Salesforce Security and Dynamic Masking Support

DataSunrise 12.1 expands Salesforce protection with Security Rules and Dynamic Masking Rules in Web Application mode. Teams that already monitor Salesforce activity with DataSunrise can now block unauthorized operations and mask sensitive data in Salesforce responses.

Why Salesforce Needs Active Protection

Salesforce often contains customer records, financial information, case data, contact details, and other sensitive business information. Audit visibility is important, but many organizations also need active controls that reduce exposure and prevent unauthorized operations.

With DataSunrise 12.1, teams can move beyond visibility and apply policy controls directly to Salesforce web application traffic. DataSunrise can monitor Salesforce operations, enforce security decisions, and mask sensitive data before users receive a response.

What DataSunrise Adds for Salesforce

Salesforce support now includes:

• Audit Rules to monitor and log Salesforce operations
• Security Rules to block or disconnect unauthorized Salesforce activity
• Dynamic Masking Rules to mask sensitive data in Salesforce responses

DataSunrise applies these controls through its web application proxy architecture for Salesforce.

Security Rules for Salesforce

Security Rules help enforce policy decisions for Salesforce operations. Administrators can define conditions for Salesforce traffic and configure actions such as blocking or disconnecting sessions when activity violates policy.

This gives security teams a way to move from passive monitoring to active control for sensitive Salesforce environments.

Example use cases include:

• Blocking unauthorized access attempts
• Restricting operations based on policy conditions
• Reducing exposure from suspicious or non-compliant Salesforce activity
• Applying consistent DataSunrise rule management to Salesforce web application traffic

Dynamic Masking for Salesforce

DataSunrise can now apply Dynamic Masking Rules to Salesforce responses. When a rule matches sensitive data, DataSunrise masks the returned values before they reach the user.

Salesforce Dynamic Masking in DataSunrise 12.1 supports information type-based masking. This helps teams protect common regulated data classes such as personal identifiers, financial values, contact data, and other sensitive information that DataSunrise information types detect.

The current Salesforce scope does not include column-level masking, row hiding, or custom masking functions.

Configuration Overview

Salesforce protection uses DataSunrise Web Application mode. The typical setup includes:

1. Deploy the DataSunrise web application proxy infrastructure.
2. Configure Salesforce connection settings.
3. Add Salesforce as a database/application target in DataSunrise.
4. Create Audit, Security, or Dynamic Masking rules for Salesforce activity.

After setup, DataSunrise can monitor Salesforce operations such as create, retrieve, update, and delete actions, then apply the selected policy controls.

Unified Policy Management

By adding Security and Dynamic Masking support for Salesforce, DataSunrise 12.1 brings Salesforce closer to the same policy-driven protection model that teams use across databases and other supported data platforms.

Organizations can audit Salesforce activity, block unauthorized operations, and reduce sensitive data exposure using DataSunrise rule workflows.

For setup instructions and current limitations, see the updated Salesforce configuration section in the DataSunrise User Guide.