When an email is re-sent after the time out, Skyhigh CASB Gateway SMTP server inspects the cache to see if the policy evaluation results are still available and then takes the appropriate action (Allow, Block, Quarantine) on the email. Skyhigh CASB Gateway SMTP server continues policy evaluation in the background, and policy evaluation results are cached temporarily.

If Skyhigh CASB Gateway SMTP server processes the policy evaluation for more than 55 seconds, it allows the connection to time out instead of using the fail open process. This time out can be over-ridden by allowing the policy evaluation to continue in the backend and cache the results. If the DLP inspection or policy evaluation is not finished within 55 seconds, Skyhigh CASB Gateway SMTP server uses the fail open process which relays the email back to Exchange Online without waiting for the policy evaluation to finish. NOTE: When Inline Email DLP users send an email, there is a time-out of 55 seconds to receive a response from Skyhigh CASB Gateway SMTP server. As a result, the subsequent incidents cannot populate the Bcc recipients’ details. The incident generated doesn’t show the information of the Bcc recipients.Ī known issue has been identified when an email contains multiple events, such as Bcc recipients or internal and external recipients, the event that is processed first deletes the original violating email from the user's mailbox. The incident created for this event includes the Bcc recipients’ information along with the email message and associated metadata before being deleted. Due to the recent deletion of the email, the subsequent events can’t find this email. KNOWN ISSUE: When an inline DLP policy is created for Exchange Online, and the policy is violated, an email notification is sent to internal or external users’ email addresses via To/From/ Cc/Bcc fields with the remediation action to delete the message from the user's mailbox.

Make sure that you've confirmed that you can send and receive emails before proceeding. IMPORTANT: Skyhigh CASB supports only User Mailboxes, ideally from the Service account that is integrated. Shared Mailboxes are not supported. Office 365 account with global admin permissions.To configure inline DLP, you need the following:

Exchange online