Comments (7)
The document talks about verdict: allowed/blocked does this mean CAS requires 3rd party ICAP server to produce verdict header which either sets blocked or allowed value.
https://docs.microsoft.com/en-us/cloud-app-security/icap-stunnel
Something like this ?? :
ICAP/1.0 200 OK
verdict: blocked
Encapsulated: null-body=0
from cloudappsecuritydocs.
Hi Wasim,
thanks so much for reaching out. I agree that the language we used makes it sound confusing. I'll publish a fix with our next update! Thanks again for your contribution!
from cloudappsecuritydocs.
Hi Wasim,
thanks so much for reaching out. I agree that the language we used makes it sound confusing. I'll publish a fix with our next update! Thanks again for your contribution!
When is the next update planned ?
from cloudappsecuritydocs.
Hi @wazhar , ordinarily we publish bi-weekly. You should already see this change.
from cloudappsecuritydocs.
@rkarlin I don't see any change. External DLP Integration
Page timestamp says it was last updated '04/22/2018'.
from cloudappsecuritydocs.
This fix has been live for some time.
from cloudappsecuritydocs.
@msmbaldwin
I still don't see this document explaining generic REQMOD allow/block verdict.
Here is the response that I got when I posted the same question at [email protected]
For all generic ICAP servers we can enable a configuration which requires the server to send the status code 200 in order to identify a match. In such cases the verdict doesnβt matter as long as the status code is present (200 β match, 204 β no match).
However for this to work, there is some configuration that has to be enabled for the tenant. I had to provide my tenant id to the CAS team for this reason. It worked after that.
You might want to verify and document this.
Thanks.
from cloudappsecuritydocs.
Related Issues (20)
- Obsolete menu option HOT 4
- clearly state you can only search a 1 week period at a time HOT 3
- API Name When Granting Permission on App is misleading HOT 1
- Page is outdated HOT 3
- Windows 11 support HOT 1
- Prerequisite section is incomplete/inaccurate HOT 4
- Code formatting HOT 2
- Python indentations required HOT 3
- please add link for co-Auth labeling limitation. HOT 1
- Defender Portal OAuth apps tab moved? HOT 4
- Redundunt expression HOT 1
- Vancouver version of SN not supported to connect to MDCA? HOT 3
- Call out Windows 11 specifically in the pre-reqs section HOT 2
- Add "Microsoft Teams" for context loss know limitation HOT 2
- Microsoft Purview E5/A5/F5? HOT 2
- [QUESTION][Entities][FILTER BY USER] HOT 6
- Need Detail on Security Role to Deanonymize data HOT 1
- There is no unified experience for end users when it comes to 'Setup Microsoft Defender for Cloud Apps' HOT 1
- Alerts generated from *Microsoft IPs* ("Administrative activity from a non-corporate IP address involving one user") HOT 1
- What is a Microsoft Defender for Microsoft 365 P1 ? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cloudappsecuritydocs.