Something Changed – I Want to See What Changed in the Conditional Access Policy
You receive an alert or notice some irregular activity within your cloud environment. The first suspicion is that a Conditional Access (CA) policy might have been modified—either unintentionally or maliciously. Your priority now is to identify the exact change, who made it, and when it was made. Manually navigating through all CA policies, especially in a multi-tenant environment, is time-consuming and prone to error. You need a streamlined way to quickly review and compare policy changes, ensuring the integrity of your security posture.
With CA Gatekeeper’s Detailed Change Tracking feature, you can instantly view a complete history of any changes made to your CA policies across all tenants. By navigating to the Policy Change Log, you can select any policy and see side-by-side comparisons of the previous and current configurations.
CA Gatekeeper visually highlights changes, showing what’s been added, removed, or modified in the policy. For example, if a user or group was added to a policy, it will be clearly marked in green (for additions) or red (for deletions). This allows you to spot critical changes immediately.
Additionally, CA Gatekeeper logs who made the changes, when they were made, and from which IP address or location. This not only helps you quickly track down unauthorized modifications but also provides an audit trail that can be used for compliance purposes or internal reviews.