Great product for E5 customers
Use Cases and Deployment Scope
We utilize Microsoft Defender for Cloud apps for several functions including web filtering, SaaS app management and control, and Data Loss Prevention. The cloud inventory works well and provides a simple interface with all of the discovered SaaS apps accessed by the organization. By utilizing the sanctioned and unsanctioned tags, we are able to control the SaaS apps by blocking outright or allowing with controls and monitoring. For DLP, we utilize the alerting to report on suspicious or unusual file transfers.
Pros
- SaaS application discovery
- Detection alerts
- Integration with other Microsoft Defender products to enhance the capabilities.
Cons
- Integrate better with Purview for DLP rules
- Onboard more supported applications with fine grained controls.
- Provide more reporting aside from shadow it report
Return on Investment
- Included in the E5 license making total cost of ownership lower compared with competitors and providing greater value for the organization.
Usability
Alternatives Considered
Zscaler Internet Access, Zscaler Private Access and Netskope CASB
Other Software Used
Zscaler Internet Access, Zscaler Private Access, Jamf Connect, Jamf Protect, Jamf Pro, Infosec IQ, Tenable Lumin, Tenable Vulnerability Management, BindPlane, Google Security Operations, Microsoft Sentinel




