Apply Group to an Application Detection Configuration

Products

• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard
• CASB Securlet SAAS With DLP-CDS
• Data Loss Prevention Cloud Detection Service for REST

Issue/Introduction

Adding a CloudSOC group to the DLP's application detection configuration's group section can help refine the scanning scope and apply it to a selected group. The group entered in the DLP should match the name displayed in the CloudSOC Groups section. 

Resolution

For example, to add an Active Directory that is synced with CloudSOC through DSS, all the values in the Name columns should be copied:

The CloudSOC admin can click on the group name and double-click the name on the right pop-up window:

Then DLP admin needs to enter "Event Log Readers Event Log Readers (CN=Builtin,DC=example,DC=example,DC=org)" in the DLP.