You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/global-secure-access/how-to-configure-web-content-filtering.md
+6-13Lines changed: 6 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,11 +9,6 @@ ai-usage: ai-assisted
9
9
10
10
# How to configure Global Secure Access web content filtering
11
11
12
-
<!-- TEMPORARY NOTICE: Remove this IMPORTANT alert after the erroneous "Deprecating soon" label on Web Content Filtering Policy (V1) is fixed in the Microsoft Entra admin center. Tracking with PM Michael Aldridge / engineering. -->
13
-
14
-
> [!IMPORTANT]
15
-
> You might see a red **Deprecating soon** label next to **Web Content Filtering Policy (V1)** in the Microsoft Entra admin center. This label is displayed in error. Your existing web content filtering policies aren't affected, continue to work as configured, and no action is required at this time. This article is updated when the display issue is resolved.
16
-
17
12
## Overview
18
13
19
14
Web content filtering empowers you to implement granular Internet access controls for your organization based on website categorization.
@@ -24,7 +19,7 @@ The web filtering feature currently supports user- and context-aware Uniform Res
24
19
25
20
Web content filtering also supports two optional rule conditions that enable traffic-aware policy enforcement:
26
21
27
-
-**Source traffic type filtering (preview)**: Scope rules to specific traffic types, such as agent, browser, or application.
22
+
-**Source traffic type filtering (preview)**: Scope rules to specific traffic types, either agentor non-agent.
28
23
-**HTTP method request filtering (preview)**: Block or allow specific HTTP methods, such as GET, POST, PUT, PATCH, and DELETE.
29
24
30
25
> [!TIP]
@@ -78,16 +73,14 @@ The first step is to enable the Internet Access traffic forwarding profile. For
78
73
79
74
## Configure source traffic type filtering (preview)
80
75
81
-
Source traffic type filtering lets you scope web content filtering rules to specific types of network traffic. You can enforce differentiated policies based on whether traffic originates from an AI agent, a web browser, or an application.
76
+
Source traffic type filtering lets you scope web content filtering rules to specific types of network traffic. You can enforce differentiated policies based on whether traffic originates from an AI agentor a non-agent source.
82
77
83
78
### Supported source traffic types
84
79
85
80
| Source type | Description |
86
81
| --- | --- |
87
82
| Agent | Traffic that originates from AI agents, such as Copilot agents or autonomous AI tools. |
88
-
| Browser | Traffic that originates from web browsers. |
89
-
| Application | Traffic that originates from desktop or mobile applications. |
90
-
| Unknown | Traffic where the source type can't be determined. |
83
+
| Non-agent | Traffic that originates from any source other than an AI agent, such as web browsers and applications. |
91
84
92
85
### Configure the source traffic type condition
93
86
@@ -99,18 +92,18 @@ Source traffic type filtering lets you scope web content filtering rules to spec
99
92
> Source traffic type filtering is available only for client-based Global Secure Access connections. This capability depends on the Global Secure Access client sending task and processor metadata to classify traffic. Remote networks don't support source traffic type rules.
100
93
101
94
> [!NOTE]
102
-
> When a request's traffic type can't be determined, traffic is classified as **Unknown**. Traffic-type-specific rules don't match unless you explicitly target **Unknown** in a rule.
95
+
> When a request doesn't originate from an AI agent, traffic is classified as **Non-agent**. To match this traffic, explicitly target **Non-agent** in a rule.
103
96
104
97
### Example: Block AI agents from accessing social networking sites
105
98
106
-
To prevent AI agents from accessing social networking websites while allowing browser and application traffic:
99
+
To prevent AI agents from accessing social networking websites while allowing non-agent traffic:
107
100
108
101
1. Create a web content filtering policy rule.
109
102
1. Select the **SocialNetworking** web category.
110
103
1. Enable **Source type** and select **Agent**.
111
104
1. Set the policy action to **Block**.
112
105
113
-
This configuration blocks AI agent traffic to social networking sites while allowing browser and application users to access the same sites.
106
+
This configuration blocks AI agent traffic to social networking sites while allowing non-agent traffic to access the same sites.
0 commit comments