Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 257/260 feeds/APIs · 416/439 docs · checked 21:54 UTC Customize Public modeDiscuss ChangeIntel on Discord

Internet Access TLS inspection FAQ

This page's changes and edits · All guidance changes

Microsoft's edit ·

Update docs/global-secure-access/faq-transport-layer-security.yml

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 8313bc2 · +1 −1 lines · also on GitHub

⋯ 26 unchanged lines
2727 - Make sure the root certificate authority or intermediate certificate authority is installed on all client devices to establish trust for TLS inspection.
2828
2929 - question: What are the cryptographic algorithms required when generating Certificates for TLS inspection?
30 − answer: Global Secure Access currently supports SHA-256,SHA-384 and SHA-512 for the signing certificates
30 + answer: Global Secure Access currently supports SHA-256, SHA-384, and SHA-512 for the signing certificates.
3131
3232 - question: What is certificate pinning, and how does it affect TLS inspection?
3333 answer: Certificate pinning restricts an application's TLS connections to specific certificates. This restriction prevents interception, but it also blocks security solutions that rely on TLS inspection.
⋯ 26 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 00:08 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 21:54 UTC · 257 of 260 readable · 255 fully read · documentation 416/439 current