Known Issues
Email Messages with "Do Not Forward" Flag Not Scanned
If a user composing an email chooses the Do not forward option from Options > Permission, Cloud App Security cannot scan email message contents.
Cloud App Security Failed to Scan any Files and Email Messages in Office 365 Services (Applicable to Service Provisioning Using a Delegate Account)
Microsoft provides an option for administrators to choose whether to disable basic authentication requests and allow only modern authentication to access Exchange Online and SharePoint Online/OneDrive, in the purpose of helping protect customers' Office 365 from brute force or password spray attacks. Cloud App Security uses basic authentication when provisioning Office 365 services by creating a Delegate Account, that is, combination of a username and a password, to access customers' Office 365 services. If the administrator enables basic authentication in provisioning but disables it after that, Cloud App Security will not be able to pass the access control on the Office 365 side and scanning will fail.
To ensure proper scanning by Cloud App Security, make sure to always enable basic authentication as follows:
-
For Exchange Online: Connect to Exchange Online PowerShell and run this command Set-OrganizationConfig -OAuth2ClientProfileEnabled $true to enable modern authentication.
-
For SharePoint Online/OneDrive: Click Allow under Control access from apps that don't use modern authentication from Admin > Admin centers > SharePoint > access control on the Microsoft 365 admin center page.
This issue does not affect Microsoft Teams.
Newly Added Users Not Immediately Appearing on the Exchange Policy Configuration Page
After registering Cloud App Security, newly added users will not immediately appear on the Exchange policy configuration page. Click Click here if you do not see new users when you create/update the Exchange Online policy. The page automatically updates after Cloud App Security synchronizes with Active Directory once per day.
Newly Added SharePoint Site Not Appearing Immediately on the SharePoint Policy Configuration Page
After registering Cloud App Security, newly added SharePoint sites will not immediately appear on the SharePoint policy configuration page. Click Click here if you do not see new sites when you create/update the SharePoint Online policy. The page automatically updates after Cloud App Security synchronizes with SharePoint Online once per day.
Newly Added OneDrive, Box, Dropbox or Google Drive Users Not Appearing Immediately on the OneDrive, Box, Dropbox or Google Drive Policy Configuration Page
After registering Cloud App Security, newly added OneDrive, Box, Dropbox or Google Drive users will not immediately appear on the OneDrive, Box, Dropbox or Google Drive policy configuration page. Click Click here if you do not see new OneDrive, Box, Dropbox or Google Drive users when you create or update the OneDrive, Box, Dropbox or Google Drive policy. The page automatically updates after Cloud App Security synchronizes with OneDrive, Box, Dropbox or Google Drive once per day.
