When using Microsoft Defender for cloud apps can you bypass proxy?

Question

When using Microsoft Defender for cloud apps can you bypass proxy?

mike van kan 1

Can a user bypass the conditional access app control URL? When using this normally the URL changes and traffic is monitored and guarded, if the user types in the default non proxy URL does the CASB rederict to the proxy again or is the default SaaS URL visited?C

JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2022-01-21T20:52:26.77+00:00
@mike van kan
Thank you for your post!

For the Conditional Access App control URL, can you share more information on what URL or CA App control you're referring to?

Is this CA App policy in Azure AD?

Can you also share what the default non-proxy URL is? Or where I could find this info?

Any additional information, screenshots, or documentation to better help me understand your issue would be greatly appreciated.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
mike van kan 1 Reputation point

2022-01-21T21:02:21.333+00:00

Hey James,
in this case its a hypothetical usecase, there is no installation at the moment I am just doing some research into the product. I found allot of answers in the technical docs but this one goes unanswered.
The situation will be that we will be using Microsoft Defender for Cloud Apps, we will be adding a SaaS-solution by conditional Access App Control. After this all is implemented a hypothetical user logs in, and is transferred to the URL of the CASB for session monitoring. According to the documentation every URL even a background URL is changed and routed trough the CASB. If the user changes managed CASB URL from casb.portal.office.com to portal.office.com will the user be redirected to the CASB again or will the user be visiting the SaaS-solution without CASB oversight?

I hope this is a little bit clearer.
Carolyne-3676 296 Reputation points

2024-02-27T05:59:41.26+00:00

When using Microsoft Defender for Cloud Apps, traffic is redirected through the Cloud Access Security Broker (CASB) proxy to monitor and control access to cloud apps. This means that if a user attempts to access a cloud app directly without going through the CASB proxy, the access will be blocked. In regards to the conditional access app control URL, when this feature is used, all traffic to the SaaS app is redirected to the URL specified in the configuration. This means that even if a user attempts to access the SaaS app using the default non-proxy URL, the access will still be redirected to the URL specified in the configuration.

1 answer

Your answer

JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2022-01-21T20:52:26.77+00:00

@mike van kan
Thank you for your post!

For the Conditional Access App control URL, can you share more information on what URL or CA App control you're referring to?

Is this CA App policy in Azure AD?

Can you also share what the default non-proxy URL is? Or where I could find this info?

Any additional information, screenshots, or documentation to better help me understand your issue would be greatly appreciated.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
mike van kan 1 Reputation point

2022-01-21T21:02:21.333+00:00

Hey James,
in this case its a hypothetical usecase, there is no installation at the moment I am just doing some research into the product. I found allot of answers in the technical docs but this one goes unanswered.
The situation will be that we will be using Microsoft Defender for Cloud Apps, we will be adding a SaaS-solution by conditional Access App Control. After this all is implemented a hypothetical user logs in, and is transferred to the URL of the CASB for session monitoring. According to the documentation every URL even a background URL is changed and routed trough the CASB. If the user changes managed CASB URL from casb.portal.office.com to portal.office.com will the user be redirected to the CASB again or will the user be visiting the SaaS-solution without CASB oversight?

I hope this is a little bit clearer.
Carolyne-3676 296 Reputation points

2024-02-27T05:59:41.26+00:00

When using Microsoft Defender for Cloud Apps, traffic is redirected through the Cloud Access Security Broker (CASB) proxy to monitor and control access to cloud apps. This means that if a user attempts to access a cloud app directly without going through the CASB proxy, the access will be blocked. In regards to the conditional access app control URL, when this feature is used, all traffic to the SaaS app is redirected to the URL specified in the configuration. This means that even if a user attempts to access the SaaS app using the default non-proxy URL, the access will still be redirected to the URL specified in the configuration.

Answer 1

@mike van kan
Thank you for sharing more details on this!

Based off our Microsoft Defender for Cloud Apps - Conditional Access App Control documentation, I wasn't able to find any information on this. However, since your question is more related to Microsoft Defender for Cloud Apps conditional access app control process, I'd recommend reaching out to their experts via the Microsoft Defender for Cloud Apps Tech Community.

If you aren't getting an answer to your question, I'd also recommend following the Microsoft Defender for Cloud Apps Support and troubleshooting documentation.

Links:
Create an online support request for Defender for Cloud Apps
Additional resources documentation

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Share via

When using Microsoft Defender for cloud apps can you bypass proxy?

1 answer

Your answer