Gatelet policy to block external/personal Gmail or GDrive items.

Products

• CASB Audit
• CASB Gateway Advanced
• CASB Securlet SAAS
• CASB Security Premium
• CASB Security Standard
• CASB Securlet SAAS With DLP-CDS

Issue/Introduction

The use case is to block external/personal gmail, drive etc... access from users on the enterprise network

Certain functions that bounce to accounts.google.com to authenticate would switch to the google cert instead of applying the Cloud SWG (WSS) cert that is expected in order to block access to external/personal account access.

Cause

Enabling Google SafeSearch caused some cases where "drive.google.com" and "accounts.google.com" would NOT get SSL Intercepted.   

-   SSL Interception and Decryption is required for content to get analyzed by CASB

Resolution

DISABLE Google SafeSearch in Cloud SWG (formerly called WSS)...and confirm that CASB events and alerts are properly working.