MS Teams Securlet content inspection for chat and file share

Products

• CASB Advanced Threat Protection
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS

Issue/Introduction

Does MS Teams include content inspection (CI) for the chat function and file share with third party?

 

Resolution

 

• Does MS Teams include content inspection (CI) for the chat function?
  
  ANS: YES - Engineering confirmed that Chat & Messages features use the same Microsoft Teams API
  
  
• From Microsoft Teams Content Inspection Tech Doc
  "CloudSOC scans Teams messages in 15-minute intervals.
  There may be delays in receiving incident information from vendors through their REST APIs
  
  
  
• Does this include content inspection for file share with 3^rd parties?
  
     ANS: YES - MS O365 Securlet OneDrive and Sharepoint file remediation actions. 
  
  
• Is there a documented list for the content inspection?
  
  ANS: MS Teams Content Inspection (CI) capabilities are listed in the two Tech Docs above.
  
  MS Teams can do Block / Notify on Chats, Messages. CI for files are  handled by the MS O365 API.