📋 Zero Trust Mandate
CHALLENGE 1
Adversaries are executing distributed password spray attacks across POP3, IMAP, and SMTP protocols. These legacy protocols cannot respond to modern MFA challenges and must be completely blocked across the entire tenant, while preserving emergency break-glass account access.
⚠️ Critical Pitfall: If you forget to exclude the
BreakGlass-Admin account, a misconfigured policy can trigger a tenant lockout!
Architectural Requirements:
⚙️ Policy Configuration Blade
Microsoft Entra Admin Center
👤 1. Assignments: Users & Groups
Include Scope:
Exclude (Emergency Safety):
☁️ 2. Target Resources: Cloud Apps
🔍 3. Conditions: Signals & Telemetry
Client Apps & Protocols:
Risk & Device Signals:
🔑 4. Access Controls: Grant
Grant Access
Block Access
⏱️ 5. Session Controls
🎯 What-If Cyber Attacks
LIVE DRILLS
When you launch What-If analysis, the simulation engine tests incoming attacks against your policy rules in real-time.