Internet Access threat intelligence

This page's changes and edits · All guidance changes

Microsoft's edit · 23 Feb 03:34 UTC

Fix broken links, stale branding, connector naming, typo, and formatting

Microsoft's commit message in MicrosoftDocs/entra-docs · commit f981f47 · +3 −3 lines · also on GitHub

⋯ 19 unchanged lines

2020 - Administrators who interact with **Global Secure Access** features must have one or more of the following role assignments depending on the tasks they're performing.

2121 - The [Global Secure Access Administrator role](/azure/active-directory/roles/permissions-reference) role to manage the Global Secure Access features.

2222 - The [Conditional Access Administrator](/azure/active-directory/roles/permissions-reference#conditional-access-administrator) to create and interact with Conditional Access policies.

23 −- Complete the [Get started with Global Secure Access](how-to-get-started-with-global-secure-access.md) guide.

23 +- Complete the [Get started with Global Secure Access](quickstart-access-admin-center.md) guide.

2424 - [Install the Global Secure Access client](how-to-install-windows-client.md) on end user devices.

2525 - You must disable Domain Name System (DNS) over HTTPS (Secure DNS) to tunnel network traffic. Use the rules of the fully qualified domain names (FQDNs) in the traffic forwarding profile. For more information, see [Configure the DNS client to support DoH](/windows-server/networking/dns/doh-client-support#configure-the-dns-client-to-support-doh).

2626 - Disable built-in DNS client on Chrome and Microsoft Edge.

2727 - IPv6 traffic isn't acquired by the client and is therefore transferred directly to the network. To enable all relevant traffic to be tunneled, set the network adapter properties to [IPv4 preferred](troubleshoot-global-secure-access-client-diagnostics-health-check.md#ipv4-preferred).

2828 - User Datagram Protocol (UDP) traffic (that is, QUIC) isn't supported in the current preview of Internet Access. Most websites support fallback to Transmission Control Protocol (TCP) when QUIC can't be established. For an improved user experience, you can deploy a Windows Firewall rule that blocks outbound UDP 443:

2929

30 −```powershell

30 +```powershell

3131 @New-NetFirewallRule -DisplayName "Block QUIC" -Direction Outbound -Action Block -Protocol UDP -RemotePort 443

32 −```

32 +```

3333

3434 - (Optional) [Configure Transport Layer Security (TLS) inspection](how-to-transport-layer-security.md) in order for URL indicators to be evaluated against HTTPS traffic.

3535

⋯ 100 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:04 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.