Incorrect Service Reported for Data-in-Motion Policy Violations via Gatelet

Products

• Data Loss Prevention Cloud Detection Service for REST
• CASB Gateway Advanced
• CASB Gateway
• CASB Securlet SAAS

Issue/Introduction

When uploading files directly to OneDrive that violate a data transfer Gatelet-based policy, the service may appear as Microsoft Teams instead of Office 365.

Environment

CASB Gatelets

Cause

Gatelets such as OneDrive Enterprise, MS Teams, SharePoint Sites, Outlook Enterprise, and Office 365 are all part of the Microsoft Office suite. Because they belong to the same suite, these Gatelets share overlapping domains. As a result, activity in one app may sometimes display a different service name than the specific app being used.

Resolution

This is a known behavior and a limitation related to the underlying third-party architecture.