Introducing Microsoft Global Secure Access - No More VPN's!
Рет қаралды 95,034
Күн бұрынMicrosoft Global Secure Access means we can say goodbye to VPN's and add much more security to our Microsoft 365.
In this video we'll talk about how the security and network landscape has changed and I'll also give a full demo into Global Secure Access.
🆓 FREE Facebook Group
From security to productivity apps to getting the best value from your Microsoft 365 investment, join our Microsoft 365 Mastery Group
/ microsoft365mastery
🆓 FREE Microsoft 365 Guide
Our FREE Guide - Discover 5 things in Microsoft 365 that will save your business time and money….. and one feature that increases your Cyber Security by 99.9%
► Download our guide here today: 365gearsystem.com
💻 Want to Work Together?
Drop me an email: jonathan@integral-it.co.uk
😁 Follow on Socials
TikTok @bearded365guy
Instagram @bearded365guy
Chapters
00:00 Introduction
00:50 How Security Used to Work
02:02 How Everything Has Changed
03:13 Today's Network Problem
03:49 Secure Service Edge
04:16 Microsoft 365 SSE
05:07 Secure Service Edge Demo
05:28 Activate Service
05:49 Enabling Conditional Access
06:28 Traffic Forwarding Profiles
07:48 Install Client on Devices
09:05 Create Conditional Access Policy
11:50 Create Web Filtering Policy
14:14 Create Security Profile
15:33 Create Web Filtering Conditional Access
17:37 Monitoring Logs
@MarkSadlier Ай бұрын
Dude - I'm so glad to have found your channel. No filler, just great explainers and demonstrations. Cheers!
@adamcrawford1346 5 ай бұрын
Thanks Jonathan. This is cool. Exactly what we have all been needing. Great explanation.
@bearded365guy 5 ай бұрын
Thanks Adam, I think this technology will be a great hit
@TheTubejunky 4 ай бұрын
You need a centralized government to control your data? This is what "we all" need. No no no. Definitely not from Microsoft's leaky bits.
@TejasJain1991 3 ай бұрын
Thanks Johnathan! Looking forward to new demos like this!
@annielam7150 3 ай бұрын
This reminds me of Computer Basics (Unit 3: The Internet and More, Pages 213 & 214).
@vvgvvg-qe2zs 3 ай бұрын
Hi Jonathan, you wouldn't believe how much your videos have been helping me. I'm curious, do you think this will limited use of SD-WAN?
@PhilCrombieMTB 21 күн бұрын
Great video, your content is super helpful. Thanks 👍
@stephenhall5560 15 күн бұрын
thanks for the easy to digest video 👍
@HiYurd 24 күн бұрын
Great video. Love the content you produce.
@hhbadarin 5 ай бұрын
Great video as always!
@maheshdesilva2308 3 ай бұрын
Nice video. I really like how you focus on business premium. There is very little smb Microsoft content yt.
@sherrilltechnology 4 ай бұрын
Great information Brother and great video thanks so much!
@philiphare8176 5 ай бұрын
Hi Jonathan Thanks for another great video. I wonder if this have multi geo functionality?
@mcgarnacle21 5 ай бұрын
This is awesome, thanks Jonathon! Any chance you could do a video on Entra Private Access and the way it works with allowing you to access on-prem resources such as file shares and private apps through the global secure access client?
@bearded365guy 5 ай бұрын
Yes, I will.
@hquest 5 ай бұрын
It is an interesting concept of doing central policy management of the Windows firewall and/or hosts file via web interface. Perhaps, as you mentioned, welcome for smaller businesses, because we on the large enterprise already do this (using different tools) since before pandemic days. The main drawback I see is the reliance on one single source for everything: if Microsoft makes one accidental change, your entire business is locked out. That is why having different vendors for certain solutions - including on-premises - still helps keeping your business running. Good recap of the tool, though. Kudos!
@bearded365guy 5 ай бұрын
Thanks for your comment, well balanced
@tranghienkhoa7967 4 ай бұрын
Thank you so much for this video, it is very helpful and easy to understand. I have one quick question. In case the company want to block users from accessing social media, if the users want to bypass the block, can they just disconnect from the GSA client to access? Thank you in advance!
