Natively mounting storage for inspection and sandboxing in the cloud

A secure data transfer system comprising:

• a non-transitory storage device having embodied therein one or more routines operable to prevent users of an enterprise network from accessing malware infected files that stored within public cloud file stores;
• and
• one or more processors coupled to the non-transitory storage device and operable to execute the one or more routines, wherein the one or more routines include:
• an untrusted file processing module, which when executed by the one or more processors:
• accesses an untrusted file stored within a first repository of a public cloud file store, wherein the public cloud file store is natively mounted on a network security device that is protecting the enterprise network and wherein the users do not have read access to the first repository of the public cloud file store;
• and
• causes the network security device to make a determination regarding whether the untrusted file is a clean file that is free of malicious content by applying one or more security checks to the untrusted file;
• and
• a clean file transfer module, which when executed by the one or more processors, makes the clean file accessible to the users by, when a result of the determination is affirmative, copying the clean file from the first repository to a second repository that is accessible to the users.