Forum Discussion

Copper Contributor

Jun 02, 2019

mCAS Session Policy and the Block Download Control Type

Hello. I'm looking to better understand what the expected behaviour is when using Conditional Access App Control and a Session Policy to block the download of documents, specifically images. Currentl...

Cloud App Security

Sebastien Molendijk

Microsoft

Jun 11, 2019

Hi flotrig

This is a limitation of the proxy. Since we have to download the images of the website to render them correctly, we cannot block downloads of images without breaking the experience for customers.

Best regards,

Sebastien

flotrig

Copper Contributor

Jun 11, 2019

Sebastien Molendijk Hi Seb, thanks for coming back, had a suspicion this is where you might head. Therefore, and for clarity, if a user renamed the file suffix of a document restricted by the current mCAS policy, perhaps from a .PDF or .DOCX to an image format such as .PNG they would circumvent the block downloads policy, correct?

Building on this, If I wanted to block image downloads, is there a suggested approach you could recommend? Perhaps Information Protection + Encryption?

Best

Andrew

BorisBerkelaar
Copper Contributor
Feb 04, 2021
flotrig, Sebastien Molendijk, a year later, still the same behavior. Your question, flotrig, is still relevant. Did you receive an answer or found out how to circumvent this issue?
- Sebastien Molendijk
  Microsoft
  Feb 04, 2021
  BorisBerkelaar this feature is currently in private preview and should be available to everyone pretty soon.
  
  Thanks,
  
  Sebastien
  - Stefan Haffner
    Copper Contributor
    Jul 06, 2021
    Sebastien Molendijk - any news when this will be moving from private to public preview?