Enable File Inspection
To inspect files for threats, enable the file inspection features in security profiles for internet and private access, then assign the security profiles to internet and private access rules.
File Inspection uses multiple features to evaluate for malicious files. For details, see Manage File Inspection and Analysis.
Once inspections are complete, a file is either delivered to the end user or the connection is terminated and the user is shown a block page.
Once you have enabled File Inspection, to monitor and review Umbrella's inspection activities, use the Security Activity and Activity Search reports.