Yammer gatelet not showing some events in Investigate

Products

• CASB Advanced Threat Protection
• CASB Gateway

Issue/Introduction

In CloudSOC -> Investigate, Yammer events are not showing, or only some events are showing like Login events, but not Upload or Download events

Resolution

Yammer Gatelet monitors the following URLs:

assets-yammer.com
login.microsoftonline.com
yammer.com
yammerusercontent.com

 

In CloudSWG console (Also known as WSS - https://portal.threatpulse.com -), log in then go to Policy -> TLS/SSL Interception -> TLS.SSL Interception Policy and review all the rules listed there. Ensure that there are no policies that monitor any of those URLs above where the Verdict is Intercept.

Also go to Connectivity -> Bypassed Traffic -> Bypassed Domains, and ensure that none of the above URLs are bypassed.

Go to Policy -> CASB Gatelets, and verify the Yammer Gatelet is listed.