A versatile and powerful tool for protecting supported SaaS applications
May 09, 2023

A versatile and powerful tool for protecting supported SaaS applications

Nate Haleen | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Overall Satisfaction with Cisco CloudLock

Cloudlock helps us with pii protection by reducing dwell time of sensitive files. It also is a major element of our data loss prevention strategy, by allowing us to the transfer of files in and out of the organization. Finally it is a great indicator of accidental deletions of files in SharePoint and alerts us to the cause of missing files.
  • Data Loss Prevention - files accessed from outside of the organization can be audited or blocked based on content, file type, and regex
  • Policy Management - policy options are sophisticated and give great control over the actions to be taken and when the policy should be triggered
  • Behavioral Analysis - cloudlock is usually the first place we learn about suspicious activity in our SaaS applications, such as login attempts from outside the country
  • Ease of use - the UI is not the easiest to grok. Some customers install it and expect it to just work, when in fact most of the policies are not enforced by default. Something like a basic tutorial wizard for policies would help tremendously.
  • Dashboard organization - CloudLock does a number of things, but in the UI they are all jumbled together with a single click moving you out of the feature you intended to configure and into a totally different part of the application
  • Limited Supported Offerings - internally and with customers a lot of additional cloud vendors have been requested, but the product only supports a small number of core services, with no roadmap for adding more that I am aware of.
  • We've identified a number of close calls with sensitive data being prevented from being uploaded to a broader audience than was intended. This saved us from potential liability from a data breach.
  • We identified and were able to react to a huge number of brute force attacks with the alerts set up in CloudLock
  • We are able to discover when apps with sensitive permissions are being connected to our SaaS products and audit or ban them from being used on work devices and resources. This improves our security and productivity and reduces spend on non-work usage of resources.
Amazon Macie is limited to an AWS environment and fulfills some of the same functions that CloudLock does in SaaS products. Both are very valuable tools, so the decision is not really which to use, but whether to use both for their respective environments. In general I feel CloudLock is a more powerful tool because it connects to Microsoft 365, which is more business critical for our organization, but that really is a personal call.

Do you think Cisco CloudLock delivers good value for the price?

Yes

Are you happy with Cisco CloudLock's feature set?

Yes

Did Cisco CloudLock live up to sales and marketing promises?

Yes

Did implementation of Cisco CloudLock go as expected?

Yes

Would you buy Cisco CloudLock again?

Yes

Obviously, good scenarios would be where no existing data loss prevention solution is in place, or anywhere that sensitive PII transits a SaaS cloud application. Another situation where it would excel would be for monitoring misuse of SaaS cloud resources, such as discovering personal files in a work environment storage product.

A situation where it is wholly inappropriate is for monitoring AWS, Google Cloud, or Azure environments. These services are not supported at all, but my customers and coworkers expect them to be.