MacOS / MDATP - MCAS Integration

[kylemiller061]

Currently the MDATP powered cloud discovery, application blocking and other capabilities are restricted to Windows 10 devices. Does the development roadmap for MDATP and MCAS have the same capabilities in development for Mac? Can expect feature parity in areas like this as the Mac MDATP platform matures?

[#2]

@kylemiller061 

Support for MacOS for Discovery is on the roadmap but at the moment we don't have an ETA.

[#3 · Accepted solution]

Hi @kylemiller061,

The support for macOS devices is planned to be added by the end of this fiscal year. Stay tuned for more updates to come.

Thanks,
Danny.

[#4]

@Danny Kadyshevitch Any updates on this front?

[#5]

Hi @Saif_Rahman 

Nice to meet you.

MacOS support is still planned for the end 2020CY.

The plan is to roll out with app controls - e.g app allow/block access.

During 2021CY we plan to introduce Shadow IT discovery for MacOS as well.

Best,

Boris   

[#6]

@Danny Kadyshevitch : Do you have any update on this? Is the progress still expected to be completed by end of 2020? 

[#7]

@ShadowScout Hi,

The controls for MacOS should be available as part of the MacOS preview in Microsoft Defender for Endpoints. any app tagged as unsanctioned in MCAS should be blocked on the Mac device. 

Discovery is still in our backlog planned for 2021 CY.

Boris

[#8]

@Boris_Kacevich : Thank you Boris! Is "Microsoft Defender for Endpoint" available with EMS e5 sku or only with Microsoft 365 e5? 

Kind Regards,

Sreejith Kumar

[#9]

@Boris_Kacevich Thanks. Where do you find this setting in securitycenter.windows.com

[#10]

@ShadowScout Only in M365 E5.

Boris

[#11]

@Saif_Rahman You can find all details here: https://docs.microsoft.com/en-us/cloud-app-security/wdatp-integration

Boris

[#12]

@Boris_Kacevich  That link doesn't work for me

[#13]

@Saif_Rahman Try this updated link.

https://docs.microsoft.com/en-us/cloud-app-security/mde-integration

[#14]

@Boris_Kacevich Does MCAS Unsanctioned apps really blocked on Macs ? This is a browser based connection to , for example, facebook.com? It works on Win10 - but need this to work on Mac. Not sure this feature is working. We even tried the MDE Engine directly under advanced custom network indicators on Defender Portal and it's still does not work?

[#15]

@Saif_Rahman 

Hi,

I suggest raising this in the Defender for Endpoints community with regards on custom URL/Domain indicators support in MacOS.

Boris

[#16]

Hi Danny,

Any updates regarding this topic?

Thanks!

Greetings,
Mike

[#17]

Any update of this Topic? When will you support to Mac? and Linux?

Best regards

[#18]

I confirmed the following with Microsoft O365 support team today (Oct 13, 2021):
Does Defender on MacOS support MCAS unsanctioned application blocking?
"Kindly note that this Feature is not available as of Now in MacOS."

[#19]

Any updates on if discovery for MDE on MacOS is still on the roadmap? Support is giving a firm "no" without an ETA or anything.

[#20]

Both Discovery and block of unsanctioned applications in macOS are on the short-term roadmap.
For more details, please reach out to your Microsoft contact or ask support for a Product group confirmation.