[Gateway] Sandboxing test policy (#18700)

src/content/changelogs/casb.yaml

@@ -12,7 +12,7 @@ entries:
   - publish_date: "2024-06-03"
     title: Atlassian Bitbucket integration
     description: |-
-      You can now scan their Bitbucket Cloud workspaces for a variety of contextualized security issues such as source code exposure, admin misconfigurations, and more.
+      You can now scan your Bitbucket Cloud workspaces for a variety of contextualized security issues such as source code exposure, admin misconfigurations, and more.
   - publish_date: "2024-05-23"
     title: Data-at-rest DLP for Box and Dropbox
     description: |-

src/content/docs/cloudflare-one/policies/gateway/http-policies/file-sandboxing.mdx

@@ -55,6 +55,24 @@ To begin quarantining downloaded files, turn on file sandboxing:
 
 You can now create [Quarantine HTTP policies](/cloudflare-one/policies/gateway/http-policies/#quarantine) to determine what files to scan in the sandbox.
 
+## Create test policy
+
+To test if file sandboxing is working, you can create a Quarantine policy that matches the [Cloudflare Sandbox Test](https://sandbox.cloudflaredemos.com/):
+
+1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Gateway** > **Firewall policies**, then select **HTTP**.
+2. Select **Add a policy**.
+3. Add the following expression:
+
+   | Selector | Operator | Value                         | Action     |
+   | -------- | -------- | ----------------------------- | ---------- |
+   | Host     | is       | `sandbox.cloudflaredemos.com` | Quarantine |
+
+4. In **Sandbox file types**, select _ZIP Archive (zip)_.
+5. From a device [connected to your Zero Trust organization](/cloudflare-one/connections/connect-devices/), open a browser and go to the [Cloudflare Sandbox Test](https://sandbox.cloudflaredemos.com/).
+6. Select **Download Test File**.
+
+Gateway will quarantine and scan the file, display an interstitial status page in the browser, then release the file for download.
+
 ## Compatibility
 
 ### Supported file types