From edf29f1c87062f72e2604bfae19275cf2da3f420 Mon Sep 17 00:00:00 2001
From: "Matt Mitchell (.NET)" <mmitche@microsoft.com>
Date: Tue, 17 Mar 2026 15:58:51 -0700
Subject: [PATCH] Enable CFSClean2 policy for interactive-ci pipeline

Add CFSClean2 to the networkIsolationPolicy settings to address
compliance violation from msedge.exe accessing cdnjs.cloudflare.com
during the Windows_NT job.

Policy: Permissive,CFSClean -> Permissive,CFSClean,CFSClean2
---
 azure-pipelines-official.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/azure-pipelines-official.yml b/azure-pipelines-official.yml
index f6326bf47c..4bc6810dee 100644
--- a/azure-pipelines-official.yml
+++ b/azure-pipelines-official.yml
@@ -51,7 +51,7 @@ extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
   parameters:
     settings:
-      networkIsolationPolicy: Permissive,CFSClean
+      networkIsolationPolicy: Permissive,CFSClean,CFSClean2
     sdl:
       sourceAnalysisPool:
         name: $(DncEngInternalBuildPool)