CAS vs O365 ASM

[Dean_Gross]

What is the relationship between CAS and O365 Advanced Security Management? If we add O365 to CAS, do we still use O365 ASM?

[#2 · Accepted solution]

Hi Dean,

ASM offers a subset of features of MCAS focusing in Office 365 related apps and activites. Attached slides highlight the differences between the two versions.

Thanks,

Shalini

[#3]

ASM is a subset of CAS. Cloud app security provides you more broader control and visibility and ASM is only focused on one thing. Thanks.

[#4]

If you set up SIEM logging under CAS will that include logs from ASM or do you need to setup ASM SIEM logging also?

[#5]

I don't quite understand your question. The logs come from your firewall and proxy, they do not come from either ASM or CAS. By the way, ASM is now called Office 365 Cloud App Security (they renamed it last fall)

[#6]

I am referring to Activity Logs and Alerts.
MCAS https://docs.microsoft.com/en-us/cloud-app-security/siem
O365CAS https://support.office.com/en-us/article/integrate-your-siem-server-with-office-365-cloud-app-securi...

The instructions are similar but if O365CAS is a subset of MCAS will Activity Logs and Alerts pulled from MCSA contain Activity Logs and Alerts from O365CAS or I do I need to set up the SIEM with both?

[#7]

MCAS SIEM connector supports both alerts and activity logs from Office 365 as well as other SaaS apps such as Box. Office 365 CAS SIEM connector only provides alerts from Office 365. Refer to the documentation link below for a comparison of both products.
https://docs.microsoft.com/en-us/cloud-app-security/editions-cloud-app-security-o365