Managing OneDrive Sync client with CloudSOC Gatelets

book

Article ID: 188214

calendar_today

Updated On:

Products

CASB Gateway CASB Gateway Advanced

Issue/Introduction

Customer would like to know to what extent CloudSOC Gatelets can manage activity generated by the OneDrive Sync Client

Resolution

Q: Can CloudSOC Gatelets block uploads/downloads if the Sync client is being used?

A: Yes, CloudSOC Gatelets can address the common activities like file upload/download when using the Sync client.

 

Q: Can CloudSOC Gatelets manage file edits? For example, a user syncs a file to OneDrive that doesn't violate a DLP policy. However, at a later time they edit the document on their machine and add data which violates a policy.

A: File editing (even without the sync client i.e. when you take a file on OneDrive and say open with MS Word) results in the creation of incremental file chunks that are sent from the client to OneDrive. This means that the full context of the document is only available on a full download or at rest using the Office365 Securlet. As such this would require a combination of Securlet and Gatelets to capture a comprehensive DLP strategy.