Microsoft Teams integration

This section includes:

Note: Before implementing this channel integration, contact your Customer Success Manager for FortiMail Workspace Security to make sure that this functionality is included in your current FortiMail Workspace Security license.

About the Microsoft Teams integration

FortiMail Workspace Security can be integrated with various products. This page explains what configurations are required to integrate FortiMail Workspace Security with Microsoft Teams. For general information about integrating FortiMail Workspace Security with other products, see Bundles and Channels.

When the FortiMail Workspace Security-Microsoft Teams integration is fully configured, FortiMail Workspace Security will scan all the organization folders, both shared and private, each time a file is uploaded or modified. Scan details are included in the Scans page in FortiMail Workspace Security. Remember to click the Microsoft Teams filter icon [] to show only Microsoft Teams scans.

This page describes what must be performed by FortiMail Workspace Security Support and what must be performed by you, the customer - to perform the integration.

About quarantining files in Microsoft Teams

By default, each new FortiMail Workspace Security-Microsoft Teams integration is configured to quarantine files. Files will be quarantined when a scan assigns a malicious verdict to a file, or when someone changes the verdict of a scan to malicious. When a file is quarantined:

The quarantined file is moved to the quarantine folder.
The quarantined file it is not accessible to the owner of the file.
FortiMail Workspace Security may be configured to send an email alert to the owner of the file to inform the owner that the file has been quarantined. For details, see Alerts.
FortiMail Workspace Security may be configured to send an alert to administrators to inform them about the quarantined file. For details, see Alerts.

The quarantined file is replaced by a text file in its original location. The replacement "placeholder" text file has the same name as the quarantined file, but has an additional .txt extension. For example, the placeholder file for Document-123.docx would have the name Document-123.docx.txt

The content of the placeholder text file is similar to:

Document-123.docx was blocked by FortiMail Workspace Security. Contact your system administrator in order to access this file.

You can customize the text that appears in quarantine placeholder files. You can also add links. If necessary, contact FortiMail Workspace Security Support [support@perception-point.io] to specify the customized text and the links that will appear in the placeholder files.

When an administrator releases a quarantined file [by changing its verdict to clean]:

An email is sent to the owner of the file to inform the owner that the file has been released from quarantine.
The released file will be accessible to the owner, in the original location of the file.
The placeholder text file is deleted.

For details about releasing a file from quarantine, see Changing Verdicts.

Note: To disable quarantine, contact FortiMail Workspace Security Support [support@perception-point.io].

Prerequisites

In order to perform the required integration with FortiMail Workspace Security, make sure that you have the following prerequisites:

Microsoft 365 Business Basic
Administrator rights in Microsoft 365
Admin role in Perception Point X‑Ray

The Microsoft Teams integration procedure

Perform the procedure below to integrate FortiMail Workspace Security with Microsoft Teams.

Activating Microsoft Teams

This step activates the FortiMail Workspace Security-Teams integration.

To activate the Teams integration:

In FortiMail Workspace Security, in the left navigation menu, select Settings > Bundles and Channels.

Under Assigned Bundles, make sure that at least one bundle is assigned that includes the Teams channel.

For example, the "Advanced Cloud Storage Security for MS Package" bundle includes Teams.

Note:

If a bundle that includes the Teams channel is assigned, then Teams will appear in the list of channels under Enabled Channels.
You can click Bundles Settings, that is located on the right of each Assigned Bundle, to see which channels are included in a bundle.

Under Enabled Channels, locate "Teams" and then click "Activate".
You'll be redirected to sign-in to your Microsoft account.
Sign-in to your Microsoft account as an admin. You'll see a list of the permissions that are required.
Click Accept.

Make sure that Teams now appears as "Active" under Settings > Bundles and Channels > Enabled Channels.

Note:

By default, quarantine of malicious files detected by FortiMail Workspace Security is enabled.
To disable quarantine, contact FortiMail Workspace Security Support [support@perception-point.io].

Your FortiMail Workspace Security-Microsoft Teams integration should now be functional.

What gets scanned

IMPORTANT: The FortiMail Workspace Security-Teams integration protects the following:

Teams chat / Group chat: Files for internal users and guest users.
Teams conversation:
- "Post" folder: All files scanned.
- Files folder: Files are scanned only if the organization has enabled the SharePoint integration as well.

FortiMail Workspace Security scans the following files:

Every file that is added by a user to the user's own drive.
Every file that an administrator uploads.
Every file that is changed by a user in the user's own drive.
[Only the first time it is changed in a 24-hour period.]
Every file that is changed by an administrator.
[Only the first time it is changed in a 24-hour period.]

Note:

By default, files up to 100 MB are scanned - larger files are not scanned. Contact FortiMail Workspace Security Support [support@perception-point.io] if you want to change this limitation.
FortiMail Workspace Security scans files that are uploaded by internal [protected] users and by external [guest] users.
FortiMail Workspace Security scans files that are uploaded after the integration is configured. Files that were uploaded before the integration was configured are not scanned [unless they are modified].

Flow chart diagram

Hover your cursor over the graphic below to enlarge it