Jun 02 2019 04:56 AM
Hello. I'm looking to better understand what the expected behaviour is when using Conditional Access App Control and a Session Policy to block the download of documents, specifically images. Currently I'm able to block everything in an OneDrive mCAS monitored session but for a file that pertains to an image i.e. GIF, TIF, JPG, PNG etc. I've tired multiple options including an explicit file filter (per image attached to this thread) but without any success. Whilst the mCAS session Policy works as expected for none image formats, such as PDF, TXT, Office files for example, that same can't be said for images. Is this by design? Thanks for reading 🙂
Jun 05 2019 10:56 AM
Hi, @flotrig, thank you for posting.
Our SMEs are looking into this topic, and will get back to you as soon as we can.
Jun 11 2019 07:05 AM
Hi @flotrig
This is a limitation of the proxy. Since we have to download the images of the website to render them correctly, we cannot block downloads of images without breaking the experience for customers.
Best regards,
Sebastien
Jun 11 2019 08:21 AM
@Sebastien Molendijk Hi Seb, thanks for coming back, had a suspicion this is where you might head. Therefore, and for clarity, if a user renamed the file suffix of a document restricted by the current mCAS policy, perhaps from a .PDF or .DOCX to an image format such as .PNG they would circumvent the block downloads policy, correct?
Building on this, If I wanted to block image downloads, is there a suggested approach you could recommend? Perhaps Information Protection + Encryption?
Best
Andrew
Feb 04 2021 07:02 AM
@flotrig, @Sebastien Molendijk, a year later, still the same behavior. Your question, @flotrig, is still relevant. Did you receive an answer or found out how to circumvent this issue?
Feb 04 2021 09:13 AM
@BorisBerkelaar this feature is currently in private preview and should be available to everyone pretty soon.
Thanks,
Sebastien
Jul 06 2021 02:35 AM
@Sebastien Molendijk - any news when this will be moving from private to public preview?