Bundles and Channels

This page includes:

About bundles and channels

Perception Point X‑Ray can protect various channels, such as email, browser, and Microsoft Teams. Channels are also known as integrations or collaborations. The channels that can be protected in an organization are defined by the bundles that are assigned to the organization. Each bundle includes one or more specified channels. For example, the "Advanced Cloud Storage Security for MS Package" bundle includes the Microsoft OneDrive, SharePoint, and Teams channels.

There is a set of approximately 15 pre-defined bundles. You can't modify any of these pre-defined bundles. Not all bundles are available to all organizations.

To make a bundle - and it's included channels - available to an organization, the bundle must be assigned to the organization. You can assign one or more bundles to an organization.

Note: Only Perception Point Support and admin users in parent organizations [MSSP, Reseller, Distributer, Multi-organization] can assign and unassign bundles.

Bundle settings

Each bundle has various settings. Most of the settings can't be modified by an admin user - the settings can be modified by Perception Point Support only. The only setting that can be modified by an admin user is the number of Reported Seats - if Reported Seats is the selected license source.

To view or edit the bundle settings:

In Perception Point X‑Ray, in the left navigation menu, select Account > Bundles and Channels.
Under Assigned bundles, locate the bundle whose setting you want to view or edit.
Click Bundle settings - on the right of the bundle name. The Bundle Settings pane opens - listing all the current bundle settings.

Click Edit [] to modify any of the modifiable settings.

Note:

The only setting that can be modified by an admin user is the number of Reported Seats - if Reported Seats is the selected license source.
If the Edit control doesn't appear, then the bundle isn't a billing-enabled bundle, and no settings for the bundle can be configured. See Billing-enabled bundles.

Each bundle includes the following settings:

Bundle name

The name of the bundle.

This setting can't be modified.

Leading channel

Used for billing purposes. The billing details for all channels in the bundle will be based on the billing details of the leading channel.

The leading channel is specified in the bundle definition - and can't be modified.
If a bundle has only a single channel, then that channel will be the leading channel.

This setting can't be modified.

Included channels

The list of channels that are included in the bundle. When the bundle is assigned, all these channels will be added to the Enabled Channels list, and each channel will have the Inactive status.

This setting can't be modified.

License source

The source of the value for Billed licenses for all the channels in the bundle - and how the number of licenses is determined. The options are:

Integration

[Microsoft 365; Microsoft Collaboration]

Microsoft 365

Perception Point X‑Ray analyzes the organization's Microsoft account. Perception Point X‑Ray tries to identify the users in the account, to determine the "integration number".

What's excluded

The following are excluded from the integration number - based on the Microsoft license:

Non-email-type Microsoft licenses
Disabled Microsoft licenses [often used when an employee leaves an organization]

Not-enabled Microsoft email addresses

Note: If Perception Point X‑Ray is used to specify domains, groups, or users that are protected, then users that are not included in these specified entities are not included in the integration number.

Shared mailboxes
Groups [which typically don't have Microsoft licenses]
When aliases are used, only one email address for each user is included in the integration number

Google Workspace

Perception Point X‑Ray examines the organization's Google Workspace account, and counts all included licenses [regardless of the license-type], to determine the "integration number".

More Info

The integration number is determined every day, but the number on the last day of the month is passed on as the value for Billed licenses.
This option is available for Microsoft 365 Inline and API integrations and Google Workspace integrations only.
This option is not available for Microsoft Exchange and "Other" integrations.

Note: [Microsoft 365 Inline integrations] You can use the Integration method if full protection has been configured for the integration. If partial protection has been configured for the integration, then Microsoft rules are used to limit the set of users that are included in the integration. Perception Point X‑Ray doesn't have access to these rules. In this scenario, use the Reported Seats license source.

Browser Extension: The integration number is determined by the number of unique end-users that are signed-in to the extension on the last day of the month.
OneDrive: All users in the Microsoft account are protected and are therefore included in the integration number. Partial protection is not available. Email-only Microsoft licenses are excluded. The integration number on the last day of the month [on which usage information is available] is used for the billing number.
SharePoint: All users in the Microsoft account are protected and are therefore included in the integration number. Partial protection is not available. Email-only Microsoft licenses are excluded. The integration number on the last day of the month [on which usage information is available] is used for the billing number.
Teams: All users in the Microsoft account are protected and are therefore included in the integration number. Partial protection is not available. Email-only Microsoft licenses are excluded. The integration number on the last day of the month [on which usage information is available] is used for the billing number.

Microsoft endpoints

Perception Point X‑Ray uses the following Office 365 endpoint to extract the required user lists:

https://graph.microsoft.com/v1.0/users

Perception Point X‑Ray applies the filters that are required to extract only active and relevant users.