@taavisepp 5 ай бұрын
Thanks, Jonathan! Did I miss it or can you not have custom messages displayed to the policy subjects? To simply block the access to certain categories/ sites sans note that it violates the company policy will IMHO create more confusion and incidents/ SR’s.
@kb8570 4 ай бұрын
Hello Jonathan, thank you for this video. Can you please explain why you selected the BLOCK option at 10:16 in the video ? Also, is there an option to make all activity and traffic on your laptop use Microsoft Global Secure Access therefore keeping everything secure.
@gerkeogh5009 2 ай бұрын
hi Jonathan, great vid, thanks. 16mins 55sec in you say it takes some time for the web content filter to apply. how long are we talking? minutes or hours?
@bearded365guy 2 ай бұрын
More hours than days!
@pauldeacon6123 3 ай бұрын
Question how does this affects a company that is using a sonic wall to filter traffic in and out from the local network to the internet.
@johnwarde2409 5 ай бұрын
Another great video Jonathan, many thanks. One question: is it dependant on devices being controlled via Intune?
@MK-ob4zy 4 ай бұрын
Good question
@bearded365guy 4 ай бұрын
Devices must be either Microsoft Entra joined or Microsoft Entra hybrid joined. Microsoft Entra registered devices aren't supported.
@bigmommashousesl 20 күн бұрын
This is great Jonathan. so in defender for endpoint it does not prevent the user to bypass anything, it filters all internet using smart screen based on the policy. but with the global secure access i see that the users can always disconnect the global secure access and contine to access those sites. is that right?
@SevereMkII 4 ай бұрын
given Windows and Microsoft's rampant data collection, who in their right mind would use this?
@bearded365guy 4 ай бұрын
All of our clients.
@jasoncummings7052 4 ай бұрын
Facebook does it. Apple does it. Amazon does it. TikTok does it. Google does it. Oracle does it. The Authorities pushing data privacy rules while getting more invasive. Todays' age DATA.
@greenwithNV 4 ай бұрын
A customizabe Block page is NEEDED! The "Hmm,.... cant reach this page" will do nothing but increase support calls that the internet is not working.
@bearded365guy 4 ай бұрын
Agree completely. I’m sure it will come
@shanceaylown Ай бұрын
Very good video, congratulations. One question, regarding the web content filtering you showed. If the user disables the global client, would they be able to reach previously blocked websites?
@bearded365guy Ай бұрын
Not with the conditional access policy
@shanceaylown Ай бұрын
@@bearded365guy Thank you, but sorry, maybe it's not completely clear to me. With conditional policies you only block traffic to certain apps?
@pcostapi 5 ай бұрын
Hey quick Question , can i have other traffic like Domain Controller Line of Sight ?
@chriso1523 Ай бұрын
Excellent video. Assume we will have the ability to push the client via Inutne?
@bearded365guy Ай бұрын
Yes!
@billmann9947 5 ай бұрын
This looks cool and I see a lot of benefits, esp if MS includes it with existing Bus Prem. But wow, that' a lot of scattered places to go to setup, manage, and review. And I bet there's no consolidated way to report what's in place for the tenant. Seems like it could easily make for a bit of nightmare to manage.
@Majikal_Mike 4 ай бұрын
Cracking video and a great insight. A bit put off by the generic blocked access error rather than a defined “Your company has restricted access to…” response. Is this available?
@bearded365guy 4 ай бұрын
Not yet. It should be coming….
@annehipolito7305 2 ай бұрын
Thanks! Is it possible to block specific websites in just a specific time?
@dondebolt3566 5 ай бұрын
You mentioned your test VM was in InTune for the tenant. Is InTune enrollment required to run Global Secure Access on an endpoint device? Also, how long do you have to wait to see the "All Compliant Network Locations" show up in the locations list when you go to create the new Block policy? thx.
@MrSam_Derp_Man 4 ай бұрын
No it's not required. But you will need that global secure access software and a logged in user.
