Forum Discussion
CAS vs O365 ASM
What is the relationship between CAS and O365 Advanced Security Management? If we add O365 to CAS, do we still use O365 ASM?
Hi Dean,
ASM offers a subset of features of MCAS focusing in Office 365 related apps and activites. Attached slides highlight the differences between the two versions.
Thanks,
Shalini
ASM is a subset of CAS. Cloud app security provides you more broader control and visibility and ASM is only focused on one thing. Thanks.
- If you set up SIEM logging under CAS will that include logs from ASM or do you need to setup ASM SIEM logging also?
- I don't quite understand your question. The logs come from your firewall and proxy, they do not come from either ASM or CAS. By the way, ASM is now called Office 365 Cloud App Security (they renamed it last fall)
- I am referring to Activity Logs and Alerts.
MCAS https://docs.microsoft.com/en-us/cloud-app-security/siem
O365CAS https://support.office.com/en-us/article/integrate-your-siem-server-with-office-365-cloud-app-security-dd6d2417-49c4-4de6-9294-67fdabbf8532?ui=en-US&rs=en-US&ad=US
The instructions are similar but if O365CAS is a subset of MCAS will Activity Logs and Alerts pulled from MCSA contain Activity Logs and Alerts from O365CAS or I do I need to set up the SIEM with both?
