# How to Request File Transfers After Enabling Outbound File Transfer Control

Canonical: https://www.nsecsoft.com/en/course/out-approval.html

Language: en-US

Updated: 2026-11-04T07:56:04.3324Z

To implement "employees' outgoing documents require approval", you need to create an approval template first, then enable "Allow application for outgoing document approval" in the outbound file transfer control policy, and select the corresponding approval template\. This mechanism is suitable for governance scenarios where "outbound transactions are prohibited by default but compliance exceptions are allowed"\. \[…\]

To implement "employees' outgoing documents require approval", you need to create an approval template first, then enable "Allow application for outgoing document approval" in the outbound file transfer control policy, and select the corresponding approval template.

This mechanism is suitable for governance scenarios where "outbound transactions are prohibited by default but compliance exceptions are allowed". By approving outbound files, administrators can retain control over high-risk outgoing behavior without blocking necessary business collaboration due to absolute blocking. This is a common compromise for many companies in managing outbound files.

#### **Create approval template**

#### **Set the "Approval Outsourcing" strategy**

1\. Click

**Data Security**

→

**Policy**

on the console to enter the data security policy settings page.

2\. Click

**File Security**

, turn on

**File Outgoing Control**

, and click

**Parameter Settings**

.

3\. Click

**Add**

on the outbound file transfer control setting interface to create outbound file transfer control rules.

![](<https://www.nsecsoft.com/site-assets/bd479a7e2f6829c160217f5ef8075eb7317c364c4447adfeb14f5da8239c94ec/19d46b25b92526832339e8c8d9afd41b9a31d796813f9c8079a08aad3133d73f/abf452e59f281a10224b4bd85e3e378e8a463f07018801f8075883ddf36103ae/3-out-approval-1.png>)

4\. Check

**Allow application documents to be sent out for approval**

and click

**Settings**

to configure the outgoing approval process.

5\. Select the approval template created in advance in the process settings and configure the following options as needed:

**Do not upload the original file if the file is too large**

:  
Check

**If the file size exceeds the specified size, the file will not be uploaded and only the file information will be verified**

to improve approval efficiency.

**Validity time after approval**

:  
You can set the validity period after approval. For example, if it is set to 1 hour, the document will be prohibited from being sent out again 1 hour after the approval is passed, and employees need to resubmit for approval.

**Select approval process by suffix name**

:  
Click

**Add**

below to configure different file extensions corresponding to different approval processes to support employees in selecting approval processes based on file types (provided that the corresponding processes are checked and available).

**Linkage with encrypted documents (optional)**

:  
If the controlled outbound files are encrypted files, employees usually need to decrypt the files before sending them out. By turning on this function, the original files can be automatically decrypted after passing the outgoing approval.  
You can click

**Other Settings**

and check

**After approval, apply for automatic decryption of encrypted source files on the endpoint**

.

6\. After the policy setting is completed, confirm the application policy endpoint. After confirming that it is correct, click

**Apply**

to issue the employee approval outgoing policy.

#### **Implementation suggestions and effect verification**

After the policy is issued, it is recommended to initiate a controlled file outflow on the test endpoint to confirm whether the endpoint will trigger the approval application process, and verify the validity time after the approval is passed, whether automatic decryption of the original file is allowed, and whether different suffix names can match the expected process. In this way, deviations in template configuration or process matching can be discovered in advance.

-   If the enterprise approval link is complex, it is recommended to unify the naming and application scope of the approval template first to avoid difficulty in subsequent maintenance by administrators.
-   **Validity time after approval** should not be set too long, otherwise it is easy for one approval to cover subsequent unrelated external behaviors for a long time.
-   For scenarios where encrypted files are sent out, it is recommended to carefully verify the applicable boundaries of automatic decryption to ensure that business efficiency is met without weakening encryption control.