Internet Access TLS inspection policies
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 02c940a · +2 −2 lines · also on GitHub
⋯ 4 unchanged lines
55
ms.author: jayrusso
66
ms.topic: how-to
77
ms.reviewer: teresayao
8
−ms.date: 11/07/2025
8
+ms.date: 04/18/2026
99
1010
1111
#customer intent: As a Global Secure Access administrator, I want to configure a context-aware Transport Layer Security inspection policy and assign the policy to users in my organization.
⋯ 55 unchanged lines
6767
6868
1. Set up the Global Secure Access client:
6969
- Disable secure DNS and built-in DNS.
70
− - Block QUIC traffic from your device. QUIC isn't supported in Microsoft Entra Internet Access. Most websites support fallback to TCP when QUIC can't be established. For an improved user experience, deploy a Windows Firewall rule that blocks outbound UDP 443: `@New-NetFirewallRule -DisplayName "Block QUIC" -Direction Outbound -Action Block -Protocol UDP -RemotePort 443`.
70
+ - Block QUIC traffic from your device. QUIC isn't supported in Microsoft Entra Internet Access. Most websites support fallback to TCP when QUIC can't be established. For an improved user experience, deploy a Windows Firewall rule that blocks outbound UDP 443: `New-NetFirewallRule -DisplayName "Block QUIC" -Direction Outbound -Action Block -Protocol UDP -RemotePort 443`.
7171
- Make sure Internet Access Traffic Forwarding is enabled.
7272
1. Open a browser on a client device and test various websites. Inspect the certificate information and confirm the Global Secure Access certificate.
7373
:::image type="content" source="media/how-to-transport-layer-security/certificate-viewer.png" alt-text="Screenshot of the Certificate Viewer with the Global Secure Access certificate highlighted.":::
⋯ 26 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 00:39 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.