GSA Microsoft traffic deployment
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 83a2142 · +2 −0 lines · also on GitHub
⋯ 27 unchanged lines
2828
2929
|Use case|Recommended configuration|
3030
|---|---|
31
+|Prevent users and groups from using managed devices to access Microsoft 365 endpoints in other tenants.|Configure universal tenant restrictions.|
3132
|Ensure users connect and authenticate only with the Global Secure Access secure network tunnel to reduce risk of token theft/replay for Microsoft 365 and all Enterprise applications.|Configure compliant network check in Conditional Access policies.|
3233
|Maximize threat hunting success and efficiencies.|Configure Source IP restoration (Preview) and [Use enriched Microsoft 365 logs](../global-secure-access/how-to-view-enriched-logs.md).|
3334
⋯ 10 unchanged lines
4445
1. Enable the [Microsoft traffic forwarding profile](../global-secure-access/how-to-manage-microsoft-profile.md) and assign your pilot group to it.
4546
1. If you plan to maximize your threat hunting success and efficiency, configure [Source IP restoration](../global-secure-access/how-to-source-ip-restoration.md).
4647
1. Create Conditional Access policies that require [compliant network](../global-secure-access/how-to-compliant-network.md) checks to your pilot group if it's a planned use case.
48
+1. Configure [universal tenant restrictions](../global-secure-access/how-to-universal-tenant-restrictions.md) if it's a planned use case.
4749
1. Deploy the [Global Secure Access client for Windows](../global-secure-access/how-to-install-windows-client.md) on devices for your pilot group to test.
4850
1. Have your pilot users test your configuration.
4951
1. View sign-in logs to ensure that pilot users are connecting to Microsoft endpoints using Global Secure Access.
⋯ 29 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:01 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.