Forum Discussion
Microsoft Cloud App Security Session Policy For .PDF Viewing
Currently we have a session policy in Microsoft Cloud App Security that blocks all file downloads while using Outlook Web which still allows attachment viewing. This works great for all Office documents however .PDF attachments cannot be viewed because they perform a download when previewing them. The only workaround is allow .PDF attachment downloads only. Will there be any future enhancements in MCAS that will allow .PDF viewing while still blocking downloads?
Previewing or printing PDF files may be blocked
This is normal behavior when you have a policy configured to block downloads. Occasionally when previewing or printing PDF files, apps initiate a download of the file causing Cloud App Security to intervene to ensure the download is blocked and that data is not leaked from your environment.
If you would like to allow PDF file downloads, you can exclude PDF files based on their file extension in the relevant session policy.
3 Replies
- AOEHCopper ContributorWell, I understand, that PDF needs to be downloaded to read it, at least so far. Anyway, it looks like there was an option to read PDFs in Office Online? (https://docs.microsoft.com/en-us/microsoft-365/cloud-storage-partner-program/faq/pdf-support)
Since PDF is a very common file format, it would be great to be able, to read them online - without the hassle of downloading these files and the disadvantage of the possibility to forget to delete such a file on a "public accessible" device.- dacurwin
Microsoft
AOEH pradell1957 The documentation has now been updated to include this solution:
Troubleshooting access and session controls | Microsoft Docs- Simon_CaisleyCopper Contributor
What about SharePoint? Eg I get the same issue where the PDF is blocked when trying to open in SPO via MCAS, although I notice I can open PDF's in the doc library via site contents.
Is there a similar workaround/fix for SPO?