Cloud App Security Administration Guide for Office 365

Table of Contents

Protect (Inline)

Protect (inline) mode provides the highest level of protection, scanning email and files prior to delivery to the user. Leveraging the SaaS email and storage provider APIs, and implementing mail flow rules, Cloud App Security can scan email and files to protect end users from such threats as malware, data leaks, and phishing attacks. Scanning and quarantining happens before email messages and files are delivered to the user, ensuring that threats are detected and remediated before the user has access to the email messages or files:

  1. Incoming email and files heads to the processing flow.
  2. Cloud App Security redirects the email or file to the Cloud App Security platform for scanning.
  3. If an email or file is classified as malicious, Cloud App Security takes action based on the policies that have been defined. Otherwise, the email or file is returned to the prcoessing flow.
  4. User notifications and release workflows are performed based on defined policies.