Forum Discussion
Can i block uploads to cloud apps?
Hi everyone, Does anyone know if possible to block uploads to certain cloud apps using Defender for Cloud Apps? For example block uploads to Onedrive (personal) or Google Drive (Personal) or ...
Defender for Cloud Apps on its own is only a reverse proxy, which can monitor traffic to your corporate apps. Traffic to personal apps (Shadow IT) will not pass through Defender for Cloud Apps, so you will need something like a forward proxy or SWG with SSL inspection capabilities.
As Reza_Ameri pointed out though, it is difficult to block access completely.
For future searchers, WIP has been deprecated in favor of a new, paid DLP tool from MS. In my testing, WIP was unable to differentiate between personal docs and business docs consistently. If the user was using a personal device, managed by an MDM (Intune in my case), WIP would mis-code their personal files as business. Not a problem until the user retires the device and finds all his personal files irrevocably erased. In general, WIP was a clunky solution. It only worked with certain programs, mostly from MS. Forget about editing PDFs, for example. WIP was difficult to turn off, and now, months after dismantling all my WIP policies, one of my test devices still shows lock icons on its files. I couldn't shake the feeling that with WIP lots of files would someday become un-openable, leaving me in a lurch. I opted not to use it. Hope that helps someone else.