Microsoft Cloud App Security | Conditional Access App Control

[@rahulshekhary9420]

Do not dishearten on views , you are doing great job.

[@Toadstool69]

Excellent overview of app control policies! Thank you!

[@aravindraj111]

This series of MCAS has been awesome till now, So much information explained really well. Please add the link for advance query on shadow IT, tried to find it but no luck

[@shivaraman420]

Thank you for the Crisp concepts. Is there any trial for the Advanced_skilset?

[@gopz3064]

HI, I am following your MS security suite series.. however i see the investigating Shadow IT link is missing, can you kindly add to the series. Many thanks in advance

[@itsdd9873]

is there any way to block update download on Microsoft Teams client. ?

[@nadeerbabu872]

👍Thanks

[@ConceptsWork]

Welcome 👍

[@priyankareddy3587]

I have a query with Monitor only(preview) and Block download (preview).when we configure these policies in CA portal without any conditions, will the policy apply to browsers alone?? We receive MCAS monitor message on browser based apps. do we get the same message on mobile apps?? I am doing testing and I m not receiving any message on mobile apps now but 10days back when I did testing,I did receive MCAS monitor message on mobile apps too.Kindly confirm

[@ConceptsWork]

As per my last testing, it requires a dedicated MCAS policy for trigger an alert on mobile.

[@priyankareddy3587]

@@ConceptsWork can you elaborate it please...when I created monitor only & block download , access was allowed from all client apps with no message

[@yashwantsinghnegi8290]

how to we apply the control on personal device. what control we need to install on person device? Do we need to install something

[@ConceptsWork]

No agent required, session controls is reverse proxy solution.

[@yashwantsinghnegi8290]

@@ConceptsWork Thanks you .. But for Endpoint protection we need to install agent on endpoint device. Microsoft Defender for endpoint?

[@karanchauhan3079]

@@yashwantsinghnegi8290 no. agent/sensor is built into the OS with windows 10 & above. All u need is to assign the MDATP license to the user.