Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 23:56 UTC Customize Public modeDiscuss ChangeIntel on Discord

Internet Access TLS inspection policies

This page's changes and edits · All guidance changes

Microsoft's edit ·

remving preview

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 1f22430 · +3 −10 lines · also on GitHub

11 ---
2 −title: Configure Transport Layer Security Inspection Policies (preview)
2 +title: Configure Transport Layer Security Inspection Policies
33 description: Learn how to configure a Transport Layer Security inspection policy and assign it to users in your organization.
44 author: HULKsmashGithub
55 ms.author: jayrusso
⋯ 1 unchanged line
77 ms.service: global-secure-access
88 ms.topic: how-to
99 ms.reviewer: teresayao
10 −ms.date: 11/07/2025
10 +ms.date: 10/28/2025
1111
1212
1313 #customer intent: As a Global Secure Access administrator, I want to configure a context-aware Transport Layer Security inspection policy and assign the policy to users in my organization.
1414 ---
1515
16 −# Configure Transport Layer Security inspection policies (preview)
16 +# Configure Transport Layer Security inspection policies
1717 Transport Layer Security (TLS) inspection in Microsoft Entra Internet Access lets you decrypt and inspect encrypted traffic at service edge locations. This feature lets Global Secure Access apply advanced security controls like threat detection, content filtering, and granular access policies. These access policies help protect against threats that might be hidden in encrypted communications.
18 −
19 −> [!IMPORTANT]
20 −> The Transport Layer Security inspection feature is currently in PREVIEW.
21 −> This information relates to a prerelease product that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.
22 −> While in preview, don't use TLS inspection in production environments.
23 −
2418 This article explains how to create a context-aware Transport Layer Security inspection policy and assign it to users in your organization.
2519
2620 ## Prerequisites
⋯ 77 unchanged lines
10498 * [Create a TLS certificate using OpenSSL](scripts/powershell-open-secure-sockets-layer.md)
10599 * [What is Transport Layer Security inspection?](concept-transport-layer-security.md)
106100 * [Frequently asked questions for Transport Layer Security inspection](faq-transport-layer-security.yml)
107 −* [Troubleshoot Transport Layer Security inspection issues](troubleshoot-transport-layer-security.md)

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 00:54 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 23:56 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current