Google Workspace endpoints

Perception Point X‑Ray uses the followingGoogle Workspace endpoint to extract the required user lists:

https://admin.googleapis.com/admin/directory/v1/users

Perception Point X‑Ray applies the filters that are required to extract only active and relevant users. The filters are based on the domain name associated with the organization in Perception Point X‑Ray.

Reported seats

You specify how many users [seats] are protected by Perception Point X‑Ray. This option is for companies that report their number of seats, and don't have a direct contract with Perception Point. This option is mainly for Acronis organizations and MSSP children.

You can adjust the number of reported seats as the number of protected users changes. Make sure that the number is correct on the last day of the month.

To adjust the number:

Go to Account > Bundles and Channels.
Under Assigned Bundles, locate the required bundle, and click Bundle Settings.
In the Bundle Settings pane, click Edit.
Enter the number of Seats.

More Info

This option is available for all integration types.
[Microsoft 365 Inline integrations] If Microsoft rules are used to limit the set of users that are protected, use the Reported Seats method. Don't use the Integration option.

Assigning a bundle to an organization

Note: Only Perception Point Support and admin users in parent organizations [MSSP, Reseller, Distributer, Multi-organization] can assign and unassign bundles.

When you assign a bundle to an organization, all the channels that are included in the bundle will be added to the organization as Enabled Channels. The status of each added channel will be Inactive.

There is a set of approximately 15 pre-defined bundles. These bundles can't be modified. Not all bundles are available to all organizations. The set of bundles that is available to an organization is configured and maintained by Perception Point Support.

Note:

You can assign bundles to child organizations only [organizations in which scanning occurs] - not to parent organizations.
Only Perception Point Support and admin users in parent organizations [MSSP, Reseller, Distributer, Multi-organization] can assign and unassign bundles.

To assign a bundle to an organization:

In Perception Point X‑Ray, in the left navigation menu, select Account > Bundles and Channels.
Click Assign Bundles - in the top-right corner. The Assign bundles pane opens - listing all the [unassigned] bundles that are available to the organization.
Locate the bundle that you want to add, and click Assign.
- The selected bundle will be added to the Assigned Bundles section at the top of the Bundles and Channels page.
- All the channels included in the assigned bundle will be added under Enabled Channels - at the bottom of the page. The status of each added channel will be Inactive.
Click Bundle Settings, on the right of the newly assigned bundle, and make sure that all the data for the bundle is correct.

Unassigning a bundle

Note: Only Perception Point Support and admin users in parent organizations [MSSP, Reseller, Distributer, Multi-organization] can assign and unassign bundles.

You can un-assign an assigned bundle. This removes all the included channels from the list of Enabled Channels - except for channels that are included in other assigned bundles.

Note:

You won't be able to unassign a bundle if one or more of its included channels is currently Active and doesn't exist in another assigned bundle. [In this scenario, the Unassign link will be inactive.]
Only Perception Point Support and admin users in parent organizations [MSSP, Reseller, Distributer, Multi-organization] can assign and unassign bundles.

To un-assign a bundle from an organization:

In Perception Point X‑Ray, in the left navigation menu, select Account > Bundles and Channels.
Under Assigned Bundles, locate the bundle that you want to remove, and then click Unassign.
- The selected bundle will be removed from the Assigned Bundles section at the top of the Bundles and Channels page.
- All the channels included in the bundle will be removed from the list of Enabled Channels - unless a specific channel is included in another bundle.

Bundles and billing

Billing per bundle is calculated according to the leading channel and the license source that is specified for the leading channel. This applies to the following channels only:

Email
Browser
OneDrive
SharePoint
Teams

For all other channels, billing is not determined by Perception Point X‑Ray.

Note: Only billing-enabled bundles include billing information. For details, see Billing-enabled bundles.

Channel statuses

Each enabled channel can have one of the following two statuses:

Inactive

The channel is included in one of the assigned bundles. An inactive channel is not protected. If you want to protect a channel that is currently inactive, the channel must first be activated.

Inactive channels appear in the Enabled Channels section in the Bundles and Channels page.
Inactive channels are marked as being Inactive [].
For details on how to activate an inactive channel, see Activating a channel below.

Active

An active channel is protected by Perception Point X‑Ray, and is called a protected channel.

Active channels appear in the Enabled Channels section in the Bundles and Channels page.

Active channels are marked as being Active [].

Activating a channel

Each enabled channel can be in one of the following statuses: inactive or active. You can activate an inactive channel. When the activation procedure is complete, the channel will be active. Each channel that is active is protected by Perception Point X‑Ray.

