Forum Discussion

MarshMadness's avatar
MarshMadness
Copper Contributor
Apr 09, 2021

Fastly Cloud App after Enabling Defender for Endpoint

We have begun an MDE pilot and have noticed that all our users/devices in this pilot (and only in the pilot) are now connecting to a "Hosting Services" cloud app called Fastly.  This then alerts as a new High Volume App in MCAS.  I am wondering if this expected and required behavior and should sanction this app and then exclude in alerts or something to be concerned with.
I have checked in the MCAS community and done some cursory internet searches with no helpful results.

Anyone else experiencing this or have any helpful explanation?  Thanks in advance.

1 Reply

  • marysia_k's avatar
    marysia_k
    Icon for Microsoft rankMicrosoft
    Apr 21, 2021
    Hi, you can decide whether to block or not -- but it is not a common usage to have high volume in this application.

Resources