GSA traffic forwarding profiles
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 20e75fd · +28 −6 lines · also on GitHub
⋯ 21 unchanged lines
2222
2323
When traffic comes through Global Secure Access, the service evaluates the type of traffic first through the **Microsoft access profile**, then through the **Private access profile**, and finally through the **Internet access profile**. Any traffic that doesn't match these three profiles isn't forwarded to Global Secure Access.
2424
25
−For each traffic forwarding profile, you can configure three main details:
25
+For each traffic forwarding profile, you can configure:
2626
27
−- Which users and which traffic to forward to the service
27
+- Which users receive the traffic forwarding profile and how your users connect to the service
28
+- Which traffic to forward to the service
2829
- What Conditional Access policies to apply
29
−- How your end-users connect to the service
3030
3131
## Microsoft traffic
3232
33
−The Microsoft traffic forwarding profile includes Microsoft Entra ID/ Microsoft Graph, SharePoint Online, Exchange Online, and other Microsoft apps. Traffic forwarding policies are grouped based on the workload and you can choose to either forward the traffic from each group to Global Secure Access, or bypass it.
33
+The Microsoft traffic forwarding profile includes Microsoft Entra ID/ Microsoft Graph, SharePoint Online, Exchange Online, and other Microsoft apps. Traffic forwarding policies are grouped based on the workload - for example, Exchange Online. You can choose to either forward the traffic from each group to Global Secure Access, or to bypass it.
3434
3535
Microsoft traffic is forwarded to the service through either [remote network connectivity](concept-remote-network-connectivity.md), such as branch office location, or through the [Global Secure Access client](how-to-install-windows-client.md).
3636
37
−[Learn more about the Microsoft traffic profile](concept-microsoft-traffic-profile.md)
37
+[Learn more about the Microsoft traffic profile](concept-microsoft-traffic-profile.md)\
3838
39
+### Licensing
40
+
41
+Microsoft traffic profile requires the following licenses:
42
+
43
+- Microsoft Entra ID P1 or P2 (prerequisite).
44
+
3945
## Private access
4046
4147
With the Private Access profile, you can route traffic to your private resources. This traffic forwarding profile requires configuring Quick Access, which includes the fully qualified domain names (FQDNs) and IP addresses of the private apps and resources you want to forward to the service.
4248
4349
Private access traffic can be forwarded to the service by connecting through the [Global Secure Access desktop client](how-to-install-windows-client.md).
4450
51
+### Licensing
52
+
53
+Private Access profile requires the following licenses:
54
+
55
+- Microsoft Entra ID P1 or P2 (prerequisite).
56
+- Microsoft Entra Private Access or Microsoft Entra Suite.
57
+
4558
## Internet access
4659
47
−With the internet access profile, you can route traffic to the public internet, including traffic to SaaS apps. This traffic forwarding profile consists of a pre-populated list of regular expressions for fully qualified domain names (FQDNs) and IP addresses representing the public internet.
60
+With the internet access profile, you can route traffic to the public internet, including traffic to SaaS apps. This traffic forwarding profile consists of a prepopulated list of regular expressions for fully qualified domain names (FQDNs) and IP addresses representing the public internet.
4861
62
+> [!NOTE]
63
+> Internet access profile does not include internet destinations that are available in the Microsoft traffic profile. For complete coverage, we recommend that you enable the Microsoft traffic profile together with the Internet access profile.
64
+
4965
Internet access traffic can be forwarded to the service by connecting through the [Global Secure Access desktop client](how-to-install-windows-client.md).
5066
67
+### Licensing
5168
69
+Private Access profile requires the following licenses:
5270
71
+- Microsoft Entra ID P1 or P2 (prerequisite).
72
+- Microsoft Entra Internet Access or Microsoft Entra Suite.
73
+
5374
## Next steps
5475
5576
- [Learn more about the Microsoft traffic profile](concept-microsoft-traffic-profile.md)
5677
- [Manage the Microsoft traffic profile](how-to-manage-microsoft-profile.md)
78
+- [Manage the Internet access traffic profile](how-to-manage-internet-access-profile.md)
5779
- [Manage the Private access traffic profile](how-to-manage-private-access-profile.md)
5880
- [Configure Quick Access](how-to-configure-quick-access.md)
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 17:01 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.