DLP Network Prevent for Web - Inspecting WebSocket Traffic

[Andre Iseli]

Dear all

Is it possible to intercept websocket traffic from an application towards a cloudservice via a proxy and perform a DLP inspection via Network Prevent for Web or does that require some sort of CASB solution?

Thanks

André

[Barnabas Toth]

Hi Andre,

As long the traffic goes through the http/s proxy it does not matter whether it is originating from a browser or an app. It will be forwarded via ICAP to web prevent for inspection. 

Regards,

Barnabas

[Tobias Pischl]

Hi André,

we are looking at options to inspect websocket traffic. In case can you message me the use case you have to ensure we can capture it correctly with the current designs we are looking at?

At the moment it would likely be dependent on CASB Gateway to make proper sense of the websocket interactions to enable meaningful DLP.

Thanks,

toby