Cloud storage encryption When the users of your network work with data that is stored in the cloud using a cloud storage service, Web Gateway provides a function for encrypting this data, together with the corresponding function for decryption. Cloud storage encryption — When a user uploads data to a cloud storage service, the data can be encrypted. Cloud storage decryption — When a user downloads encrypted data from a cloud storage service, the data is decrypted to enable the user to work with it. A suitable rule set is available from the rule set library on Web Gateway for configuring cloud storage encryption and decryption. Encrypting and decrypting cloud storage data To enhance security when users of your network complete in-the-cloud activities, you can configure the encryption of data that a user uploads to a cloud storage service. When the data is downloaded, it is decrypted to allow the user to work with it. Configure encryption and decryption of cloud storage data To configure the encryption and decryption of data that is uploaded to a cloud storage service or downloaded, complete the following high-level steps. Configure the settings for encrypting and decrypting data To configure the settings for encrypting and decrypting cloud storage data, work with two different module (engine) settings. Decrypt cloud storage data manually When you cannot use Web Gateway to decrypt cloud storage data, you can perform the decryption manually by running a suitable command if you know the algorithm and password that were used for the encryption. Cloud Storage Encryption rule set The Cloud Storage Encryption rule set is a library rule set for encrypting and decrypting data that is uploaded to and downloaded from cloud storage services.