MC1060467 – (Updated) Action Required – Microsoft Defender for Cloud Apps Network Configurations Changes

Product:

Defender, Defender for Cloud Apps, Defender XDR, Microsoft 365 Apps

Platform:

Online, World tenant

Status:

Change type:

Admin impact, Updated message

Links:

Details:

Summary:
Due to ongoing work on Microsoft Defender for Cloud Apps, network information updates are required. The change is under review, and further instructions will be communicated via the Message center. Administrators may not see the organization logo on the M365 portal overview page once implemented. Update firewall rules accordingly.

Details:
Updated April 30, 2025: We are in the process of reviewing this change and will update the Message center post once we are ready to proceed. Please ignore the Message center post till further notice. Thank you for your patience.
Due to ongoing work on Microsoft Defender for Cloud Apps aimed at improving security and performance, you are required to update network information in your system's firewall and additional third-party services by the dates noted below.
[When this will happen:]
We will communicate via Message center when we are ready to proceed.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-04-23

updated:
2025-05-01

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft is updating Defender for Cloud Apps to enhance security and performance, which will require future adjustments to firewall settings to allow access to specific online addresses, with further instructions to be provided via the Message center.

Direct effects for Operations**

Loss of Organization Branding
Administrators may not see the organization logo on the M365 portal overview page, leading to confusion and a lack of brand identity for users accessing the portal.
   - roles: Administrators, End Users
   - references: https://learn.microsoft.com/defender-cloud-apps/network-requirements#portal-access

Firewall Misconfigurations
Failure to update firewall rules may result in blocked access to essential services, disrupting user access to Microsoft Defender for Cloud Apps and impacting productivity.
   - roles: Network Administrators, IT Support
   - references: https://learn.microsoft.com/defender-cloud-apps/network-requirements#portal-access

Increased Security Vulnerabilities
Without proper updates to network configurations, the organization may face increased security risks, potentially exposing sensitive data to threats.
   - roles: Security Administrators, Compliance Officers
   - references: https://learn.microsoft.com/defender-cloud-apps/network-requirements#portal-access

User Experience Degradation
Users may experience degraded performance or inability to access certain features of Microsoft Defender for Cloud Apps if network configurations are not updated timely.
   - roles: End Users, IT Support
   - references: https://learn.microsoft.com/defender-cloud-apps/network-requirements#portal-access

Communication Delays
If the change is not communicated effectively, users may be unaware of the required updates, leading to confusion and potential downtime.
   - roles: Administrators, End Users
   - references: https://learn.microsoft.com/defender-cloud-apps/network-requirements#portal-access

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Security Posture through Firewall Updates
By updating firewall rules to accommodate new endpoints for Microsoft Defender for Cloud Apps, organizations can significantly enhance their security posture. This ensures that the latest security features and updates are fully operational, protecting sensitive data from potential threats.
   - next-steps: Review current firewall configurations and update them to include the new endpoints as specified in the Microsoft documentation. Schedule a maintenance window to implement these changes and communicate with relevant stakeholders.
   - roles: IT Administrators, Security Officers, Network Engineers
   - references: https://learn.microsoft.com/defender-cloud-apps/network-requirements#portal-access

Improved User Experience with Microsoft 365 Portal
While the change may lead to the organization logo not appearing on the M365 portal, proactively managing user expectations and providing alternative branding solutions can maintain user satisfaction and trust. Consider implementing a custom landing page or internal communication strategy to inform users of the changes.
   - next-steps: Develop a communication plan to inform users about the changes to the M365 portal. Explore options for alternative branding solutions that can be implemented alongside the firewall updates.
   - roles: User Experience Designers, Communications Managers, IT Support Staff
   - references: https://learn.microsoft.com/en-us/microsoft-365/enterprise/what-is-microsoft-365?view=o365-worldwide

Streamlined IT Operations through Automation
Automating the process of updating firewall rules and monitoring compliance with network requirements can reduce administrative overhead and minimize the risk of human error. This can lead to more efficient IT operations and better resource allocation.
   - next-steps: Investigate automation tools that can integrate with existing firewall management systems. Set up scripts or workflows to automatically update firewall rules as per the latest requirements from Microsoft Defender for Cloud Apps.
   - roles: IT Administrators, DevOps Engineers, Network Administrators
   - references: https://www.cio.com/article/331187/how-to-automate-firewall-management.html

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only