Yammer gatelet not showing some events in Investigate
search cancel

Yammer gatelet not showing some events in Investigate

book

Article ID: 264076

calendar_today

Updated On:

Products

CASB Advanced Threat Protection CASB Gateway

Issue/Introduction

In CloudSOC -> Investigate, Yammer events are not showing, or only some events are showing like Login events, but not Upload or Download events

Resolution

Yammer Gatelet monitors the following URLs:

assets-yammer.com
login.microsoftonline.com
yammer.com
yammerusercontent.com

 

In CloudSWG console (Also known as WSS - https://portal.threatpulse.com -), log in then go to Policy -> TLS/SSL Interception -> TLS.SSL Interception Policy and review all the rules listed there. Ensure that there are no policies that monitor any of those URLs above where the Verdict is Intercept.

Also go to Connectivity -> Bypassed Traffic -> Bypassed Domains, and ensure that none of the above URLs are bypassed.

Go to Policy -> CASB Gatelets, and verify the Yammer Gatelet is listed.