Forum Discussion
Defender for cloud App Security is not enabled but sending alerts to Defender 365
Hello, This morning, we received alerts in Defender 365 for impossible travel from Defender for Cloud App security even though it is not enabled. We have attempted to investigate how this happened...
HeikeRitter
Microsoft
MicrosoftCan you please verify that nobody turned on the integration in the portal?
Defender for Cloud Apps, select the Settings icon, select Settings, and then select Microsoft Defender for Endpoint. Under Alerts, select the global severity level for alerts.
and on the MDE side:
Settings, Endpoints, Advanced features
https://docs.microsoft.com/en-us/defender-cloud-apps/mde-integration#how-to-integrate-microsoft-defender-for-endpoint-with-defender-for-cloud-apps
Defender for Cloud Apps, select the Settings icon, select Settings, and then select Microsoft Defender for Endpoint. Under Alerts, select the global severity level for alerts.
and on the MDE side:
Settings, Endpoints, Advanced features
https://docs.microsoft.com/en-us/defender-cloud-apps/mde-integration#how-to-integrate-microsoft-defender-for-endpoint-with-defender-for-cloud-apps
- thank you for the reply Heike, it turns out someone in my org did enable Defender for Cloud Apps then quickly disabled, we went ahead and enabled the service completely.
- HeikeRitterPerfect! Glad you found the issue and it's now working!! Whoo-whoo! 🙂
