The document discusses Microsoft Endpoint Manager's capabilities for enhancing security and visibility beyond traditional VPNs, including features like app discovery, threat detection, and session monitoring. It emphasizes the importance of managing risks associated with SaaS applications and the need for regulatory compliance and data protection. Additionally, it outlines tools for investigating threats and managing multi-cloud security postures with recommended mitigation strategies.

1. Microsoft
Endpoint
Manager
Azure AD App Proxy
Beyond User
VPN
Block Activities (Real-Time)
Visibility to file
activity and
perform file tasks
in connected
apps.
• App Discovery & Risk Scoring (Shadow IT)
• Threat Detection & Response
• Policy Audit & Enforcement
• Session monitoring & control
• Information Protection &
Data Loss Prevention (DLP)
Microsoft Cloud App Security
(Cloud Access Security Broker)
Technical Documentation 5. aka.ms/MCASBestPractices
MCAS Ninja Training
Top 20 CASB Use Cases
MCAS Explainer Series (15mins)
Visibility and control over
extensive attack surface in
OAuth apps
Detections for anomalous activity across connected SaaS apps, Azure Active
Directory and Windows Server Active Directory including compromised users,
insider threats, data exfiltration, ransomware activity, etc.
Investigate + Govern
Manage
+
Control
Rates risk for discovered
SaaS apps based on
regulatory certification,
industry standards, and
best practices
Discover
Multi-cloud security
posture +
recommended
mitigations
Detections & contextual
data on known exploitable
components &
misconfigurations, w/
relevant paths for
remediation