Blocked download - Azure-512p-maskable.png

Question

Blocked download - Azure-512p-maskable.png

Irwin, David 1

Only since 29th June have we observed several Sentinel Incidents across multiple users when they attempt to login, 'Block download on Unmanaged Device' where the blocked download appears to be an Azure image file, 'Azure-512p-maskable.png'.

Attempting to identify root cause or at least if anyone else experiencing the same issue?

Givary-MSFT 35,786 Reputation points Microsoft Employee Moderator

2022-07-11T03:57:33.157+00:00

@Irwin, David

Thank you for reaching out to us. Please help me with the screenshot of this issue to investigate further.
Irwin, David 1 Reputation point

2022-07-11T04:06:31.97+00:00

screenshot attached
I believe there is an issue with an azure image file rendering and as such the session policy interprets it as a user downloading a file at subsequently blocks it.
Irwin, David 1 Reputation point

2022-07-11T04:08:26.697+00:00

Hi, screenshot attached
I believe there is an issue with an azure image file rendering and as such the session policy interprets it as a user downloading a file at subsequently blocks it.
Irwin, David 1 Reputation point

2022-07-11T04:10:07.263+00:00

I reviewed the security policy, and from what I have seen you can specifically block (blacklist) files, but I don't see an option to whitelist