To activate a channel:

In Perception Point X‑Ray, in the left navigation menu, select Account > Bundles and Channels.
In the Enabled Channels section, locate the inactive channel that you want to activate, and click Activate.

This will start the activation procedure. Each channel has its own unique activation procedure. For details about the activation procedure for a specific channel, see the relevant page in this Documentation Center.

Deactivating a channel

Each enabled channel can be one of the following statuses: inactive, or active. It is possible to deactivate an active channel. After you deactivate a channel, the channel will no longer be protected by Perception Point X‑Ray.

To deactivate a channel:

In Perception Point X‑Ray, in the left navigation menu, select Account > Bundles and Channels.
In the Enabled Channels section, locate the active channel that you want to deactivate, and click Deactivate.

Configuring the default channel detection settings

You can configure various default settings - such as quarantine configurations - that affect the detection that is performed during scans. These default settings apply to all channels. For details, see Detection.

Configuring the location for Spam emails

Note: The spam remediation option described below appears only if a Microsoft 365 API inbound integration is configured. The option doesn't appear if a Microsoft 365 Inline integration is configured.

You can specify what happens to emails that are assigned a spam verdict [if spam emails are not configured to be quarantined]. The options are:

Inbox: The email is sent to the user's Inbox. This setting is typically used for PoC installations - not for production installations.
Junk: The email is sent to the user's Junk folder. This setting is typically used in production installations - not in PoC installations.

For details, see Configuring spam remediation.

Billing-enabled bundles

Each bundle may be a billing-enabled bundle. A billing-enabled bundle includes information, such as License Source, that is used for billing purposes. Only billing-enabled bundles are editable.

About bundles for PAX8 organizations

For organizations through PAX8:

A limited set of bundles is available.

Only one billing-enabled bundle should be assigned at any time. If more than one billing-enabled bundle is assigned, billing errors may occur.

Note: When you transition from one billing-enabled bundle to another, it is acceptable to temporarily have two billing-enabled bundles assigned. To reduce billing issues, remember to unassign any billing-enabled bundles that are not required, as soon as the transition is complete.

Channel categories

The available channels are divided into the following categories:

Advanced Security
Cloud Storage
Messaging
CRM
Cloud Endpoint
Other integrations

Advanced Security

Email Service

Only a single email service integration can be enabled at any time - either Microsoft 365 or Google Workspace.

Microsoft 365

[]

Integration with Microsoft 365 uses the inline or the Microsoft API connection methods - with no MX record change.

Connection scope: Indicates which emails will be scanned: inbound, outbound, and/or internal.

For setup instructions, see Connecting Microsoft 365.

Account Takeover (ATO) detection

Detects if an email account has been taken-over. Requires integration of Perception Point X‑Ray with Microsoft 365.

For setup instructions, see Configuring Microsoft 365 - ATO detection.

Outbound email scanning

Scans outgoing [outbound] emails to detect malicious file attachments and malicious URLs.

For setup instructions, and other details, see Onboarding Microsoft 365 - Outbound.

Google Workspace

[]

Integration with Google Workspace uses inline integration - with no MX record change.

For setup instructions, see Connecting Google Workspace.

Browser Extension

Browser Security Extension

[]

The ABS browser extension can scan downloaded files, and check web pages for malicious content.

For details, see Advanced Browser Security.

Cloud Storage

Google Drive

[]

Helps to protect all the files in your Google Drive account. After you add Google Drive as a channel, Perception Point X‑Ray will scan all files that are uploaded to Google Drive, and all files in Google Drive that are modified.

For details on how to configure the Google Drive integration, see Google Drive integration.

OneDrive

[]

Helps to protect all the files in your Microsoft OneDrive account. When you add OneDrive as a channel, Perception Point X‑Ray will scan all files that currently exist in OneDrive. Thereafter, Perception Point X‑Ray will scan all files that are uploaded to OneDrive, and all files in OneDrive that are modified.

For details on how to configure the OneDrive integration, see OneDrive integration.

Dropbox

[]

Helps to protect all the files in your Dropbox account. When you add Dropbox as a channel, Perception Point X‑Ray will scan all files that currently exist in Dropbox. Thereafter, Perception Point X‑Ray will scan all files that are uploaded to Dropbox, and all files in Dropbox that are modified.

For details on how to configure the Dropbox integration, see Dropbox integration.

Box

[]

Helps to protect all the files in your Box account. When you add Box as a channel, Perception Point X‑Ray will scan all files that currently exist in Box. Thereafter, Perception Point X‑Ray will scan all files that are uploaded to Box, and all files in Box that are modified.

For details on how to configure the Box integration, see Box integration.

SharePoint

[]