Share via

Defender for Cloud Apps access policy does not send notifications

E. Deventer 1 Reputation point
2022-12-05T16:18:47.993+00:00

We have configured an access policy in Defender for Cloud Apps, and have enabled email notifications for it.

267276-2022-12-05-17-11-05.jpg

The access policy blocks access in certain scenarios. I did a test to trigger an event that matches the policy and the access was successfully blocked.
However, no email notification was sent out.
I have only found very brief documentation on the topic which doesn't give any clues as to why this is not working for us (https://learn.microsoft.com/en-us/defender-cloud-apps/access-policy-aad)

Any idea what could be the problem?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,417 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Givary-MSFT 33,241 Reputation points Microsoft Employee
    2022-12-07T09:35:13.023+00:00

    @E. Deventer

    Thank you for reaching out to us, could please help me with the configuration you defined in the access policy ?

    Did the email notification alert ever worked before ? Have you tested email notification with any other access policy ( for example: failed logon attempt )

    we can connect offline to troubleshoot further on this.

  2. Monika Gangurde 0 Reputation points
    2024-11-06T18:39:21.74+00:00

    Hi Team,

    I hope this message finds you well.

    Could please help me on above issue ?

    Thanks,

    Monika

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.