How Transport Layer Security TLS Inspection Works In Microsoft Entra Internet Access To Empower Security HTMD Blog

Let’s discuss How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access to Empower Security. Microsoft Introduced Transport Layer Security (TLS) Inspection for Microsoft Entra Internet to address the risk of zero trust enforcement.

To secure web communication, HTTPS is used and it considered as the Standard for Privacy. But cyber threats now use encrypted channels creating a visibility gap that puts Zero Trust enforcement at risk. So Microsoft Introduced his new capability in Entra to empower security.

This new capability is very powerful that helps you to look inside HTTPS traffic in real time. No extra hardware or complex deployments is required to look inside HTTPS traffic in real-time with Transport Layer Security (TLS) Inspection.

Transport Layer Security Inspection for Microsoft Entra Internet Access is now available in public preview. Within Microsoft’s Security Service Edge (SSE) solution, you can now decrypt, inspect, enforce granular, identity-centric policies and extend Zero Trust principles to every encrypted session.

How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access

There are many advanced malwares increasing day by day. It includes malware payloads or stealthy data exfiltration attempts. So widespread adoption of encrypted channels is essential and Entras Traditional Security measures should earn more power.

Features Available on Transport Layer Security TLS Inspection

As mentioned above, TLS Inspection or Microsoft Entra Internet Access is now available in public preview. This initial public preview provide some features. The following table shows the key capabilities.

Features	Details
Real Time Performant Inspection	TLS provide Decrypt and inspect encrypted HTTPS traffic without impacting on user experience or network performance.
Identity-Driven Policy Enforcement	It use the power Conditional Access signals, including user identity, device compliance, and risk levels, to make intelligent decisions about when and for whom to inspect traffic.
Enhanced Web Categorization	Web Categorization enhanced by improved signal intelligence, leading to more accurate and granular web category classification.
Improved User Experience	User Experience is improved by delivering clear and informative messages to end-users when access is blocked, reducing confusion and minimizing help desk inquiries.

How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access to Empower Security – Table.1

How Transport Layer Security TLS Inspection for Entra Internet Access Works

TLS Inspection in Microsoft Entra Internet Access using the ability of Microsoft Security Service Edge. It tackles encrypted threats directly by routing traffic through the Microsoft Security Service Edge. Where HTTPS traffic is securely decrypted for inline inspection.

This allows for a full contextual understanding of the traffic, going beyond just domains, to apply your security policies. Intelligent enforcement then leverages identity-centric policies and Conditional Access signals to determine if the traffic is safe. Finally, approved traffic is swiftly re-encrypted and sent on its way, ensuring both robust security and a seamless user experience.

How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access to Empower Security - Fig.2 - Creds to MS — How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access to Empower Security – Fig.2 – Creds to MS

How to Access TLS Inspection Policies

TLS Inspection Policies can be easily access from Microsoft Entra Admin Center. TLS is available on preview, but you can only access this capability by activating some licenses. To use these capabilities Microsoft Entra Internet Access is required. Microsoft Entra Internet Access for Microsoft services, and Microsoft Entra Private Access are now generally available.

To Access TLS Inspection Open Microsoft Entra Admin Center
Go to Global Secure Access Blade and Select TLS Inspection Policies (Preview)
Select TLS Inspection Settings
Click on Create Certificate
After that you can enter Certificate Name, Common Name and Organization name to create certificate.
Then you can Upload the certificate from your file Explorer

How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access to Empower Security - Fig.3 — How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access to Empower Security – Fig.3

Key Security Scenarios in Visibility Changes

TLS Inspection provides the foundation for stronger, more effective inline security. There are many scenarios can be solved with Visibility. The following are the scenarios.

Granular web filtering
Proactive encrypted threat defense
Comprehensive Data Loss Prevention (DLP)
Mitigating unsanctioned AI usage
Streamlined compliance and auditing

How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access to Empower Security - Fig.4 - Creds to MS — How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access to Empower Security – Fig.4 – Creds to MS

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Resource

TLS Inspection now in Microsoft Entra Internet Access

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

How Transport Layer Security TLS Inspection Works in Microsoft Entra Internet Access to Empower Security

Sign up to get the best of How To Manage Devices straight to your inbox!

Table of Contents