Internet Access TLS inspection policies
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit e314bdf · +5 −4 lines · also on GitHub
11
---
2
−title: Configure Transport Layer Security Inspection Policy (Preview)
2
+title: Configure Transport Layer Security Inspection Policies (Preview)
33
description: Learn how to configure a Transport Layer Security inspection policy and assign it to users in your organization.
44
author: HULKsmashGithub
55
ms.author: jayrusso
⋯ 7 unchanged lines
1313
#customer intent: As a Global Secure Access administrator, I want to configure a context-aware Transport Layer Security inspection policy and assign the policy to users in my organization.
1414
---
1515
16
−# Configure Transport Layer Security inspection policy (Preview)
16
+# Configure Transport Layer Security inspection policies (Preview)
1717
Transport Layer Security (TLS) inspection in Microsoft Entra Internet Access lets you decrypt and inspect encrypted traffic at service edge locations. This feature lets Global Secure Access apply advanced security controls like threat detection, content filtering, and granular access policies. These access policies help protect against threats that might be hidden in encrypted communications.
1818
1919
> [!IMPORTANT]
⋯ 15 unchanged lines
3535
### Step 1: Global Secure Access admin: create a TLS inspection policy
3636
To create a TLS inspection policy:
3737
1. In the Microsoft Entra admin center, go to **Secure** > **TLS inspection policies** > **Create policy**.
38
−:::image type="content" source="media/how-to-transport-layer-security/create-tlsipolicy.png" alt-text="Screenshot of the Create a TLS inspection policy screen open to the Basic tab.":::
39
−The **Default action** specifies what to do if no rules match. The default setting is **Inspect**..
38
+:::image type="content" source="media/how-to-transport-layer-security/create-tls-inspection-policy.png" alt-text="Screenshot of the Create a TLS inspection policy screen open to the Basics tab.":::
39
+The **Default action** specifies what to do if no rules match. The default setting is **Inspect**.
4040
1. Select **Next** > **Add rule**. On the **Rules** page, you can define a custom rule by specifying an **FQDN** or selecting a **Web category**.
4141
:::image type="content" source="media/how-to-transport-layer-security/add-rule.png" alt-text="Screenshot of the Create a TLS inspection policy screen open to the Rules tab.":::
4242
⋯ 56 unchanged lines
9999
1. Select **Delete**.
100100
101101
## Related content
102
+* [Configure TLS inspection settings](how-to-transport-layer-security-settings.md)
102103
* [Create a TLS certificates using ADCS](scripts/powershell-active-directory-certificate-service.md)
103104
* [Create a TLS certificate using OpenSSL](scripts/powershell-open-secure-sockets-layer.md)
104105
* [What is Transport Layer Security inspection?](concept-transport-layer-security.md)
⋯ 1 unchanged line
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 00:54 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.