topic Re: No Email protection for SaaS in General Topics

No Email protection for SaaS

Tech101 — Tue, 29 Mar 2016 16:43:07 GMT

The closest way to protect a SaaS email soltuion I have found is Proofpoint which has a wildfire API hook option.

I am supprised there is no SaaS service for forwarding attechments or inline scanning of email directly from paloalto networks.

Re: No Email protection for SaaS

Brandon_Wertz — Tue, 29 Mar 2016 19:14:10 GMT

Yeah, I guess that's a good point.

Question...What's Palo's answer to say Microsoft Office 365?

My company with a user populous of 25k+ was an on-prem exchange enviornment. We've just completed an enterprise transition to Office 365.

We're cracking SSL on this traffic so we can see inside the payload, but this traffic is no longer MAPI/SMTP as the Outlook clients actually makes a SSL connection now to a web URL.

This seems like all those "cool" functions of wildfire WRT SMTP are now gone.

Does anyone have any thoughts / comments / expereince with capes that exist in this type of an environment?

Re: No Email protection for SaaS

Tech101 — Tue, 29 Mar 2016 19:20:30 GMT

This is exactly my point, Aperture support "Office 365" however only the sharepoint parts / onedrive. Which seems odd.

Microsoft offers a sandbox detonation feature in their advanced filtering package and there are third parties that act as a front end relay to provide filtering.

For wildfire to be most effective the payload needs to be inspected and flagged as early as possible then blocked everywhere as fast as possible.

Re: No Email protection for SaaS

Brandon_Wertz — Tue, 05 Apr 2016 17:25:02 GMT

Well @Tech101 no responses yet, but this just did come out:

https://www.brighttalk.com/webcast/10903/195427?utm_medium=email&utm_source=Adobe%20Campaign&utm_campaign=FY16Q3%20Nagoya%2FPrevention%20Week%2005Apr16_0-1%20month

I'm sure you also saw the e-mail. Hopefully it'll provide some good info.