Internet Access TLS inspection FAQ
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit e2a964f · +1 −2 lines · also on GitHub
⋯ 3 unchanged lines
44
description: "Get answers to common questions about Transport Layer Security (TLS) inspection."
55
author: HULKsmashGithub
66
ms.author: jayrusso
7
− ms.service: global-secure-access
87
ms.topic: faq
98
ms.date: 05/28/2025
109
⋯ 90 unchanged lines
101100
answer: We use software-protected keys. Global Secure Access intermediate certificate keys are stored in memory to dynamically generate leaf certificates for websites. While these keys aren't protected by an HSM, access to our servers is highly restricted, and we use strict security controls to safeguard key access and system integrity.
102101
103102
- question: What other Global Secure Access features have dependencies on TLS inspection?
104
− answer: Content-based security controls have dependencies on TLS inspection, including URL filtering, File policies, Prompt policies, and enabling partner security solutions.
103
+ answer: Content-based security controls have dependencies on TLS inspection, including URL filtering, Content policies, Prompt policies, and enabling partner security solutions.
105104
106105
additionalContent: |
107106
## Related content
⋯ 3 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 00:08 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.