Enable Cloud Access Security Broker Protection for Microsoft 365 Tenants
Secure Access supports two Cloud Access Security Broker (CASB) features for Microsoft 365:
- Cloud Malware protection for OneDrive, SharePoint Online, and Outlook sites within your Microsoft 365 deployment.
Note on running both Microsoft 365 and Cloud Malware: Microsoft 365 and Cloud Malware both protect users against malware. However, their functionalities are not redundant. Microsoft 365 might discover malware that Cloud Malware does not find. Cloud Malware also finds malware that Microsoft 365 overlooks. There is value to running Microsoft 365 and Cloud Malware simultaneously.
- CASB detection of third-party cloud applications that have been granted OAuth-based permission to access a user's protected resources on Microsoft 365 Sharepoint Online and OneDrive. For more information, see Third-Party Apps Report.
You can enable CASB features for authorized tenants that use the following Microsoft 365 applications:
- Sharepoint Online
- OneDrive
- Outlook (For Cloud Malware protection only and for the primary inbox only. For outgoing mail you can enable Data Loss Prevention; see Enable SaaS API Data Loss Prevention for Microsoft 365 Tenants.)
|
You cannot add an application to an existing tenant. If you have an existing Microsoft
365 tenant that uses one or two of these applications and you wish to add another
application to that tenant, you must first revoke authorization for the existing tenant,
then create a new tenant using all the desired applications.
|