Cloud SWG and integrated CASB known issues

Products

• Cloud Secure Web Gateway - Cloud SWG
• CASB Security Standard
• CASB Security Premium
• CASB Security Advanced
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced

Issue/Introduction

Common issues with Symantec CloudSOC integrated with Symantec Cloud SWG service.

Environment

CloudSOC.

CASB.

Cloud SWG.

Resolution

• Office 365: Some Outlook applications enter an infinite authentication loop accessing Office 365 tenants that use federated authentication. Exchange does not have the “Modern Authentication” feature enabled.

• General:

  • Cloud SWG will intercept SSL for any CloudSOC domain of interest by default, unless an explicit 'do not SSL intercept' rule exists for the CloudSOC domain.
    • In this later case, the Cloud Proxy will not forward traffic into CloudSOC and policies applying there for the gatelet will not apply.
  • The Cloud SWG DLP scanning policy may override CASB Gatelet routing.

• Dropbox: The Dropbox application fails to connect when the Dropbox Gatelet is enabled.

  • An incompatibility with the Dropbox application and SSL interception causes the problem.

  • Web browser access to Dropbox functions properly.

• Zoom: 
  • Desktop Application support is limited to allow/deny access (Access Enforcement Policy) 
  • Web browser for Zoom works as expected. However, see article below regarding steps needed to enable Zoom Gatelet.
  • https://knowledge.broadcom.com/external/article/235003/no-traffic-data-for-zoom-gatelet-is-moni.html