We implemented Conditional Access App Control for Yammer to avoid uploads of (strictly) confidential documents to the platform.
When testing we notice a significant impact on performance for the web application. Some examples:
| | Without CAAC | With CAAC enabled |
| Open Yammer in a new browser session | 8-9 seconds | 25-30 seconds |
| Open Yammer in a second tab | 7 seconds | 15-20 seconds |
| Open a new channel | 3-4 seconds | 10-20 seconds |
I know that some performance degradation would be expected as all traffic is routed through MCAS, but this feels like a lot of degradation.
If we present this to business, they will never use the web version and will only want to use the client apps, making it unable to block actions like uploading (strict) confidential documents.
Are these numbers within the expected range?
Any one else experiencing this?
