Event banner
Event details
We have MDE in passive mode - Can we Unsanction applications at the firewall and provide temporary exceptions to users who may have a business need
- Yoann_David_Mallet
Microsoft
Hi Abdul, As of now, Defender for CLoud Apps will receive some data from clients in Passive mode, however, it is not possible to block unsanctionned apps at the MDE level when in passive mode. If you are using a third party firewall, you can still export a block script to block unsanctioned apps at the firewall level. Finally, when it comes to exceptions, if you intend to block apps using MDE, as of today, we can grant exceptions at the machine level, but not yet at the user level.- Do the block script take into consideration the exceptions applied to unsanctioned apps through scoped profiles
- Itai_CohenHi Abdul, my name is Itai Cohen; I am part of the Microsoft Defender for Cloud Apps product team, responsible for Discovery domain. We are not able to except scoped profiles with the block script. We have heard this request before, thank you for your feedback. We have few workarounds to achieve this use case. If this is a high priority use case for you, please reach out to me directly.
