After O365 Securlet was Deactivated/Reactivated - missing expected activities
Article ID: 270993
Updated On:
Products
CASB Audit
CASB Advanced Threat Protection
CASB Gateway
CASB Gateway Advanced
CASB Security Advanced
CASB Security Advanced IAAS
CASB Security Premium
CASB Security Premium IAAS
CASB Security Standard
CASB Securlet IAAS
CASB Securlet SAAS
CASB Securlet SAAS With DLP-CDS
Issue/Introduction
In July 2023 Client discovered that they were missing activities in Investigate for CloudSOC (CASB) O365 Securlet
Client deactivated/reactivated CloudSOC O365 Securlet in mid July 2023 but this still did not resolve the issue
In Investigate / O365 Securlet - they were still missing:
Objects:
Email Message
Email File Attachments
Activities
Send
Receive
Resolution
The tenant processing was disabled as they had not reactivated O365 Securlet to enable Graph API after repeated reminders to do so before 30 June 2023
Engineering was notified, enabled processing from backend for this client who then deactivated/reactivated O365 Securlet again
After this Mail Objects and Send/Receive Activities began flowing into CloudSOC again
Feedback
Yes
No
Powered by
