Internet Access TLS inspection policies

Timelines and exceptions · All guidance changes

Global Secure Access · Official Microsoft guidanceObserved changes retained

Retained observation

Source metadata changed; retained article content is unchanged.

Documentation metadata only

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details · observed 24 Oct 00:08 UTC

Observed by ChangeIntel: 24 Oct 00:08 UTC
Source update metadata: 1 Sep 07:49 UTC
First observed on this installation: 6 Oct 16:26 UTC
Last successful check: today 00:18 UTC
Next check due: 27 Oct 00:18 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

Watch this page to review its changes in My radar.

Timeline

From the capture of 24 Oct 00:08 UTC

3 undated sections
11 recorded changes

Requirements, exceptions and scope

PrerequisitesRequirement1 passage
To complete the steps in this process, you must have the following prerequisites in place:…
Step 1: Global Secure Access admin: create a TLS inspection policyScopeRecommendation2 passages
To complete the policy configuration, go to Save > Next…
Option 1: Link the TLS policy to the baseline profile for all usersScope2 passages

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

5 Dec 2025
No longer on the page Step 1: Global Secure Access admin: create a TLS inspection policy Microsoft's source, commit ef4793c
5 Dec 2025
Recommendation added Step 1: Global Secure Access admin: create a TLS inspection policy Microsoft's source, commit ef4793c
29 Oct 2025
Recommendation added Step 1: Global Secure Access admin: create a TLS inspection policy Microsoft's source, commit 2041d19
29 Oct 2025
No longer on the page Step 1: Global Secure Access admin: create a TLS inspection policy Microsoft's source, commit 2041d19
29 Oct 2025
Scope added Step 1: Global Secure Access admin: create a TLS inspection policy Microsoft's source, commit 2041d19
29 Oct 2025
No longer on the page Step 1: Global Secure Access admin: create a TLS inspection policy Microsoft's source, commit 2041d19
28 Oct 2025
No longer on the page Step 2: Global Secure Access admin: create a TLS inspection policy Microsoft's source, commit 5be4d34
28 Oct 2025
No longer on the page Test with a self-signed root certificate authority using OpenSSL Microsoft's source, commit 5be4d34
28 Oct 2025
Recommendation added Step 1: Global Secure Access admin: create a TLS inspection policy Microsoft's source, commit 5be4d34
28 Oct 2025
No longer on the page Step 1: Global Secure Access admin: create a CSR and upload the signed certificate for TLS termination Microsoft's source, commit 5be4d34
28 Oct 2025
Scope added Step 1: Global Secure Access admin: create a TLS inspection policy Microsoft's source, commit 5be4d34

Observed history and review priority

Captured 24 Oct 00:08 UTC; extracted 24 Oct 00:08 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Review priority. Extracted assertions require review

0 date changes and 0 condition changes across 1 compared revisions. Suggested check interval: 24 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 18

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

24 Oct 00:08 UTC · 5 candidates
18 Oct 23:18 UTC · 5 candidates
6 Oct 16:26 UTC · 5 candidates
31 Aug 23:02 UTC · 4 candidates
18 Apr 15:15 UTC · 4 candidates
5 Dec 2025 03:09 UTC · 4 candidates
19 Nov 2025 21:14 UTC · 4 candidates
19 Nov 2025 21:03 UTC · 4 candidates
5 Nov 2025 23:40 UTC · 4 candidates
30 Oct 2025 22:34 UTC · 4 candidates
30 Oct 2025 04:21 UTC · 4 candidates
29 Oct 2025 07:21 UTC · 4 candidates
29 Oct 2025 07:00 UTC · 4 candidates
28 Oct 2025 21:32 UTC · 4 candidates
28 Oct 2025 21:22 UTC · 4 candidates
28 Oct 2025 18:14 UTC · 4 candidates
17 Oct 2025 19:35 UTC · 5 candidates
17 Oct 2025 19:30 UTC · 5 candidates

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 00:18 UTC.

31 Aug 23:02 UTC Add Microsoft-managed TLS certificate configuration guidance (#14252) Served on LearnView diff
18 Apr 15:15 UTC Fix invalid PowerShell syntax in Block QUIC firewall rule samples View diff
5 Dec 2025 03:09 UTC Update TLS inspection how-to guide View diff
19 Nov 2025 21:14 UTC Merge pull request #10540 from teresayao/tls1119 View diff
19 Nov 2025 21:03 UTC remving preview View diff
5 Nov 2025 23:40 UTC Nov 05 completed draft and added TOC and related links View diff
30 Oct 2025 22:34 UTC Preview to preview View diff
30 Oct 2025 04:21 UTC addressing comments from Jay View diff
29 Oct 2025 07:21 UTC resolve comments View diff
29 Oct 2025 07:00 UTC address PR comments View diff
28 Oct 2025 21:32 UTC update to remove duplicate content View diff
28 Oct 2025 21:22 UTC update to remove duplicate content View diff
28 Oct 2025 18:14 UTC add TLSi custom rules View diff
17 Oct 2025 19:35 UTC PS reference View diff
17 Oct 2025 19:30 UTC PS reference View diff

5 metadata-only edits · author, dates or topic labels, no article text

15 Jun 16:45 UTC [BULK UPDATE] User Story 573314: Ensure every doc in MSec repos has an author from MSec Docs (entra-docs-pr 3) (#13368) Metadata onlyView diff
9 Feb 17:16 UTC [BULK UPDATE] Moves metadata to folder level in docfx.json. Metadata onlyView diff
3 Feb 14:34 UTC Moves manager metadata to folder level in docfx.json. Metadata onlyView diff
7 Nov 2025 23:24 UTC Nov 07 prepped to publish Metadata onlyView diff
30 Oct 2025 22:35 UTC Preview to preview Metadata onlyView diff

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Retained observations

24 Oct 00:08 UTC · shown above
18 Oct 23:18 UTC
The page title or its body outside the tracked passages changed. Review the source for its effect.
6 Oct 16:26 UTC
Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

18 Oct 2026 · 23:20:08 UTC SummaryGuidance extraction is incomplete. Legacy capture: table structure or oversized sections are unavailable for extraction Earlier recorded facts remain historical evidence; omitted statements have unknown status. → Microsoft's guidance publishes no dates; 3 sections of requirements, exceptions or scope.

The most recent 100 field changes are listed. Complete recorded revisions are kept separately.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.