To configure Cisco Webex Teams for API Data Protection, you need to authorize users in Cisco Webex Teams and grant access a in your Cisco Webex Teams instance.
There are two parts to this procedure:
- Configure Cisco Webex Teams user privileges
- Configure Cisco Webex Teams instance in the Netskope UI
Important
Cisco Webex may prevent Netskope to download file attachments for DLP scan. To avoid this, the Cisco Webex administrator should allow the Netskope IP address range. To know the IP address range, log in to your Netskope tenant, navigate to Settings > Security Cloud Platform > REVERSE PROXY > Office 365 Auth > NETSKOPE IP RANGES > SHARED IP RANGES.
To add the Netskope IP address range, you can follow this Cisco Webex article (Prevent people from sharing files outside your corporate network).
Configure Cisco Webex Teams User Privileges
Use your Webex Teams admin account to add user privileges and obtain the email address used in the Netskope app.
To configure Cisco Webex Teams for Netskope:
-
Log in to your Webex Teams admin account, and on the left pane navigate to Management > Users > Manage Users.
-
Add a user or use an existing user to grant access to the Netskope app.
-
On the Users page, click an existing or the newly created user and enable the Full administrator and Compliance Officer privileges.
-
Under Profile > Administrator roles, check the Organization administrator > Full administrator and Compliance Officer roles.
-
Save the changes, and then copy the email address of this user. You will need this when you create the Netskope instance in the next section.
-
On the left pane, navigate to Management > Account. Copy the name of your company. You will need this when you create the Netskope instance in the next section.
Configure Cisco Webex Teams Instance in the Netskope UI
To authorize Netskope to access your Webex Teams instance:
-
Log in to the Netskope tenant UI and go to Settings > Configure App Access > Classic > SaaS.
-
Select the Cisco Webex Teams icon, and then click Setup Instance.
-
The Setup Instance window opens. Enter the following details:
-
Instance Name: Enter the organization name (case-sensitive) copied from the Cisco Webex teams admin portal.Instance Type: Select the following check box:
-
API Data Protection: Select this option to allow Netskope to scan through your SaaS app instance to list files, user, and other enterprise data.
-
Malware: Select this option to detect malware in files, attachments, chat messages, etc. For more information to set up malware, see Creating a Threat Protection Policy for API Data Protection.
-
-
Compliance Officer: Enter the email address of the user that has full administration and compliance officer privileges.
-
-
Click Save, then click Grant Access for the app instance you just created. You will be prompted to log in with your admin username and password, and then click Grant Access. When the configuration results page open, click Close.
After a successful grant, if you change the Cisco Webex Teams admin account password, then you must re-grant the app instance in the Netskope UI.
Refresh your browser, and you should see a green check icon next to the instance name.