It will not work if you have it configured in Report-Only mode! Under “Session”, select Use Conditional Access App Control and select Monitor Only.įinally, enable the policy and save. Office 365 will not only encompass the applications, but the web portals as well () You can configure All Cloud Apps or whichever application you prefer. Next, I selected the Office 365 application. In my assignments, I selected all users and excluded my break-glass account. In the Azure Portal, go to Conditional Access and create a new Policy. Once we have the proper licensing we need to route applications to Microsoft Defender for Cloud Apps. You will also need Azure Active Directory Premium P2 license.
You must have a license that enables “Microsoft Defender for Cloud Apps Discovery” and not “Microsoft Defender for Cloud Apps.” At the time of writing EM+S E5 sku will not work but Microsoft 365 E5 Security sku will.
In this write up I will be configuring Microsoft Defender for Cloud Apps (old name is Cloud App Security) and Conditional Access to block outdated operating systems from accessing Microsoft 365 services within my tenant.įirst thing you want to figure out, is licensing. Apply Access Policy to Azure AD Conditional Access.Configure Conditional Access App Control.
0 kommentar(er)
