Fastly Cloud App after Enabling Defender for Endpoint

%3CLINGO-SUB%20id%3D%22lingo-sub-2264142%22%20slang%3D%22en-US%22%3EFastly%20Cloud%20App%20after%20Enabling%20Defender%20for%20Endpoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2264142%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20begun%20an%20MDE%20pilot%20and%20have%20noticed%20that%20all%20our%20users%2Fdevices%20in%20this%20pilot%20(and%20only%20in%20the%20pilot)%20are%20now%20connecting%20to%20a%20%22Hosting%20Services%22%20cloud%20app%20called%20Fastly.%26nbsp%3B%20This%20then%20alerts%20as%20a%20new%20High%20Volume%20App%20in%20MCAS.%26nbsp%3B%20I%20am%20wondering%20if%20this%20expected%20and%20required%20behavior%20and%20should%20sanction%20this%20app%20and%20then%20exclude%20in%20alerts%20or%20something%20to%20be%20concerned%20with.%3CBR%20%2F%3EI%20have%20checked%20in%20the%20MCAS%20community%20and%20done%20some%20cursory%20internet%20searches%20with%20no%20helpful%20results.%3C%2FP%3E%3CP%3EAnyone%20else%20experiencing%20this%20or%20have%20any%20helpful%20explanation%3F%26nbsp%3B%20Thanks%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

We have begun an MDE pilot and have noticed that all our users/devices in this pilot (and only in the pilot) are now connecting to a "Hosting Services" cloud app called Fastly.  This then alerts as a new High Volume App in MCAS.  I am wondering if this expected and required behavior and should sanction this app and then exclude in alerts or something to be concerned with.
I have checked in the MCAS community and done some cursory internet searches with no helpful results.

Anyone else experiencing this or have any helpful explanation?  Thanks in advance.

1 Reply
Hi, you can decide whether to block or not -- but it is not a common usage to have high volume in this application.