MVISION Cloud for Salesforce extends DLP protection, threat protection, encryption, and more for the data stored in your organization's Salesforce deployment. In addition, you can use MVISION Cloud's reporting features to conduct forensic investigations.
There are two ways to configure MVISION Cloud for Salesforce:
- API. When you deploy MVISION Cloud via API, you can use threat detection features for notification of activities and violations in Salesforce. In addition, you can use On-Demand Scanning for Salesforce.
- Proxy. Proxy-based configuration allows real-time enforcement of your organization's policies. Proxy configuration also allows you to monitor conversations in Salesforce chatter, and also applies DLP protection to text added to the Notes field in Salesforce.
Support for Salesforce APIs
MVISION Cloud supports current versions of the published Salesforce APIs. This is relevant to customers who use on-premise ETL tools to load and extract data from Salesforce, customers who integrate with AppExchange partners that retrieve data from Salesforce via the APIs, and customers who exchange data with external parties via these APIs. In all cases, the tool calling the API must do so via the MVISION Cloud Secure Gateway to encrypt and decrypt data as it is routed into and out of Salesforce. This means that instead of calling https://login.salesforce.com, the tool in question calls the APIs via the MVISION Cloud Secure domain (https://logincrm.company.myshn.com)
Access to the APIs requires that the Salesforce user has appropriate permissions, that the user knows their security token, and that the security token is presented during authentication. MVISION Cloud imposes no additional authentication requirements, so these are the same requirements a user would have if trying to access the APIs directly.
Depending on the amount of data you are loading into or extracting from Salesforce and your internal network architecture, you might want to deploy versions of MVISION Cloud that are dedicated to supporting these APIs. For example, if you need to extract large amounts of data during regular business hours, a dedicated instance of the Secure gateway can make sure that users are not impacted by these large data movements. Discuss your specific use case with your MVISION Cloud consultant to determine what deployment option is best for you. The figure below depicts the deployment of the Data Loader/ETL tool alongside the optional MVISION Cloud Secure Gateway for ETL.