Slack securlet response actions mapped to DLP response actions

Products

• CASB Advanced Threat Protection
• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS
• Data Loss Prevention
• Data Loss Prevention Cloud Detection Service for REST

Issue/Introduction

Slack securlet response actions mapped to DLP response actions.

Resolution

Securlets	Enforce Payloads	CASB Remediation	DLP Remediation (Enforce)
Remediation Supported (Files only)	quarantine	Move with tombstone (applies to files only)	Quarantine Data-at-Rest
Type of Exposures		Unexposed,Public,Internal,External
Remediation Supported	delete files	Not supported for slack	Delete Data-at-Rest
Type of Exposures			Not appplicable
Remediation Supported	encrypt	Not supported for slack	Encrypt Data-at-Rest
Type of Exposures			Not appplicable
Remediation Supported	collab_access_preview	Not supported for slack	Set Collaborator Access to 'Preview'
Type of Exposures			Not appplicable
Remediation Supported	restore	Restore -manual response rule	restore_file (smart response rule)
Type of Exposures
Remediation Supported (Message only)	Delete	No remediation rule supported from CASB	Delete Data-at-Rest
Type of Exposures			Not applicable

 

DLP DAR remediations not applicable to Slack

Perform DRM on Data-at-Rest

Tag Data-at-Rest

ICT Classification and Tagging Data-at-Rest

breaklinks

delete files

encrypt

prevent_download

file_access_all_read

file_access_internal_edit

file_access_internal_read

collab_access_read

collab_access_edit

collab_access_remove

collab_access_preview