Configure Zoom for the Next Generation API Data Protection

To configure Zoom for the Next Generation API Data Protection, follow the instructions below.

Prerequisite

• A user account with owner role is required to grant access to Netskope.

• If you have guest or external users in your SaaS environment belonging to domains considered internal, you must set the appropriate internal domains for Netskope to classify exposure accurately. To set up internal domains, follow this article.

Webinars not supported

Currently, Next Generation API Data Protection does not support or provide protection for Zoom webinars. Although Netskope requests webinar-related scopes and permissions during authorization, these are intended for a future release and are not used for webinar protection at this time.

Enable In-Meeting DLP Integration in Zoom

Next Generation API Data Protection can detect:

• DLP violations in in-meeting chat messages.

• threat violations in Zoom in-meeting chat attachments.

Next Generation API Data Protection can perform further automated remediation action like deleting the violated chat message and attachment to mitigate the security incidents. However, you should enable in-meeting DLP integration in our Zoom account. To do so, follow the steps below.

1. Log in to your Zoom account as an administrator with privileges to edit account settings.

2. On the left navigation, navigate to ADMIN > Account Management > Account Settings and click the Meeting tab.

3. Under In Meeting (Advanced), enable the following options:

   • Enable in-meeting chat DLP (Data Loss Prevention) integration

   • Include in-meeting chat files

   • Block in-meeting chat messages

   

   If the Enable in-meeting chat DLP (Data Loss Prevention) integration setting is unavailable, contact Zoom support to enable it for your account.

Configure Netskope to Access your Zoom Account

To authorize Netskope to access your Zoom account, follow the steps below:

1. Log in to the Netskope tenant UI and go to Settings > Configure App Access > Next Gen > CASB API.

2. Under Apps, select Zoom and click Setup CASB API Instance.

   The Setup Instance window opens.

3. Under Administrator Email, enter the email address of the user who will receive an email notification when a policy violation or event triggers. This step is optional.

4. Under Instance Name, enter a name of the SaaS app instance. This step is optional and if left blank, Netskope will determine the name of the app instance post grant.

5. Click Grant Access.

   The Zoom Login window opens.

6. Enter the Zoom owner username and password.

7. Review the permissions requested and click Allow.

   

   Webinar-related permissions are requested for future functionality. Webinars are not currently protected.

8. After accepting the permissions, you will be redirected to the successful result page. Click Close.

   To learn more about the permissions: Permissions Required for Zoom.

Refresh your browser, and you should see a green check icon next to the instance name.

Next, you can can view the Next Generation API Data Protection Inventory page to get deep insights on various entities on your Zoom account. For more information on the Inventory page, see Next Generation API Data Protection Inventory.

You can receive audit events and standard user behavior analytic alerts in Skope IT. To know more: Next Generation API Data Protection Skope IT Events.

Next, you should configure a Next Generation API Data Protection policy. To do so, see Next Generation API Data Protection Policy Wizard.