Skip to content

Commit 767e515

Browse files
Merge pull request #4502 from AmitMishaeli/patch-9
Update caac-known-issues.md
2 parents 2729dd9 + 3b802e0 commit 767e515

File tree

1 file changed

+13
-14
lines changed

1 file changed

+13
-14
lines changed

CloudAppSecurityDocs/caac-known-issues.md

Lines changed: 13 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -119,27 +119,26 @@ When a session policy is enforced using Edge in-browser protection and the user
119119

120120
Example Scenario:
121121

122-
A user was originally assigned a CA policy for the Salesforce application, along with an Defender for Cloud apps session policy that blocked file downloads. As a result, downloads were blocked when the user accessed Salesforce in Edge.
122+
A user was originally assigned a CA policy for Salesforce along with a Defender for Cloud Apps session policy to block file downloads. As a result, downloads were blocked when the user accessed Salesforce in Edge.
123123

124124
Although the admin later removed the CA policy, the user still experiences the download block in Edge due to cached policy data.
125125

126126
Mitigation Options:
127127

128128
Option 1: Automatic cleanup
129-
1. Reassign the user/app to the CA policy.
130-
2. Remove the corresponding Defender for Cloud Apps session policy.
131-
3. Have the user access the application using Edge, this will trigger the policy removal automatically.
132-
4. Remove the CA policy again.
129+
1. Add the user/app back into the scope of the CA policy.
130+
2. Remove the corresponding Defender for Cloud Apps session policy.
131+
3. Wait for users to access the application using Edge. This will automatically trigger the policy removal.
132+
4. Remove the user/app from the scope of the CA policy.
133133

134-
Option 2: Manual cleanup
135-
1. Delete the cached policy file
136-
- Go to: C:\Users\<username>\AppData\Local\Microsoft\Edge\
137-
- Delete the file: mda_store.txt
138-
139-
2. Remove the work profile in Edge
140-
- Open Microsoft Edge.
141-
- Navigate to Profile Settings.
142-
- Delete the work profile associated with the outdated session policy.
134+
Option 2: Delete the cached policy file (Manual cleanup)
135+
1. Go to: C:\Users\<username>\AppData\Local\Microsoft\Edge\
136+
2. Delete the file: mda_store.txt
137+
138+
Option 3: Remove the work profile in Edge (Manual cleanup)
139+
1. Open Edge.
140+
2. Navigate to Profile Settings.
141+
3. Delete the work profile associated with the outdated session policy.
143142

144143
These steps will force a policy refresh and resolve enforcement issues related to outdated session policies.
145144

0 commit comments

Comments
 (0)