Expression Selection(Select from the list registered in sensitive information management, new additions possible) andLog OptionsSets.
    • Log storage scope: All cases / Only blocked cases
    • User input content included: Whether to include the text entered by the user in the inspection log.
  • External Integration: Only the inspection ON/OFF setting is configured, and the regular expression and log detailed settings are handled by the external inspection system.

If this item (Data Security > Input Sensitive Information Check) is not visible, you need to enable the input prompt firewall. Please contact SOFTCAMP.

Core Values

  • Prevention: Unlike the existing method that detects after transmission, it inspects and blocks before the input is sent externally.
  • Original text not leaked: Designed to only transmit results that have passed inspection, preventing sensitive information from being sent to external services or remote screens.
  • Bypass Blocking: Perform inspection and judgment at a control point rather than the user local, blocking bypassing the inspection by local tampering.
  • Judgment·Record: It determines whether the text file is allowed or blocked, and logs the entire process as an audit log.

Policy Settings​

You can set the usage and validity period of this conditional policy.

Usage status

  • use: The policy is activated and works immediately
  • Not in use: The policy is disabled and does not operate.

Expiration Date

  • If not set: Operates indefinitely
  • Expiration Date Usage: Checking the 'Expiration Date' item activates the calendar.
  • Set the period by selecting the start date and end date.
  • Policy operates only during the set period.

Policy Application Priority​

  • If multiple policies conflict, the policy with a higher priority (a smaller number) will be applied.
  • You can adjust the priority by dragging and dropping in the policy list.
  • If multiple policies are set for the same conditions, the most restrictive policy takes precedence.
  • Policy priorities are important for the effective management of policies, so they should be set carefully.

Priority Quick Move​

After selecting a policy, you can quickly change the priority using the following methods.

  • Move to top / Move to bottom: Move immediately to the top or bottom
  • Priority Move Dropdown: Select the desired number to move directly to a specific location

⚠️ Priority changes are not possible when search filters are applied. Please proceed after clearing all filters.

Download Policy Status​

You can download the list of conditional policies as an Excel (.xlsx) file. This is provided separately from the existing JSON backup feature.

  • Full Download: Save all registered policy information as an Excel file
  • Download Search Results: Save only the results with the current search filter applied as an Excel file

💡 JSON download is for policy backup and restoration, while Excel download is used for status analysis and reporting purposes.

Management of Default Execution Policy​

This is a feature that allows you to pre-set and manage default values that are automatically filled in the execution policy and isolation security policy items when registering a new conditional policy. It reduces repetitive manual settings and prevents setting omissions and input errors.

Accessing the Default Value Management Screen​

Click the [Manage Execution Policy Defaults] button on the right side of the top button bar of the policy list.

[+ Policy Registration]  ...  [Execution Policy Default Management]

※ The default values for the app and the URL input field are managed independently. Changing the default value in one menu does not affect other menus.

Default Value Setting Range​

The items that can be set in the default value management screen are as follows.

itemWhether to apply default valuesNote
Policy Name / Description❌Unique input for each policy
Members / Target App❌Unique designation for each policy
Conditions (Location·Time)❌Directly set for each policy
Execution Policy (Access Policy · Additional Authentication)✅
Isolation Security Policy (Keyboard, File, Clipboard, Session, Context Menu, etc.)✅
Settings (Enabled/Disabled · Validity Period)❌

Save Default Value​

After setting the execution policy and isolation security policy items on the default value management screen, click the [Save] button.

Actionresult
[Click Save]The current settings are saved as the default values for the app conditional policy. They will be automatically applied when a new policy is registered.
[Cancel] ClickReturn to the list screen without saving changes
Default value not set (initial)Display in system initial value (fully allowed, not set) status

Automatic application upon registering a new policy​

[Add Policy] When clicked, the execution policy and isolation security policy items are automatically filled with the default values saved. Enter the policy name, members, target app, and conditions, and register by modifying only the necessary items.

statusAction
If a default value is setExecution Policy · Isolation Security Policy has been reset to default.
If no default value is setInitialize to system default values (same as existing operation)
If manually modified after automatic applicationThe modified value takes precedence and does not affect the default value.

※ Automatic application only applies to the initial value setting when newly registered. It does not affect existing saved policies.

Apply default values in bulk to the selected policy​

After selecting the policy with checkboxes in the list, clicking the [Apply Default Execution Policy] button in the top button bar will overwrite the execution policy and isolation security policy items of the selected policies with the current default values.

How to use

  1. Select the checkbox for the policy to apply the default value from the list.
  2. Click the [Apply Default Execution Policy] button in the top button bar.
  3. Check the default values to be applied in the confirmation dialog (execution policy · isolation security policy summary).
  4. Clicking the [Apply Default] button will immediately apply the default values to the selected policy.

⚠️ The default values will be saved immediately. The policy name, description, members, target app, conditions, and settings will not be changed.

⚠️ If no default value is set, the system's initial value will be applied.