Microsoft Entra Internet Access

azure Firewallazure-entra-internet-access

Identity-centric secure web gateway that filters internet and SaaS traffic with policies linked to Conditional Access.

Provider: azure
Kind: Firewall
Category: Security
Official docs: https://learn.microsoft.com/en-us/entra/global-secure-access/concept-internet-access
Also known as: Global Secure Access

Properties · 1 set by this component

property	type	values	required	kind default	this component
baselineProfile · component property	boolean	—	no	true	inherited
defaultAction	enum	allow \| deny	no	—	inherited
filteringSignal · component property	enum	url \| sni	no	—	inherited
intrusionPrevention	boolean	—	no	—	inherited
logging	boolean	—	no	—	inherited
managed	boolean	—	no	false	▸ true
ruleCount	integer	—	no	—	inherited
stateful	boolean	—	no	—	inherited
tlsInspection · component property	boolean	—	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "entra-internet-access", component: "azure-entra-internet-access" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall AWS Network Firewallaws-network-firewallawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Security groupaws-security-groupawsfirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Network security perimeterazure-network-security-perimeterazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Cloudflare Network Firewallcloudflare-network-firewallcloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall Fortinet FortiGatefortigatefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall VyOSvyosfirewall DigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewall Cloud IDSgoogle-cloud-idsgcpfirewall Cloud NGFWgoogle-cloud-ngfwgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Microsoft Entra Internet Access: an identity-centric secure web gateway for SaaS and general internet
3# traffic ("Learn about Microsoft Entra Internet Access"). That page states the baseline security profile
4# applies to all internet traffic routed through the service as a catch-all even without a Conditional Access
5# link, and that filtering uses the URL for unencrypted HTTP and the SNI for TLS traffic. No default allow or
6# deny posture is stated, so defaultAction is left unset.
7schemaVersion: "1"
8type: "component"
9id: "azure-entra-internet-access"
10kind: "firewall"
11provider: "azure"
12docs: "https://learn.microsoft.com/en-us/entra/global-secure-access/concept-internet-access"
13aliases: ["Global Secure Access"]
14defaults:
15  managed: true
16properties:
17  baselineProfile:
18    type: "boolean"
19    default: true
20  filteringSignal:
21    type: "enum"
22    values: ["url", "sni"]
23  tlsInspection:
24    type: "boolean"

The same page as markdown, for an agent: /catalogue/components/azure-entra-internet-access.md