Reverse Proxy for Slack

Skyhigh CASB can provide Cloud Access Policies to control services that users can access from managed or unmanaged devices. It also provides DLP Policies to block or monitor the sensitive information shared by users through Slack.

Slack supports reverse proxy with the following limitations:

• If you have an unmanaged device/untrusted locations, your login activity to Slack via the desktop or mobile applications are blocked for Android and allows only browser access.
• If you have unmanaged devices/untrusted locations with proxy browser access, downloads are blocked.
• If you have unmanaged devices/untrusted locations with proxy browser access, and applied inline DLP for file downloads with the DLP response action as "send email notification" to send the user a warning email, then file downloads are blocked. To download files, apply Digital Rights Management (DRM) using Microsoft Information Protection (MIP)/Azure Information Protection (AIP).

The unmanaged device is due to:

• Lack of customer-supplied certificate. 
• Lack of Skyhigh Security Agent.
• Based on IdP details, the IdP identifies an unmanaged device that is a SAML attribute.

The untrusted location is due to:

• Source IP range.
• Geo-location. For example, China, Russia, etc.
• Based on IdP details, the IdP identifies an untrusted location that is a SAML attribute.

search.replace.strings = {"searchReplaceList":[{"uri":"re:/client/TN1CWSGP7.*","searchStr":"re:script-src.*';", "replaceStr":""}]}

 [
    {
      "dstHost": "skyhighqa4.enterprise.slack.com",
      "uri": "re:.*sso_failed.*",
      "phase": "REQUEST",
      "redirectUri": "/sso/saml/start?redir=%2F"
    }
  ]

redirect-config=WwogIHsKICAgICJkc3RIb3N0IjogInNreWhpZ2hxYTQuZW50ZXJwcmlzZS5zbGFjay5jb20iLAogICAgInVyaSI6ICJyZTouKnNzb19mYWlsZWQuKiIsCiAgICAicGhhc2UiOiAiUkVRVUVTVCIsCiAgICAicmVkaXJlY3RVcmkiOiAiL3Nzby9zYW1sL3N0YXJ0P3JlZGlyPSUyRiIKICB9Cl0= 

Legends used in the table:
✔ - Verified and working.
✖ - Not working as expected.