Internet Access network content filtering
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 16d1e0e · +5 −4 lines · also on GitHub
⋯ 54 unchanged lines
5555
- A user with the [Global Secure Access Administrator](../identity/role-based-access-control/permissions-reference.md#global-secure-access-administrator) role in Microsoft Entra ID to configure Global Secure Access settings.
5656
- A [Conditional Access Administrator](../identity/role-based-access-control/permissions-reference.md#conditional-access-administrator) role to configure Conditional Access policies.
5757
- The Global Secure Access client requires a device (or virtual machine) that is either Microsoft Entra ID joined or Microsoft Entra ID Hybrid joined.
58
+- To use **web categories** as a content policy destination, you must also configure a [web content filtering policy](how-to-configure-web-content-filtering.md).
5859
- User Datagram Protocol (UDP) traffic (that is, QUIC) isn't supported. Most websites support fallback to Transmission Control Protocol (TCP) when QUIC can't be established. For an improved user experience, you can deploy a Windows Firewall rule that blocks outbound UDP 443:
5960
6061
```powershell
⋯ 27 unchanged lines
8889
8990
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](../identity/role-based-access-control/permissions-reference.md#global-secure-access-administrator).
9091
1. Browse to **Global Secure Access** > **Secure** > **Content policies**.
91
− :::image type="content" source="media/how-to-network-content-filtering/file-policies-create.png" alt-text="Screenshot of the Content policies page in the Microsoft Entra admin center showing the Create policy button." lightbox="media/how-to-network-content-filtering/file-policies-create.png":::
92
+ :::image type="content" source="media/how-to-network-content-filtering/content-policies-create.png" alt-text="Screenshot of the Content policies page in the Microsoft Entra admin center showing the Create policy button." lightbox="media/how-to-network-content-filtering/content-policies-create.png":::
9293
1. Select **+ Create Policy**. Pick the options that fit your needs.
9394
1. On the **Basics** tab:
9495
1. Enter the policy **Name**.
9596
1. Enter the policy **Description**.
9697
1. Select **Next**.
97
− :::image type="content" source="media/how-to-network-content-filtering/file-policy-basics-tab.png" alt-text="Screenshot of the Basics tab for a new content policy showing the Policy name and Description fields." lightbox="media/how-to-network-content-filtering/file-policy-basics-tab.png":::
98
+ :::image type="content" source="media/how-to-network-content-filtering/content-policy-basics-tab.png" alt-text="Screenshot of the Basics tab for a new content policy showing the Policy name and Description fields." lightbox="media/how-to-network-content-filtering/content-policy-basics-tab.png":::
9899
1. On the **Rules** tab:
99100
1. Add a new rule.
100101
1. Enter the **Rule name**, **Description**, **Priority**, and **Status** as appropriate.
⋯ 2 unchanged lines
103104
- To use data policies configured in Microsoft Purview, select **Scan with Purview** (preview).
104105
:::image type="content" source="media/how-to-network-content-filtering/scan-with-purview.png" alt-text="Screenshot of the content rule screen with the Action menu expanded and the Scan with Purview option selected." lightbox="media/how-to-network-content-filtering/scan-with-purview.png":::
105106
1. For **Matching conditions**, select the appropriate **Activities** and **Content types**.
106
− :::image type="content" source="media/how-to-network-content-filtering/file-rule-content-types.png" alt-text="Screenshot of the Add Content Rule page showing the Matching conditions section with Activities set to Upload, and the Content types dropdown expanded with PDF selected." lightbox="media/how-to-network-content-filtering/file-rule-content-types.png":::
107
+ :::image type="content" source="media/how-to-network-content-filtering/content-rule-content-types.png" alt-text="Screenshot of the Add Content Rule page showing the Matching conditions section with Activities set to Upload, and the Content types dropdown expanded with PDF selected." lightbox="media/how-to-network-content-filtering/content-rule-content-types.png":::
107108
1. Select **+ Add destination** and configure the destinations.
108109
- For application-specific control, you can add the exact upload URLs and related FQDNs that the app uses. Use browser developer tools or network traffic analysis to identify the endpoints used during file upload.
109110
- You can also select web categories as a destination. If you select web categories, you must also configure a [web content filtering policy](how-to-configure-web-content-filtering.md).
110111
1. Select **Next**.
111112
1. On the **Review** tab, review your settings.
112
− :::image type="content" source="media/how-to-network-content-filtering/file-policy-review-tab.png" alt-text="Screenshot of the Review tab showing a summary of the content policy settings including policy name, description, and number of rules before creation." lightbox="media/how-to-network-content-filtering/file-policy-review-tab.png":::
113
+ :::image type="content" source="media/how-to-network-content-filtering/content-policy-review-tab.png" alt-text="Screenshot of the Review tab showing a summary of the content policy settings including policy name, description, and number of rules before creation." lightbox="media/how-to-network-content-filtering/content-policy-review-tab.png":::
113114
1. Select **Create** to create the policy.
114115
115116
> [!IMPORTANT]
⋯ 162 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 22:35 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.