Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

GSA Microsoft traffic profile management

This page's changes and edits · All guidance changes

Microsoft's edit ·

Freshness review: GSA — 37 articles reviewed (alt text prefix, ms.date)

Microsoft's commit message in MicrosoftDocs/entra-docs · commit e40ec8d · +5 −5 lines · also on GitHub

⋯ 1 unchanged line
22 title: How to Enable and Manage the Microsoft Profile
33 description: "Enable the Microsoft traffic forwarding profile to route traffic to Microsoft 365 services including Exchange Online, SharePoint, and OneDrive through Global Secure Access."
44 ms.topic: how-to
5 −ms.date: 03/13/2026
5 +ms.date: 03/25/2026
66 ms.subservice: entra-internet-access
77 ai-usage: ai-assisted
88 ---
⋯ 37 unchanged lines
4646
4747 The policy groups are listed, with a checkbox to indicate if the policy group is enabled. Expand a policy group to view all of the IPs and FQDNs included in the group.
4848
49 −![Screenshot of the Microsoft profile details.](media/how-to-manage-microsoft-profile/microsoft-profile-details.png)
49 +![Screenshot that shows the Microsoft profile details.](media/how-to-manage-microsoft-profile/microsoft-profile-details.png)
5050
5151 The policy groups include the following details:
5252
⋯ 10 unchanged lines
6363
6464 The following example shows setting the `*.sharepoint.com` FQDN to **Bypass** so the traffic isn't forwarded to the service.
6565
66 −![Screenshot of the Action dropdown menu.](media/how-to-manage-microsoft-profile/microsoft-policies-forward-bypass.png)
66 +![Screenshot that shows the Action dropdown menu.](media/how-to-manage-microsoft-profile/microsoft-policies-forward-bypass.png)
6767
6868 If the Global Secure Access client isn't able to connect to the service (for example due to an authorization or Conditional Access failure), the service *bypasses* the traffic. Traffic is sent direct-and-local instead of being blocked. In this scenario, you can create a Conditional Access policy for the [compliant network check](how-to-compliant-network.md), to block traffic if the client isn't able to connect to the service.
6969
⋯ 9 unchanged lines
7979
8080 1. Select the **View** link for **Linked Conditional Access policies**.
8181
82 − ![Screenshot of traffic forwarding profiles with Conditional Access link highlighted.](media/how-to-manage-microsoft-profile/microsoft-conditional-access-policy-link.png)
82 + ![Screenshot that shows traffic forwarding profiles with Conditional Access link highlighted.](media/how-to-manage-microsoft-profile/microsoft-conditional-access-policy-link.png)
8383
8484 1. Select a policy from the list. The details of the policy open in Conditional Access.
8585
86 − ![Screenshot of the applied Conditional Access policies.](media/how-to-manage-microsoft-profile/conditional-access-applied-policies.png)
86 + ![Screenshot that shows the applied Conditional Access policies.](media/how-to-manage-microsoft-profile/conditional-access-applied-policies.png)
8787
8888 ## Microsoft traffic profile remote network assignments
8989
⋯ 21 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:13 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current