About Skyhigh CASB for Slack

Last updated
Save as PDF

Skyhigh CASB for Slack provides compliance and security governance through Data Loss Prevention (DLP) policies for data stored in Slack.

There are two ways to integrate Skyhigh CASB and Slack:

API. Using the API integration allows you to use near real-time DLP, collaboration control (including quarantining files). Skyhigh CASB for Slack supports real-time scanning of active files within a Slack implementation through the Slack API, and nearly all aspects of Threat Protection and activity monitoring.
Reverse Proxy. Best for those who want to have an inline real-time control over the data (Files/Chat messages/Snippets) being transferred to Slack and Contextual Access Control. The Skyhigh CASB Reverse Proxy solution doesn't require any endpoint control and integrates via SSO. The use case currently supported is to redirect all managed devices and block unmanaged devices. In general, native apps won't work and mobile browsers are supported. It needs to be validated based on the latest changes in native apps whether traffic comes to proxy and it can be supported through request headers attributes coming via SAML/MDM (Mobile Device Management solutions like Mobileiron, Microsoft Intune, VMware Airwatch) or via agents like Skyhigh Security Mobile Control Security (MMCS) or via User Agents

Slack Huddles Support

Skyhigh CASB for Slack provides a way for organizations to extend existing data loss prevention (DLP) policies to Slack huddles, which are used to set up quick meetings with internal or external users of a channel.

Slack huddles provides the following use cases:

Pure Content. Identifies the sensitive content of the messages or files shared by any user in the huddle and takes Quarantine/Delete as remediation actions.
Pure collaborations. If a user joins a huddle, Skyhigh CASB does not receive any event, so the pure collaboration policies cannot be applied.
Content-aware-collaboration. The collaboration policies are evaluated based on all channel members rather than the members who are present in the huddle. Although messages/files are shared in the huddle, Skyhigh CASB receives only channel information in the events and the received event does not contain any information about members who are present in the huddle.