{
  "name": "ChangeIntel Global Secure Access client",
  "policyRules": [
    {
      "@odata.type": "#microsoft.graph.networkaccess.fqdnFilteringRule",
      "name": "ChangeIntel Global Secure Access client FQDNs",
      "ruleType": "fqdn",
      "destinations": [
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.globalsecureaccess.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "internet.edgediagnostic.globalsecureaccess.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "m365.edgediagnostic.globalsecureaccess.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "private.edgediagnostic.globalsecureaccess.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "auth.edgediagnostic.globalsecureaccess.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "aps.globalsecureaccess.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.edgediagnostic.globalsecureaccess.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "login.microsoftonline.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "www.msftconnecttest.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "entra.microsoft.com"
        }
      ]
    },
    {
      "@odata.type": "#microsoft.graph.networkaccess.urlDestinationFilteringRule",
      "name": "ChangeIntel Global Secure Access client URLs",
      "ruleType": "url",
      "destinations": [
        {
          "@odata.type": "#microsoft.graph.networkaccess.url",
          "value": "https://aka.ms/GlobalSecureAccess-WindowsOnArm"
        }
      ]
    }
  ],
  "action": "allow"
}