No video :(

How to setup Defender for Cloud Apps Session Control

Подписаться 1,1 тыс.

Просмотров 1,6 тыс.

50% 1

Welcome to Doug Does Tech! In this video, Doug takes you step-by-step through setting up session control policies and conditional access in Microsoft Defender for Cloud Apps. If you're looking to enhance security and control access to your organization's cloud applications, this guide is for you.
We'll start with a demo of session control, showing you how users on unmanaged devices can access Web Based resources and encounter conditional access policies that prevent the download of data.
Then, Doug guides you through setting up Defender for Cloud Apps sessions, configuring conditional access policies, and onboarding Microsoft 365 apps.
Finally, we'll delve into creating custom session control policies tailored to your organization's specific needs.
Don't forget to like, share, and subscribe for more tech tutorials and cybersecurity tips from Doug Does Tech!
00:00 Introduction
00:21 Demo of Session Control
02:43 Setting up Defender Cloud Apps Session
04:10 Setup Conditional Access Session controls
05:59 Onboard M365 Session Control
09:34 Custom Session Control Policy
14:06 Onboard Custom App

Опубликовано:

16 авг 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 15

@NDSLAB 15 дней назад

Good Stuff! Keep doing all the MS Security stuff.

@atulpathare2775 29 дней назад

Thanks a bunch for this Video, Really you explain very well

@slartibartfastlunkwill5790 3 месяца назад

Good to see you're back to making videos.

@lasolution365 2 месяца назад

Thank you very much for these videos, it has been really helpful. You are one of the best instructor I watch. Thanks again.

@DougDoesTech 2 месяца назад

Hey so glad it was helpful! and thank you for the compliment!

@aadilkarolia Месяц назад

Thank you for this video, it was really helpful. I was struggling to find an end-to-end guide in a single video/article. Appreciate this 🙂

@angelcardenas4266 2 месяца назад

Me fue de mucha utilidad, gracias! Nuevo suscriptor

@SA-hu9sp 3 дня назад

would this work for apps like Slack or Google Workspace? for example, if I’m trying to restrict a non compliant device (managed via intune) from being able to access corp apps like the ones mentioned + 365 apps, are session policies or access control policies the solution?

@DougDoesTech 3 дня назад

Yes it would work for slack and google workspace. For that use case if you are using defender for cloud apps use the access policy. As that will cover the largest scenarios for those.(slack thick client) session policy would only work on web access. However, the best way to handle this is probably a ca policy that requires the device to be compliant. Look up my Secure Endpoint video on CA. May give you some ideas.

@kjhgliuguiug 29 дней назад

I haven't been able to get Device Exclusions to work in the CA policy. When trying to exclude Compliant devices, specifically, the Conditional Access App Control policy is applied regardless. As a result, I'm getting stumped trying to allow downloads from Exchange Online on compliant devices. We're not hybrid and it's looking the only solution is going to be with certificates. Have you seen this issue?

@DougDoesTech 14 дней назад

If you are using chome make sure you have the Microsoft sso extension installed. Also make sure you are signed into the machine as an entra if user.(not a local machine user) if none of those work check the dsregcmd status.

@ehabgalal9181 2 месяца назад

Hi, What is the value of adding the admin user in onboarding page ? I don’t have one configured and I was able to onboarding the app

@DougDoesTech 2 месяца назад

Many times you don’t need it. But if something doesn’t go right or work you have some of the diagnostic tools you need to fix the app. learn.microsoft.com/en-us/defender-cloud-apps/proxy-deployment-any-app

@ehabgalal9181 2 месяца назад

@@DougDoesTech Thank you for your clarification. One more point please We have custom mobile app that using azure ad for authentication. We have tried to onboard it to MCAS but it seems it didn’t So, is the MCAS support only web not mobile app

@DougDoesTech 2 месяца назад

As far as I know session policy’s like blocking download can only be applied to web based sessions. You can use access policy to control access to mobile and desktop apps. But it won’t do the block download type controls.