Capturing Cisco Jabber File Transfer
- Szabolcs Daroczy (Unlicensed)
AVAILABLE IN 9.1 AND LATER
The Verint Verba platform provides native support for capturing Cisco Jabber File Transfers.
Overview
Capturing Cisco Jabber File Transfers is implemented in the Verba Cisco Compliance Service. In order to use the solution, a dedicated Jabber user account shall be configured. When Verba Cisco Compliance Service is configured and used, it also allows real-time checks on file transfers for Data Loss Prevention (DLP) .
The solution requires Cisco IM&P Managed File Transfer, peer-to-peer file transfer option has to be disabled.
User interface
In the Verint Verba user interface each file transfer shows up as a separate conversation. In case of group chat or persistent chat rooms, each recorded user has a unique conversation entry and a copy of the same file to allow independent enforcement of access control and retention policies (e.g. retain for one group, delete for another).
In the following screenshot there is a Cisco Jabber IM session with a file transfer in the middle:
This same session shows up in the Verint Verba search interface in the following way:
About Cisco IM&P Managed File Transfer
The following diagram shows standard flows in a Cisco IM&P Managed File Transfer:
- The sender's client uploads the file via HTTP, and the server responds with a URI for the file.
- The file is stored in the repository on the file server.
- An entry is written to the external database log table to record the upload.
- The sender’s client sends an IM to the recipient; the IM includes the URI of the file.
- The recipient’s client requests the file via HTTP.
After reading the file from the repository (6) and recording the download in the log table (7), the file is downloaded to the recipient.
The following diagram shows how the above flow plays-out in the Verint Verba solution:
