GSA Microsoft traffic profile management
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit bc164c5 · +5 −7 lines · also on GitHub
11
---
2
−title: How to enable and manage the Microsoft profile
2
+title: How to Enable and Manage the Microsoft Profile
33
description: Learn how to enable and manage the Microsoft traffic forwarding profile for Global Secure Access.
44
author: kenwith
55
ms.author: kenwith
66
manager: amycolannino
77
ms.topic: how-to
8
−ms.date: 05/02/2024
8
+ms.date: 12/23/2024
99
ms.service: global-secure-access
1010
ms.subservie: entra-internet-access
1111
---
⋯ 15 unchanged lines
2727
2828
### Known limitations
2929
30
−- Individual services are added to the Microsoft traffic profile on an ongoing basis. Currently, Microsoft Entra ID, Microsoft Graph, Exchange Online and SharePoint Online are supported as part of the Microsoft traffic profile
31
−- For additional limitations of the Microsoft traffic profile, see [Windows Client known limitations](how-to-install-windows-client.md#known-limitations)
30
+[!INCLUDE [known-limitations-include](../includes/known-limitations-include.md)]
3231
3332
## Enable the Microsoft traffic profile
3433
⋯ 22 unchanged lines
5756
- **Protocol**: TCP (Transmission Control Protocol) or UDP (User Datagram Protocol)
5857
- **Action**: Forward or Bypass
5958
60
−You can configure the traffic acquisition rules to bypass traffic acquisition. If you do, the users will still be able to access resources; however, the Global Secure Access service will not process the traffic. You can bypass traffic to a specific FQDN or IP address, an entire policy group within the profile, or the entire Microsoft profile itself. If you only need to forward some of the Microsoft resources within a policy group, enable the group then change the **Action** in the details accordingly.
59
+You can configure the traffic acquisition rules to bypass traffic acquisition. If you do, the users are still able to access resources; however, the Global Secure Access service doesn't process the traffic. You can bypass traffic to a specific FQDN or IP address, an entire policy group within the profile, or the entire Microsoft profile itself. If you only need to forward some of the Microsoft resources within a policy group, enable the group then change the **Action** in the details accordingly.
6160
6261
> [!IMPORTANT]
6362
> When a rule is set to Bypass in the Microsoft traffic profile, the Internet Access traffic profile will not acquire this traffic. Even with the Internet Access profile enabled, the bypassed traffic will skip Global Secure Access acquisition and use that client's network routing path to egress to the Internet. Traffic available for acquisition in the Microsoft traffic profile can be only acquired in the Microsoft traffic profile.
⋯ 24 unchanged lines
8887
8988
## Microsoft traffic profile remote network assignments
9089
91
−Traffic profiles can be assigned to remote networks, so that the network traffic is forwarded to Global Secure Access without having to install the client on end user devices. As long as the device is behind the customer premises equipment (CPE), the client isn't required. You must create a remote network before you can add it to the profile. For more information, see [How to create remote networks](how-to-create-remote-networks.md).
90
+Traffic profiles can be assigned to remote networks, so that the network traffic is forwarded to Global Secure Access without having to install the client on end user devices. As long as the device is behind the customer premises equipment (CPE), the client isn't required. You must create a remote network before you can add it to the profile. For more information, see [How to create remote networks](how-to-create-remote-networks.md).
9291
9392
**To assign a remote network to the Microsoft profile**:
9493
⋯ 4 unchanged lines
9998
10099
## User and group assignments
101100
You can scope the Microsoft profile to specific users and groups instead of applying the traffic profile to all users. To learn more about user and group assignment, see [How to assign and manage users and groups with traffic forwarding profiles](how-to-manage-users-groups-assignment.md).
102
−
103101
104102
105103
## Next steps
⋯ 7 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:29 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.