Cloud DLP Protect GW Policy "Messages" option not selectable
search cancel

Cloud DLP Protect GW Policy "Messages" option not selectable

book

Article ID: 378970

calendar_today

Updated On:

Products

CASB Gateway Advanced CASB Gateway CASB Security Advanced CASB Security Premium CASB Security Standard CASB Securlet SAAS CASB Securlet SAAS With DLP-CDS

Issue/Introduction

When creating a new CloudSOC Protect policy type "Data Transfer via Gatelets"

Data Transfer Type -  "Messages" is not selectable with exclamation point in a triangle.

Cause

There needs to be GW Message events in order to enable this Protect Policy option

Resolution

  1. Enable MS Teams Gatelet in CloudSOC Store
  2. Wait 2-3 min for sync to Cloud SWG tenant
  3. Confirm MS Teams now showing in SWG / CloudSOC Gatelets
  4. In Cloud SWG / Agents, or on Agent on PC click “Reconnect” – to sync changes. Or reboot PC
  5. On same PC - Login to MS Teams - send a test message.
  6. In CloudSOC Investigate – confirm that MS Teams test message GW event was captured
  7. "Messages" option in Protect / Policy / Data Transfer via Gatelets is now available.

    Note: MS Teams App is just an example of an APP that will have "message" activities / events.
  8. There may be other Apps with messaging capability that could be enabled instead

Additional Information

If MS Teams not in use - can follow same sequence substituting a different messaging App such as Slack, Google Chat, etc. - enabling it's associated Gatelet first.