@blondinbatusha7120 4 ай бұрын
"All Compliant Network Locations" not showing when I try to configure The Condition. Any Idea why? Thanks for your all videos, they're amazing!!!
@DomKirby 4 ай бұрын
Nice demo! I'm excited for this product, been testing it out as well.
@WhiteOSO1229 4 ай бұрын
Thank you and great video, can I skip installing the GlobalSecureAccessClient and still get conditional access and web filtering to work?
@bearded365guy 4 ай бұрын
No, you need the client
@ehudv9276 4 ай бұрын
Oh yeah, GENIUS idea. Just give uncle ms ALL your traffic and trust them to secure you and keep your privacy.. Great
@MartinMaat 4 ай бұрын
And MS will manage your keys I presume. How convenient. For the government.
@dammitdad 4 ай бұрын
Western government will not allow any IT system that doesn't send everything to them.
@retro93277 4 ай бұрын
AWS Does the same thing lol
@jakejake7289 14 күн бұрын
If you're using Windows, you're already doing that. If you don't trust them, use someone else's OS.
@ehudv9276 12 күн бұрын
@@jakejake7289 explain how am I already doing this.
@robertfontaine3650 2 ай бұрын
For small businesses M365 based this is a nice addition for control monitoring and mobile devices use.
@bearded365guy 2 ай бұрын
Yes, I think so too.
@manimurthy6569 4 ай бұрын
When I tried implementing this as per the given steps I faced an error in Global Secure Access Client "". When I dig into this error found that the device in which Global Secure Access client required the device to be Microsoft Entra Joined device. Wondering if there is any way around as my users have BYOD and I cannot get their device to Entra Joined.
@dineshchaudhary2918 4 ай бұрын
Does it help and work in the hybrid autopilot provisioning
@ciscohaider7068 4 ай бұрын
Can I use is it to deploy images using autopilot with OOB?
@SalissouMayanaAbdoulAziz 5 ай бұрын
Great video. Thank you. Can i use it to access on prem resources?
@dongelhouse 5 ай бұрын
Yes you can. You have to create at least one (MS prefer two) server on prem and that will connect to this. I have tested this to use RDP right away from my laptop to an on prem server
@devarajsankar7726 2 ай бұрын
Very intresting one.
@christophermckissick2089 3 ай бұрын
If I have a program on my local server, would this allow me to access the program without a VPN?
@ronaldhofman1726 5 ай бұрын
And wy exactly should i trust MS, is have a UDM PRO router and use wireguard to access my home in control myself , never use 3rd party vpn,
@TheChris69er 5 ай бұрын
Hi Jonathan great video, i am a little confused about the title of this video. I don't see you demonstrating the VPN feature here. Will you domonstrate this in a future video? I think it vwould be great secure method of ditching traditional and sometimes very troublesome VPN's via Conditnal Acess rules
@bearded365guy 5 ай бұрын
SSE isn’t a VPN. It’s much more than that. The title was aimed at the fact that SSE would replace the need for any VPN
@ecr80 5 ай бұрын
Hope you’re right. Like 6 months ago someone from the Entra team told us that when this product comes out of preview it would require an additional license.
@bearded365guy 5 ай бұрын
It might. I don’t know.
@lstgeorge7370 26 күн бұрын
Jonathan Your the Best you made my day 🙏🙏👏👏😃😃CHEERS Mate .. 🍻🍻🍻🍻🍻🍻
@peterholthoffman 5 ай бұрын
My issue with any video like this is I'm left with no understanding of why this does what it does. Ok, user tries to go to a blocked site... Is the magic done with DNS? Or does DNS resolve ok but routing tables prevent the connection? Or is there something else going on? If the user is using a non-Edge browser, does it still work? What path do the packets take? What source IP address does the website see?
@bearded365guy 5 ай бұрын
Hi Peter, the aim of my videos is to educate the owners of businesses who aren’t technical but need to understand concepts. I am sure there are other videos on YT that go into the technical elements that you want
@maryammoazzam9491 5 ай бұрын
How can we allow users to access network resources e.g shared drives. Also can they still use mittel soft phone while working from home.can they access AX which is onsite and not in the cloud?
