GSA Microsoft traffic profile management
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 8ea8dd2 · +6 −3 lines · also on GitHub
⋯ 14 unchanged lines
1515
1616
- Exchange Online
1717
- SharePoint Online and Microsoft OneDrive.
18
−- Microsoft 365 Common and Office Online (only Microsoft Entra ID and Microsoft Graph)
18
+- Microsoft 365 Common and Office Online
1919
2020
## Prerequisites
2121
⋯ 2 unchanged lines
2424
- A [Global Secure Access Administrator](../identity/role-based-access-control/permissions-reference.md#global-secure-access-administrator) role in Microsoft Entra ID to enable traffic profiles.
2525
- A [Conditional Access Administrator](../identity/role-based-access-control/permissions-reference.md#conditional-access-administrator) role to create and interact with Conditional Access policies.
2626
- The product requires licensing. For details, see the licensing section of [What is Global Secure Access](overview-what-is-global-secure-access.md). If needed, you can [purchase licenses or get trial licenses](https://aka.ms/azureadlicense).
27
−- To use the Microsoft traffic forwarding profile, a Microsoft 365 E3 license is recommended.
2827
2928
### Known limitations
3029
⋯ 29 unchanged lines
6059
6160
You can configure the traffic acquisition rules to bypass traffic acquisition. If you do, the users will still be able to access resources; however, the Global Secure Access service will not process the traffic. You can bypass traffic to a specific FQDN or IP address, an entire policy group within the profile, or the entire Microsoft profile itself. If you only need to forward some of the Microsoft resources within a policy group, enable the group then change the **Action** in the details accordingly.
6261
62
+[!IMPORTANT]
63
+> When a rule is set to Bypass, the Internet Access traffic profile will not acquire this traffic. Even with the Internet Access profile enabled, the bypassed traffic will skip Global Secure Access acquisition and use that client's network routing path to egress to the Internet. Traffic available for acquisition in the Microsoft traffic profile can be only acquired in the Microsoft traffic profile.
64
+
6365
The following example shows setting the `*.sharepoint.com` FQDN to **Bypass** so the traffic isn't forwarded to the service.
6466
6567
⋯ 36 unchanged lines
102104
103105
## Next steps
104106
105
−The next step for getting started with Microsoft Entra Internet Access is to [install and configure the Global Secure Access Client on end-user devices](how-to-install-windows-client.md)
107
+The next step for getting started with Microsoft traffic profile is to [install and configure the Global Secure Access Client on end-user devices](how-to-install-windows-client.md)
106108
107109
For more information about traffic forwarding, see the following article:
108110
109111
- [Learn about traffic forwarding profiles](concept-traffic-forwarding.md)
112
+- [Learn about the Microsoft traffic forwarding profile](concept-traffic-forwarding.md)
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:29 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.