External DLP incident fail to trigger for specific users

Products

• CASB Security Advanced

Issue/Introduction

Some users will trigger External DLP Policies, while other users will not trigger the policy.

This issue is securlet independent.

For Office 365 it could affect Sharepoint or OneDrive or both.

Cause

CloudSoc was missing Office 365 users in the database.

Resolution

A weekly sync from the Office 365 Securlet will add users that where missed.