This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 39%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENP%3C/text%3E%3C/svg%3E)
Hi,
I understand in Global Secure Access "365" I can use a Conditional Access Policy to block access to 365 if not from "All Compliant Network locations" to prevent a user from pausing the Client. But If I want to use Global Secure Access "Internet" and use the web filtering, how do I prevent a user from pausing the client and bypassing the restriction?
I assume this would be a Conditional access rule, but how would you prevent any/all Internet traffic from bypassing the client on pause?
Regards
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 20%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Hi @Nathan Pinotti ,
Thanks for reaching out.
As of now, internet access traffic profile bypass is still not possible.
I would suggest you post this request at the Azure Feedback Portal, which is monitored by the product team for feature enhancements.
Hope this will help.
Thanks,
Shweta
Please remember to "Accept Answer" if answer helped you.
Hi
I'm asking what would happen if a normal user, pause the global access agent.
As I mentioned. Consider you pushed the global access agent to a device logged with a standard user (no local admin). This user has the ability to pause the agent, as per my tests. How can we prevent it from happening? If a standard user can pause the agent, they'll be able to bypass Internet/web filtering imposed by Entra Internet Acces.
Regards
If a standard user can pause the agent, they'll be able to bypass Internet/web filtering imposed by Entra Internet Access.
Pausing the agent stops the Windows services related to client. When these services are stopped, traffic is no longer tunneled from the client machine to the cloud service. Network traffic behaves as if the client isn't installed while the client is paused. If the client machine is restarted, the services automatically restart with it.
Limiting the user to pause the application is I am checking on and will revert you on this.