Internet Access web content filtering
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit b7c3123 · +7 −7 lines · also on GitHub
⋯ 1 unchanged line
22
title: How to configure Global Secure Access web content filtering
33
description: "Control internet access based on website categories, URLs, and FQDNs. Configure granular, user-aware filtering policies using security profiles and Conditional Access."
44
ms.topic: how-to
5
−ms.date: 06/01/2026
5
+ms.date: 09/16/2026
66
ms.subservice: entra-internet-access
77
ai-usage: ai-assisted
88
---
⋯ 10 unchanged lines
1919
2020
Web content filtering also supports two optional rule conditions that enable traffic-aware policy enforcement:
2121
22
−- **Source traffic type filtering (preview)**: Scope rules to specific traffic types, either agent or user.
23
−- **HTTP method request filtering (preview)**: Block or allow specific HTTP methods, such as GET, POST, PUT, PATCH, and DELETE.
22
+- **Source traffic type filtering**: Scope rules to specific traffic types, either agent or user.
23
+- **HTTP method request filtering**: Block or allow specific HTTP methods, such as GET, POST, PUT, PATCH, and DELETE.
2424
2525
> [!TIP]
2626
> For network content filtering based on file MIME types or Microsoft Purview inspection of file and text content, see [Create content policies for network content filtering](how-to-network-content-filtering.md).
⋯ 40 unchanged lines
6767
- To match all subdomains of a domain, use the wildcard format `*.domain.com`. Note that the wildcard `*.domain.com` matches subdomains like `www.domain.com` but doesn't match the root domain `domain.com` itself. To cover both the domain and all its subdomains, include both entries as a comma-separated list (for example, `*.contoso.com,contoso.com`).
6868
- When entering multiple FQDNs in a comma-separated list, don't include spaces between entries (for example, `contoso.com,fabrikam.com,*.example.com`).
6969
- Note, the URL filtering Preview supports a maximum of 1,000 URLs per tenant.
70
−1. (Optional) Configure the **Source type** condition (preview). For more information, see [Configure source traffic type filtering (preview)](#configure-source-traffic-type-filtering-preview).
71
−1. (Optional) Configure the **HTTP method request** condition (preview). For more information, see [Configure HTTP method request filtering (preview)](#configure-http-method-request-filtering-preview).
70
+1. (Optional) Configure the **Source type** condition. For more information, see [Configure source traffic type filtering](#configure-source-traffic-type-filtering).
71
+1. (Optional) Configure the **HTTP method request** condition. For more information, see [Configure HTTP method request filtering](#configure-http-method-request-filtering).
7272
1. Select **Next** to review the policy and then select **Create policy**.
7373
74
−## Configure source traffic type filtering (preview)
74
+## Configure source traffic type filtering
7575
7676
Source traffic type filtering lets you scope web content filtering rules to specific types of network traffic. You can enforce differentiated policies based on whether traffic originates from an AI agent or a user.
7777
⋯ 27 unchanged lines
105105
106106
This configuration blocks AI agent traffic to social networking sites while allowing user traffic to access the same sites.
107107
108
−## Configure HTTP method request filtering (preview)
108
+## Configure HTTP method request filtering
109109
110110
HTTP method request filtering lets you block or allow specific HTTP methods for matching traffic. You can enforce least-privilege access by restricting write operations while permitting read-only access.
111111
⋯ 221 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 23:37 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.