English (US)
Log in
首頁
首頁
TECHNICAL RESOURCES CENTER
Need help with setting up Workplace, managing domains or other technical info? Look no further.
Getting Started
Just launched Workplace and not sure what to do next? We've got everything you need right here.
Technical Resources
You don't have to be an IT genius to launch Workplace, but if you are then these technical resources are for you.
In-depth hubs
Our resource hubs will help you master some of Workplace's most popular features and embrace new ways of working.
Help Center
Find step-by-step instructions and answers to frequently asked questions.
Set up Guides
From adding a domain to inviting users, follow this step-by-step guide to set up your Workplace.
Domain Management
Find out why domain management matters - and how to do it properly.
Workplace Integrations
Discover how to bring all your tools together. Something missing? Learn how to build your own integrations.
Account Management
Keep your Workplace up to date by creating, maintaining or deactivating user accounts.
Authentication
Make sure you only give access to the right people by integrating with your current identity solutions.
IT Configuration
Learn how to keep Workplace running smoothly with info on networks, email whitelisting and domains.
Account Lifecycle
Understand the process of inviting members of your organization to claim their accounts.
Security and Governance
Get the lowdown on how we keep your people and information safe on Workplace with added technical terminology.
Workplace API
Learn how you can automate and integrate your custom solutions with Workplace using our API.
Live Video resources
Looking to use Live Video to transform your Town Halls? This is the place to get tips, guides and practical insights.
Knowledge Library resources
Wish your intranet was a little more inspiring? Use these Knowledge Library resources to get started.
Working from Home with Workplace
So you've embraced remote work - now what? Stay on top of your game with these guides, videos and customer stories.
New rules of engagement
Turn hybrid teams into high-performing teams by learning more about the new rules of employee engagement.
Getting started
From launching Workplace to paying for it, learn more about those crucial first steps.
Using Workplace
This is where we reveal the hidden depths Workplace has to offer with tips and info on key features.
Managing Workplace
Got a specific question about managing content, data or employees? This is the place to ask it.
IT and Developer Support
Looking for answers to more technical questions about security, integration and the like? Start here.
Integrations
    Security
      Interactive Demo
        Customer Stories
        Workplace for Good
          Pricing Plans
            ROI Calculator
              Events & Webinars
                Ebooks & Guides
                  Newsroom
                    Workplace One Partner Program
                      Service & Reseller Partners
                        Ways to Work
                          Workplace Toolkits
                            Workplace Academy
                              Support
                                Customer Communities
                                  What's New in Workplace
                                    English (US)

                                    Security and Governance

                                    Understand how your organization can control and protect your accounts.

                                    Overview

                                    Overview

                                    It may happen that users inadvertently share or post bad files or links into Workplace. We are uniquely placed, as a SaaS vendor, to protect users against being exploited by all manner of phishing and social engineering attacks. As a core part of maintaining the security of information on Workplace, we implemented controls to mitigate this risk.

                                    • Every time a user clicks on a link in Workplace that request will be routed through our systems, which check in real time if the site is dangerous. If the site is found to be dangerous, the system will interrupt the request and notify the user.
                                    • Similarly, files uploaded to Workplace will subject to deep inspection by multiple integrity systems and blocked if they are identified as malicious.
                                    • Workplace also has limits to prevent abuse of our features and to protect people on your community from spam and harassment.
                                    ?
                                    Although we offer these security measures, it is still the responsibility of a Workplace community to control the data that it creates.
                                    Link Protection

                                    Link Protection

                                    Being able to run a check at click time (i.e. when a user clicks on a link) enables us to have more sophisticated classification than what we have at display time (i.e. when the link is displayed). In addition to our own internal list and integration with external blacklists, we use advanced machine learning classifiers to check the authenticity of the sender along with a slew of other inputs.

                                    The link protection service also allows us to protect users who consume content via email. If we relied on display-time filtering or other means alone, we would not be able to retroactively block any malicious URLs that had been sent over email. To help defend against this threat, all links to non-Workplace URLs in email are rewritten to first go through the link protection system. By building our system to use click-time checks, users clicking links in their notification emails will still be prevented from seeing malicious or spam contents.

                                    Malware Scanning

                                    Malware Scanning

                                    As Facebook has grown, our need to regulate the content put onto the platform has also grown. Over the years, Facebook has implemented numerous automated policies to try and ensure that our platform is safe for our users and that we do everything we can to prevent bad actors from using the platform.

                                    Workplace inherits a number of these automated policies, to the benefit of us and our users. One of these policies is the detection and flagging of malware. If we detect malware being uploaded by a user, we will inform the user and create a security log for an admin.

                                    We scan files using our anti-virus/anti-malware scanning service and check our repository for any files which we believe to be malicious. In order to better protect users of Workplace, it's useful to keep track of the bad actors. The data describing bad actors and their attack vectors is commonly referred to as threat intelligence, which comes from an industry exchange of malware signatures. At Facebook and Workplace, we collect, store, and rely on our threat intelligence systems to improve the security of our services.

                                    Check Malware Uploads reports

                                    To see how many malware uploads have been blocked:

                                    1
                                    Go to the Admin Panel.

                                    2
                                    Click Security.

                                    3
                                    Go to the Dashboard tab to view a summary of Malware Uploads Blocked.

                                    4
                                    Click on View to check the related Security Logs.