@bearded365guy 5 ай бұрын
If you still have servers, you can configure for private access. I didn’t show in the video. Yes, you can access all of your apps still
@TheChris69er 5 ай бұрын
@@bearded365guy It would be great to see a video on Private access. I watched the video expecting to see how a VPN works with Conditional access. I presume you have to have some bit software client on your servers, which communicates with Entra ID'S Conditional Access rules. IF this works reliably, I can see that could be a great replacement to awkward to configure and bothersome VPNs
@severorms 5 ай бұрын
What an amazing feature. I have a client who will make good use of this resource.
@Wolf103085 3 ай бұрын
@bearded365guy So question on this. Scenario: Since we have an onsite VPN while utilizing a hybrid environment, all the resources the employee's need to access is on-prem Domain, our VPN connects them to said on-prem domain so they can reach the sources needed. Question: Can this SSE also be utilized the same way? Or is this strictly an "encryption" method of their traffic vs. encrypted traffic between endpoints(from their laptop to our on-prem domain).
@bearded365guy 2 ай бұрын
Yes, there is a private access part of this product for your scenario- I just didn’t talk about it in the video!
@dougwolfe2 4 ай бұрын
Hi Johnathan, any idea how this will effect Teams Rooms?
@spuddleydiddley Ай бұрын
@bearded365guy - do you know if Microsoft plan to allow customisable block pages for the web filtering? You would expect that to be the norm for an enterprise scenario to advise users that the site is actually blocked rather than inaccessible (and looking like a generic issue) otherwise it could result in a lot of service desk tickets especially if the policies are introduced without prior notification, as is my experience with many organisations that I’ve dealt with.
@bearded365guy Ай бұрын
I hope that feature will come. The product is still in public preview. Give it a bit more time.
@Farreach 4 ай бұрын
I am a tier 2 Dynamic 365 technical engineer. its nice to refresh on the other side of the coin . I would assume if you are helping other companies you are a Partner?
@bearded365guy 4 ай бұрын
A Microsoft Partner? Yes we are
@Eggy-cz9bh 3 ай бұрын
Great explainer. I started setting it up after seeing the video - indeed nothing like a VPN, the sergation of different apps and conditional access make this an absolute game changer. However I'm running into tunneling issues, RDP works absolutely great - no issues so the next step was a simple SQL server, two standard SQL ports ; can reach it just fine, studio as well but the moment I plug a real app on it (Accounting app) it can connect there is back and forth communication the only thing we seem to not be getting back are TDS packages - which contain of course the payload, making it effectively not working. I've been looking online as some youtube videos show a client with UDP support (and TDS?) and private DNS.. but official resources I'm unable to find - roadmap, changelog, client status etc. You've got more info? would love to run this instead of a VPN but due to the TDS issue I cannot.
@DannyRobinson-qp9xx Ай бұрын
I like you video. I have created a CA policy, but I don't show any "Linked Conditional Access polices" in the "Microsoft 365 access profile". Is my CA policy suppose to be showing there?
@DannyRobinson-qp9xx Ай бұрын
Okay so it appears things are working like you demonstrated, but the Application Outlook still works\opens when I pause the GAClient. Any thoughts on why it would not be blocked?
@neoxnet 5 ай бұрын
I was playing at home and needed one more thing to be mentioned to win the game... My last word on my bingo sheet was 'zero trust'. Given then SSE is all about zero trust, I was disappointed that wasn't uttered even once... Joking aside, our organisation was trying to implement Cloudfare's ZTNA solution. Give Microsoft a few more years and I reckon it'll kill it. The Conditional Access is a killer feature that will make it a compelling sell if you are already heavily embedded in the Microsoft ecosystem.
@bearded365guy 5 ай бұрын
Agreed. Did I not mention zero trust? 🤣
@MatthiasZoss 28 күн бұрын
The license costs are available now. You need to license both products, internet access and private access.
@miyu545 5 ай бұрын
Microsoft can't even fix its spam management technology - and we're supposed to believe their cybersecurity apps or services are top-notch. Ya. Good one.
