Unsanctioned Cloud Apps not working on Google Chrome

Question

Unsanctioned Cloud Apps not working on Google Chrome

Mr Onka 5

Hi,

We recently implemented the Unsanctioned feature on the Microsoft Defender for Cloud App. it is working in Micrsoft Edge but not working in Google Chrome. Can you advise what else I should do to make it work in Google Chrome?

thanks.

Hunter Davenport 0 Reputation points

2026-02-03T20:27:19.94+00:00

We have tagged 3rd party web mail as unsanctioned like Gmail, Yahoo, etc from our endpoints using Defender for Cloud Apps. But recently discovered that you can bypass this block if you open Chrome on the same endpoint and are able to login. Activity is blocked on Edge but oddly not respected in Chrome. And this is only [mail.google.com] all other 3rd party web mail respects the Defender block. Network Protection is enabled in Block Mode for all our endpoints.

Has anyone else seen this and what is Google doing to bypass or fool Defender that it's not blocked?

2 answers

Your answer

Hunter Davenport 0 Reputation points

2026-02-03T20:27:19.94+00:00

We have tagged 3rd party web mail as unsanctioned like Gmail, Yahoo, etc from our endpoints using Defender for Cloud Apps. But recently discovered that you can bypass this block if you open Chrome on the same endpoint and are able to login. Activity is blocked on Edge but oddly not respected in Chrome. And this is only [mail.google.com] all other 3rd party web mail respects the Defender block. Network Protection is enabled in Block Mode for all our endpoints.

Has anyone else seen this and what is Google doing to bypass or fool Defender that it's not blocked?

Answer 1

EduardsGrebezs 1,186

Hi,

Check on endpoint you should have Network Protection to be enabled in block mode:

Get-MpPreference | Select-Object -Property EnableNetworkProtection

1 = Enabled (Block mode)
2 = Audit mode
0 = Disabled If it’s not 1, enable it via Intune or Group Policy.

Check your Antivirus policy which is deployed to endpoints. If you use Intune check AV setting:

User's image

0 comments

Answer 2

Hello Mr Onka,

Network Protection is a requirement to block unsanctioned apps. You can try installing the Microsoft Defender Browser Protection add-on for third- party browsers and check.

Refer to: https://dotnet.territoriali.olinfo.it/en-us/defender-cloud-apps/governance-discovery#prerequisites

Also refer here for related discussions: https://techcommunity.microsoft.com/discussions/microsoftdefendercloudapps/blocking-of-unsanctioned-apps/3073954

If you found the information above helpful, please Click Yes. This will assist others in the community who encounter a similar issue, enabling them to quickly find the solution and benefit from the guidance provided.

Share via

Unsanctioned Cloud Apps not working on Google Chrome

2 answers

Your answer