Forum Discussion

pradocn's avatar
pradocn
Copper Contributor
May 13, 2021

CAS / MIP / DLP Secure Whatsapp session

Hello guys,

 

I am looking for a way to enable users from my company to use whatsapp web and control the session using CAS, MIP and DLP to prevent data exfiltration, is there a way to do that?

I'm new to that solutions and wasn't able to find any documentation about that.

 

thanks a lot!

Cloud App Security

6 Replies

Sort By
  • MoisesLTD's avatar
    MoisesLTD
    Copper Contributor
    Dec 27, 2022
    I have the same problem. I can't add Whatsapp to a session policy. Any update on the case?
  • David Caddick's avatar
    David Caddick
    Iron Contributor
    May 17, 2021
    Hi Pradocn,

    Potentially you might want to use MCAS, set WhatsApp as a sanctioned App.
    You can "Edit App Details" and this will allow you to check a box "Use with Conditional Access App Control". This should then allow you to create a "Session Policy" to block uploads via Conditional Access.

    There is also:
    portal.cloudappsecurity.com/#/policy/discovery-anomaly/5e8f4921a11d96a098280ac4
    Use the "App Tag" to create a specific tag called "WhatsApp" and apply it - this way it can be targeted specifically to WhatsApp instead of either Sanctioned or Unsanctioned Apps
    See how you go from there?

    • pradocn's avatar
      pradocn
      Copper Contributor
      Jun 11, 2021

      David Caddick thanks for the reply!

      I did as you told me, set WhatsApp as a sanctioned App and checked "Use with Conditional Access App Control":

       

      But when I try to create a "Session Policy" to block uploads via Conditional Access whatsapp it is not available.

       

       

      Best regards,

      Arthur Prado

Resources