Skip to content

Latest commit

 

History

History
57 lines (33 loc) · 2.71 KB

dlp-example-2.md

File metadata and controls

57 lines (33 loc) · 2.71 KB
title description keywords ms.date ms.topic author ms.author ms.custom ms.service ms.collection
Use DLP to block HTTP requests in chatbots
Block HTTP requests from being used by Power Virtual Agents chatbots.
PVA
10/07/2022
article
iaanw
iawilt
admin, dlp
power-virtual-agents
virtual-agent

Data loss prevention example 2 - Block HTTP requests from Power Virtual Agents chatbots (Preview)

[!INCLUDE Preview documentation notice]

Bot makers in your organization can extend their bots with Bot Framework Composer and use HTTP requests.

You can use data loss prevention policies to prevent bot makers from configuring HTTP requests to help prevent data exfiltration.

See the Configure data loss prevention for Power Virtual Agents chatbots topic for information about other DLP-related connectors.

Configure DLP to block HTTP requests in the Power Platform admin center

[!INCLUDE Preview documentation notice]

Add the connector

  1. Use the search box to find the HTTP connector.

    :::image type="content" source="media/dlp-example-2/http-connector.png" alt-text="Screenshot of the HTTP connector.":::

  2. Select the connector's More actions menu (⋮), and then select Block.

    :::image type="content" source="media/dlp-example-2/block-connector.png" alt-text="Screenshot of the Power Platform admin center showing the contextual menu for a connector available from the menu icon.":::

  3. Select Next.

  4. Review your policy, then select Update policy to apply the DLP changes.

    :::image type="content" source="media/dlp-example-2/update-policy.png" alt-text="Screenshot of the review screen when creating a DLP policy ":::

Confirm policy enforcement in Power Virtual Agents

You can confirm that this connector is being used in the DLP policy from the Power Virtual Agents web app.

First, open your bot from the environment where the DLP policy is applied. Go to the authoring canvas, and open (or create) a topic that includes a custom Bot Framework Trigger that uses an HTTP request.

If the policy is enforced, you'll see an error in the Topic checker that says DLP policies are blocking HTTP requests for the affected node. The error is titled "HTTP requests blocked" and includes a message advising you to remove the HTTP request or contact an admin.

:::image type="content" source="media/dlp-example-2/test-bot.png" alt-text="Screenshot of the Topic checker in Power Virtual Agents with an error message saying HTTP requests are blocked.":::

[!INCLUDEfooter-include]