Merge branch 'main' of https://github.com/MicrosoftDocs/CloudAppSecurityDocs-pr into two-defender-for-cloud-apps-articles

Author: ShawnJackson

CloudAppSecurityDocs/in-browser-protection.md

@@ -82,6 +82,31 @@ For example, if you have an Endpoint DLP policy that blocks a file upload to Sal
 
 For more information, see [Learn about data loss prevention](/purview/dlp-learn-about-dlp).
 
+## Enforce Edge in-browser when accessing business apps
+Administrators who understand the power of Edge in-browser protection, can require their users to use Edge when accessing corporate resources. 
+A primary reason is security, since the barrier to circumventing session controls using Edge is much higher than with reverse proxy technology.
+
+Admin experience   
+The feature is controlled through the following settings:   
+M365 Defender > Settings > Cloud Apps > Edge for Business protection > Enforce usage of Edge for business   
+
+The following options are available:   
+- Do not enforce (default)   
+- Allow access only from Edge   
+- Enforce access from Edge when possible
+
+Admins have the option to apply policies on all devices or only on unmanaged devices.
+
+**Allow access only from Edge** means that access to the business application, scoped to session policies, can only be obtained via the Edge browser.
+
+**Enforce access from Edge when possible** means that users should use Edge to access the application if their context permits, but if not, they may use a different browser to access the protected application.
+
+For example: 
+If a user is subject to a policy that does not align with in-browser protection capabilities (such as, 'Protect file upon download'), OR 
+the Operating System is incompatible (for instance, Android). 
+In that scenario, because the user lacks control over the context, they may opt to use a different browser. 
+If the policies applicable to him allow it and the operating system is compatible (Windows 10, 11, macOS), then he is required to utilize Edge. 
+
 ## Related content
 
 For more information, see [Microsoft Defender for Cloud Apps Conditional Access app control](proxy-intro-aad.md).

CloudAppSecurityDocs/release-notes.md

@@ -22,6 +22,14 @@ For news about earlier releases, see [Archive of past updates for Microsoft Defe
 
 ## September 2024
 
+### Enforce Edge in-browser when accessing business apps
+Administrators who understand the power of Edge in-browser protection, can now require their users to use Edge when accessing corporate resources. 
+
+A primary reason is security, since the barrier to circumventing session controls using Edge is much higher than with reverse proxy technology.
+
+For more information see: 
+[Enforce Edge in-browser protection when accessing business apps](https://learn.microsoft.com/defender-cloud-apps/in-browser-protection#enforce-edge-in-browser-when-accessing-business-apps)
+
 ### Connect Mural to Defender for Cloud Apps (Preview)
 
 Defender for Cloud Apps now supports connections to [Mural](https://www.mural.co/) accounts using app connector APIs, giving your visibility into and control over your organization's Mural use.