Cloud App Security vs Discovery

[Paul Youngberg]

I am pretty confused on the difference between these two products. I'm currently using Cloud App Security with a client ($5/usr) and I access the console from O365 > Admin Centers > Cloud App Security. In the new Azure portal though, there's an Azure AD Cloud App Discovery blade that says I need an Azure AD P1 license to access it, so clearly my Cloud App Security license isn't supposed to be used to access this. Are these the same app? Are they changing the licensing requirements?

Docs for Cloud App Discovery: https://msdn.microsoft.com/en-us/library/azure/mt143581.aspx

Docs for Cloud App Security: https://docs.microsoft.com/en-us/cloud-app-security/

Blog post making them look like the same thing: https://blogs.technet.microsoft.com/enterprisemobility/2017/09/27/whats-new-in-microsoft-cloud-app-s...

Note: The client in question is on Microsoft 365 Business + Cloud App Security + Exchange Online Advanced Threat Protection.

[#2]

@Dima Donhin @Nicholas DiCola (SECURITY JEDI)

[#3]

Paul,
The new azure ad discovery is the MCAS discovery feature set. You said you have MCAS but which license? Standalone or EMS E5? And do you have AAD P1 license?

[#4 · Accepted solution]

Yeah, Cloud App Discovery is just that: Discovery. Provide insights on what Cloud apps are used in the organization.  Licensed with AADP1 or EMS E3.

To have more governance on your Cloud apps, you need the additional Cloud App Security.

[#5]

@Peter Sterk Do you know of any comparison chart between the 2?

[#6]

@Thomas_HansenDoes this help?  https://docs.microsoft.com/en-us/cloud-app-security/editions-cloud-app-security-aad