Forum Discussion
CAS vs O365 ASM
What is the relationship between CAS and O365 Advanced Security Management? If we add O365 to CAS, do we still use O365 ASM?
Hi Dean,
ASM offers a subset of features of MCAS focusing in Office 365 related apps and activites. Attached slides highlight the differences between the two versions.
Thanks,
Shalini
I don't quite understand your question. The logs come from your firewall and proxy, they do not come from either ASM or CAS. By the way, ASM is now called Office 365 Cloud App Security (they renamed it last fall)
I am referring to Activity Logs and Alerts.
MCAS https://docs.microsoft.com/en-us/cloud-app-security/siem
O365CAS https://support.office.com/en-us/article/integrate-your-siem-server-with-office-365-cloud-app-security-dd6d2417-49c4-4de6-9294-67fdabbf8532?ui=en-US&rs=en-US&ad=US
The instructions are similar but if O365CAS is a subset of MCAS will Activity Logs and Alerts pulled from MCSA contain Activity Logs and Alerts from O365CAS or I do I need to set up the SIEM with both?
MCAS https://docs.microsoft.com/en-us/cloud-app-security/siem
O365CAS https://support.office.com/en-us/article/integrate-your-siem-server-with-office-365-cloud-app-security-dd6d2417-49c4-4de6-9294-67fdabbf8532?ui=en-US&rs=en-US&ad=US
The instructions are similar but if O365CAS is a subset of MCAS will Activity Logs and Alerts pulled from MCSA contain Activity Logs and Alerts from O365CAS or I do I need to set up the SIEM with both?
Shalini PasupnetiMicrosoft
MCAS SIEM connector supports both alerts and activity logs from Office 365 as well as other SaaS apps such as Box. Office 365 CAS SIEM connector only provides alerts from Office 365. Refer to the documentation link below for a comparison of both products.
https://docs.microsoft.com/en-us/cloud-app-security/editions-cloud-app-security-o365
