ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Files uploaded to Salesforce are not detected by CloudSOC

book

Article ID: 213005

calendar_today

Updated On:

Products

CASB Security Advanced CASB Security Premium CASB Security Standard CASB Securlet SAAS CASB Securlet SAAS With DLP-CDS

Issue/Introduction

When a user uploads files to Salesforce, not all events are detected by CloudSOC. There are no corresponding DLP violations when the files should match the DLP policy.

Cause

Some files uploaded to Salesforce are considered as "Salesforce files" rather than attachments. Therefore, the Salesforce Securlet requires the Query All Files option enabled in Salesforce.

Environment

Release : 1.0

Component :

Resolution

As per the Salesforce Tech Note, please enable the Query All Files option in Salesforce in order to retrieve all files from the organization, including files in non-member libraries and files in unlisted groups, in order to see the data in CloudSOC. 

Additional Information

Please refer to Tech Note--Salesforce Securlet for additional information:

https://techdocs.broadcom.com/content/dam/broadcom/techdocs/symantec-security-software/information-security/symantec-cloudsoc/generated-pdfs/14-Salesforce-Securlet.pdf