AGAT

Categories
Security Announcement DLP webex guides

Collaboration without compromise: Real-time data loss prevention (DLP) for Webex messages and files

Data loss is a big concern for organizations

Today’s workforce is more distributed than ever. The ways that employees collaborate with each other and with customers and partners continue to increase. According to Metrigy, just 20% of companies now require employees to work within a traditional office. With the Hybrid Workplace, IT leaders responsible for securing data and applications are required to have a proactive plan that addresses security, governance, and compliance policies across all collaboration applications.

As users continue to rely on collaboration tools, and the increase in unmanaged device usage, data loss or leakage becomes a big concern for many organizations who need to prevent important information from being shared maliciously or accidentally, while users are collaborating via Meetings or Messaging. In most cases, users don’t even realize that they are sending sensitive information in their files or messages, so it is critical to have the right safeguards in place to keep your users and data safe and secure.

What is real-time DLP and when is it needed?

As businesses expand their ways of internal and external communication, having a true real-time data loss prevention (DLP) solution becomes even more pressing. A real-time DLP solution is crucial to effectively manage and protect your confidential information. This solution ensures that your sensitive data intercepted and filtered before it reaches the recipient.

Until now, the only option in the market has been near-real-time DLP. Near-real-time DLP is a reactive approach that deals with sensitive information after being seen and exposed to other collaborators. For example, if an employee would send a file or message containing sensitive data, that data would reach the destination user and only then be deleted. This often leaves a compliance gap allowing the other side to view and save the content sent.

For companies concerned with protecting their sensitive data at any instant, near-real-time DLP is not a sufficient approach. This risk of data proliferating in uncontrolled ways would be high specially in highly controlled industries. No one wants their sensitive data in the wrong hands even for a few seconds.

Webex and AGAT Software now offers real-time DLP for files and messages

I’m excited to share that Webex in partnership with AGAT Software now offers real-time DLP for both files and messages, enabling companies to now benefit from a real-time DLP solution for Webex. Webex’s new API allows files to be scanned before they are received by other collaborators. The API allows Webex partners to perform inspections as set in their DLP policies and decide whether the file should be allowed or blocked. Webex also allows partners to proxy the traffic to scan messages in real-time.

Data Loss Prevention policies are set to detect sensitive information in everyday Webex communications. The objective of such a solution is to block sensitive data at source, such as financial data (credit card numbers), intellectual property (inventions) and personal information (PII) from being sent in a Webex space to unauthorized internal or external users, whether by accident or on purpose.

In addition to scanning communication for sensitive information, there are also a range of other file related controls. You can block file uploads based on parameters such as file type and file size. You can also block file sharing between specific groups, users, or domains to comply with your organization’s compliance needs and regulations. This video shows how real-time DLP works as or when implemented by AGAT with their flagship SphereShield product.

image

With real-time DLP, both messages and files are blocked in real-time, and the destination user does not receive the sensitive data even for a second. Both the users and IT admin also receive notifications and incidents are audited in the admin portal.

Real-time DLP is the solution for companies that want to truly address their compliance and security needs without compromise.

Contact us today to see how AGAT Software can help with protecting your sensitive data from being released to unauthorized internal and external users.

For more information, please visit here: https://agatsoftware.com/webex-teams-inline-dlp/

Original source: https://blog.webex.com/messaging-chat/collaboration-without-compromise-real-time-data-loss-prevention-dlp-for-webex-messages-and-files/

Categories
DLP Microsoft Teams

Microsoft Teams DLP limitations: Controlling users when being Guests outside the organization.

Microsoft Teams DLP limitations: Controlling users when being Guests outside the organization

Controlling your users as a Guests in other tenants on external meetings

Microsoft Data Loss Prevention is rich in features and has a very wide adoption. In this article we will address two coverage limitations: First when a user is a Guest in an external tenant, and second, when an user joins a meeting hosted by external user.

microsoft DLP policies external internal 01

Introduction


This is not the first time we are talking about Microsoft’s Data Loss Prevention (DLP) add-on for Microsoft Teams. This is the previous delivery we had talking about the issue with near-real-time DLP

Now we want to put focus on an aspect that, although could be underestimated, it can significantly increase Dala Leak issues inside organizations.

Data is not inspected when your company users are guest in another company tenant 

The problem is the following: 

Suppose company A has Data Loss Prevention policies activated for their Microsoft Teams, but company B doesn’t.

Now, an employee from company A communicates with an employee from company B as a guest.

The issue will be that the DLP won’t act when that communication happens. 

Employee from company A will be able to send messages or files that violate company’s DLP without any barriers while he is a guest in company B

Data is not inspected by MS DLP when your company users joining anonymously meeting of other companies

A very frequent problem is that if a user is joining an external meeting as anonymous, this won’t be handled by native MS DLP

DLP for external chat sessions (chat with an external user) will only work if both the sender and the receiver are in Teams Only mode and using Microsoft Team’s Native Federation.

That means that if a user is joining an external meeting , this could not be handled by native Microsoft’s Data Loss Prevention

Why is it more serious than thought

Although DLP violations inside the company are already serious enough, DLP breaches to other companies will be all the more so.

Just think about an employee sending trade secrets, insider information, or any other sensitive information to other 3rd party companies.

The solution

SphereShield for Microsoft Teams Real-Time DLP addresses the problem in a complete way. It works both internally and externally, not leaving any room for DLP violations.
In addition users can opt-in for advanced DLP features that detect issues in audio conversations in real-time, as well as DLP detection for screen-sharing using OCR.

For more information, visit 

ms teams inline dlp

ms teams compliance recording and analysis

To get a free live demo, contact us

Microsoft Teams DLP limitations: Controlling users when being Guests outside the organization