GSUITE securlet response actions mapped to DLP response actions

Products

• CASB Advanced Threat Protection
• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS
• Data Loss Prevention
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package

Issue/Introduction

GSUITE securlet response actions mapped to DLP response actions

Resolution

Securlets	CASB Remediation	DLP Remediation	GDrive	TeamDrive (Folder)	Gmail	Google Site	Keep
Remediation Supported	Remove Shared Link	Remove Shared Links in DAR	Yes		N/A	Yes	N/A
Type of Exposures			Public Internal	Public (Files only Internal All(Files only)		Public Internal	N/A
Remediation Supported	Prevent download, copy or print	Prevent download, copy, print	Yes		N/A	Yes	N/A
Type of Exposures			Public Internal External	Public (For FIles only) Internal (For FIles only) External (For FIles only)		Public Internal External
Remediation Supported	Update Collaborator Role---->Writer Update Collaborator Role---->Reader Update Collaborator Role---->Commenter	Set Collaborator Access to Edit Set Collaborator Access to Read Set Collaborator Access to Preview	Yes		N/A	Yes(Except "Comment" all are supported)	N/A
Type of Exposures			External	External (For Files Only)		External
Remediation Supported	Remove External Collaborator	Remove Collaborator Access	Yes	Yes	N/A	Yes	Yes
Type of Exposures			External	External(For Files Only)		External
Remediation Supported	Anyone can view	Set File Access to 'All Read'	Yes		N/A	Yes	N/A
Type of Exposures			Public	Public (For Files Only)		Public
Remediation Supported	Anyone within domain can edit	Set File Access to 'Internal Edit'	Yes		N/A	Yes	N/A
Type of Exposures			Internal	Internal (For Files Only)		Internal
Remediation Supported	Anyone within domain can view	Set File Access to 'Internal Read'	Yes		N/A	Yes	N/A
Type of Exposures			Internal	Internal (For Files ONly)		Internal
Remediation Supported	Quarantine Copy/Move/Move with tombstone	Quarantine DAR (Copy, Move & Move with tombstone)	Yes	Yes	N/A	Yes	N/A
Type of Exposures
Remediation Supported	Anyone within domain can Comment	N/A	Yes		N/A	N/A	N/A
Type of Exposures			Internal	Internal (For Files Only)
Remediation Supported	Anyone can edit Anyone can view Anyone can comment Anyone with the link can edit Anyone with the link can view Anyone with the link can comment	N/A	Yes		N/A	Yes (Except "Comment" all are supported)	N/A
Type of Exposure			Public	Public (For Files Only)		Public
Remediation Supported (Team Drive only)	Update Member Role----> Writer Update Member Role----> Reader Update Member Role----> Commenter Update Member Role---->Organizer	N/A	N/A	Yes	N/A	Yes (Except "Comment" all are supported)	N/A
Type of Exposures
Remediation Supported (Team Drive only)	Remove External Team Drive Member	N/A	N/A	Yes	N/A		N/A
Type of Exposures				External
Remediation Supported (Mail only)	Move to Trash/Delete (Trash OR Delete remediation based on the mail scoped added	Delete DAR	N/A	N/A	Yes	N/A	N/A
Type of Exposures

DLP DAR remediation's not applicable to GSuite

ICT Classification and Tagging DAR

Perform DRM on DAR

Tag DAR

Quarantine

Note: Google Team Drive Folder level remediation's are available through CASB policies only.