Secure Web Gateway (SWG): If you work with both Defender for Cloud Apps and one of the following SWGs, you can integrate the products to enhance your security Cloud Discovery experience.The log collector runs on your network and receives logs over Syslog or FTP. Log collector: Log collectors enable you to easily automate log upload from your network.Microsoft Defender for Endpoint integration: Defender for Cloud Apps integrates with Defender for Endpoint natively, to simplify rollout of Cloud Discovery, extend Cloud Discovery capabilities beyond your corporate network, and enable machine-based investigation.These reports can be created by connecting in the following ways: They provide improved visibility over all data, and automatically identify anomalous use using either the Machine Learning anomaly detection engine or by using custom policies that you define. Snapshot reports - Provides ad-hoc visibility on a set on traffic logs you manually upload from your firewalls and proxies.Ĭontinuous reports - Analyze all logs that are forwarded from your network using Defender for Cloud Apps. You can generate the following types of reports: Snapshot and continuous risk assessment reports The apps are ranked and scored based on more than 90 risk factors to provide you with ongoing visibility into cloud use, Shadow IT, and the risk Shadow IT poses into your organization.

For more information about these changes, see Microsoft Defender for Cloud Apps in Microsoft 365 Defender.Ĭloud Discovery analyzes your traffic logs against the Microsoft Defender for Cloud Apps catalog of over 31,000 cloud apps.

It improves your operational efficiency with better prioritization and shorter response times which protect your organization more effectively. Microsoft 365 Defender correlates signals from the Microsoft Defender suite across endpoints, identities, email, and SaaS apps to provide incident-level detection, investigation, and powerful response capabilities. Microsoft Defender for Cloud Apps is now part of Microsoft 365 Defender and can be accessed through its portal at.

Cloud ngfw