Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Fastly Cloud App after Enabling Defender for Endpoint

Copper Contributor

We have begun an MDE pilot and have noticed that all our users/devices in this pilot (and only in the pilot) are now connecting to a "Hosting Services" cloud app called Fastly.  This then alerts as a new High Volume App in MCAS.  I am wondering if this expected and required behavior and should sanction this app and then exclude in alerts or something to be concerned with.
I have checked in the MCAS community and done some cursory internet searches with no helpful results.

Anyone else experiencing this or have any helpful explanation?  Thanks in advance.

1 Reply
Hi, you can decide whether to block or not -- but it is not a common usage to have high volume in this application.