Defender for Cloud Apps can discover Shadow IT network events detected from Defender for Endpoint devices that are working in the same environment as a network proxy appliance.
[When this will happen:]
Public Preview: Rollout will begin in late September 2023 and is expected to be complete by early October 2023.
[How this will affect your organization:]
The traffic will be added to the Defender for Endpoint stream seamlessly, therefore, if your devices (which have Defender for Endpoint enabled and active) are behind a network proxy, expect to see more traffic under the “Win10 Endpoint Users” stream. For more information on integrating Microsoft Defender for Endpoint with Defender for cloud apps, please visit this documentation.
[What you need to do to prepare:]
To get Shadow IT data from Defender for Endpoint when the device is behind a network proxy, Network Protection needs to be turned ON. Visit this documentation for more information on how to turn it ON.
