For prerequisites and installation steps for Webex, see Webex Quick Start Guide
Cloudlock for Webex supports a monitoring scope for organizations wanting to customize which users are monitored. You can configure your monitoring scope in the Platforms tab of the Settings page by selecting the Webex platform. You have the option to monitor files of all users, specific users, or all users with the exception of specific users. Adding a list of domains will monitor the selected scope within those domains.
Monitoring scope applies only to Webex Messaging (Teams).
- Build Your Own: Event Analysis
Please note that only Platforms, Events, Users and Exposure fields are available for Events Analysis policies for Webex.
Shared with any External User
A violation triggers in any of these conditions:
- the message is posted in a direct space with an external user
- the message is posted in an internal group space with at least one external user
- the message is posted in an external group space with at least one external user
A violation does not trigger in any of these conditions:
- the message is posted in a direct space with an internal user
- the message is posted in an internal group space with only internal users
- the message is posted in an external group space with only internal users
Shared with any users outside the domain(s) in Settings
A violation triggers if one or more users in the space is not part of the domains mentioned in the Monitoring Scope Settings
A violation is triggered under any one of these conditions:
- the participating user or space is mentioned here
- the participating space classification belongs to the classification name mentioned here
- the user domain is one of the domains mentioned here
Only those spaces created by the Webex Teams Admin who authorized Cloudlock can be selected for policy specific monitoring.
Deletes a message or attachment with sensitive information (according to the policy's configuration.)
Only messages and files from internal users can be deleted. Messages and files from external users will be deleted from the internal chat space (for internal viewers) but external users will still be able to view the message or file.
A) User A and User B are both part of an organization monitored by Cloudlock.
- In a private chat with User B, who is also in this organization, User A posts a message that violates a policy and triggers this response action. The message will be deleted from the chat and not visible to either user.
- In a group chat or space with other internal users, User A posts the same message which violates the policy. The message is deleted from the group space and no user can view it.
B) User A is part of an organization monitored by Cloudlock, while User C is an external user from an organization not monitored by Cloudlock.
- If User A posts a message which violates a policy and triggers this response action, the message is deleted and neither party can view the message.
- If User C posts a message in the chat that violates the policy and triggers this response action, the message is deleted from User A's view of the chat, but cannot be deleted from the external user.
C) User A and User C are part of a group space that contains mostly internal users and some external users.
- User A posts a message that violates a policy. The message is deleted from the space and no user is able to view the message.
- User C posts a message in the chat that violates the policy. The message is deleted from the space but only internal users cannot view the message; any external users will still see the message in the chat.
Sends a Webex Teams customizable message to specified users when a Webex Teams incident is triggered.
When a Webex Teams incident is triggered, it sends a customizable message to the user that triggered the incident via Webex Teams.
Notify Admin or User by Message
Please note that the Notify Admin by Message and Notify User by Message response actions cannot perform if external messaging is blocked. The option to block external contacts from Team Spaces must remain unchecked for either action to occur. This setting can be found in the Cisco Webex Teams Control Hub.
Removes the user that triggered an incident from the Team Space.
- Users in direct messages cannot be removed.
- Moderators of a Space or Team cannot be removed.
- If a user is removed from a Team’s default space General, the user is also removed from all other spaces within that Team.
Webex incidents include all the same details as other platforms' incidents, and add the space where the attachment or post was made. For direct messages, the field will say Direct with an ID of the chat between the two users.
For messages posted in spaces, the name of the space and the ID number is listed.
The space is listed as the collaborator as everyone with access to that space has access to the post or attachment.
If the participating space has an associated classification, the name of the classification will be listed.
An incident that violated a custom regex policy (US SSN) when the user attached a word document with social security numbers.
A similar policy was violated when a social security number was posted in a chat space.
Updated 8 months ago