@bearded365guy 5 ай бұрын
Ouch
@billmann9947 5 ай бұрын
you're not wrong about spam tech.
@marcusm5127 5 ай бұрын
We enjoy blocking domains as free stats.
@bearded365guy 5 ай бұрын
What you use for spam management?
@ChrisWard74 4 ай бұрын
For the blocked websites is it possible to have a custom message that is displayed to the user when they are blocked?
@bearded365guy 4 ай бұрын
I don’t think so at this stage. I’m sure it will come though
@davidadams421 5 ай бұрын
Really like the demo, especially the setup, but it kinda misses the point and intended purpose of SSE. SSE is architecturally supposed to create a secure corporate LAN atop an insure/in-securable WAN i.e. the Internet, and thereby returns to the 'secure office infrastructure' of old, but this time communicating together over 'any old network'. Accessing a secure payroll server from a coffee shop would have better demonstrated its purpose. Also, perhaps a follow-video? Microsoft has always heralded its ZTNA as 'secure access to your M365 from anywhere'. Aside from web filtering and broad statements like 'well, it's more secure', what additional value does GSA bring to small businesses?
@hassanmaje5849 4 ай бұрын
I am not a techie but would this protection apply when accessing other business apps (non-MS 365) that are on the cloud?
@bearded365guy 4 ай бұрын
Yes
@RedNinja 4 ай бұрын
Can this be deployed for Windows 365 CPCs and become Zscaler alternative?
@bearded365guy 4 ай бұрын
Yes it can!
@xellaz 4 ай бұрын
Would love to see an open source version of this running on my server at home. 😝
@dongelhouse 5 ай бұрын
Thanks Jonathan!! Would it also be possible that the user can't Pause the SSE? Because if you pause it they can still go to facebook right?
@darrenoleary 4 ай бұрын
Also wondering this! Great video though 👍
@ScottMillar 5 ай бұрын
great video i'm looking at a cloud VPN for a client this might just be the answer if they are willing to wait
@bearded365guy 5 ай бұрын
I think so Scott!
@kabbahthoronkaExden 2 ай бұрын
Your explanation is great, can I become your digital/social media manager?
@technicallyme 4 ай бұрын
Ok but what about the user on the network that are compromised
@IamHere2007de 4 ай бұрын
The requirements for the client states "Microsoft Entra joined" - can it also be hybrid domain joined?
@bearded365guy 4 ай бұрын
Devices must be either Microsoft Entra joined or Microsoft Entra hybrid joined. Microsoft Entra registered devices aren't supported.
@upinsmoke-tv 5 ай бұрын
Thanks for demo , I followed your steps but I don't have the option in conditional access--->Conditions--->Locations---> Include , I don't have the option Any Locations , I have the others :All trusted IPs ,trusted Locations , All Compliant Network & selected locations, but no Any Location , did I miss a step?
@bearded365guy 5 ай бұрын
Go back to earlier in the video when I switched the toggle on for the conditional access part. Is it switched on or off?
@upinsmoke-tv 5 ай бұрын
ty for quick reply , when creating the policy CA09 , You selected the user , then went to Conditions , I don't have "Any Location" as an option in Locations section , I only have All trusted IPs ,All trusted locations , All Compliant Network locations (preview) & Selected Locations , you have when you select Include Any Location , Im missing that option @@bearded365guy
@tommo33 4 ай бұрын
All goes well until 10:10 in your video, where you are supposed to select "All Compliant Network Locations", but that option hasn't appeared (did everything else up to this part of the video 24 hours ago), and still that option doesn't show up to be able to exclude it
@bearded365guy 4 ай бұрын
Go back to earlier in the video where we turn the setting on to allow remote access, is that still turned on?
@tommo33 4 ай бұрын
I had turned it on, but it had turned itself off again. Turning it back on again resolved the issue, thank you @@bearded365guy
@fbifido2 4 ай бұрын
@6:57 - the middle option shouldn't that be for VPN?
@Sheldyck 4 ай бұрын
your definition of any is limited to 365?
@thecomputetech6404 5 ай бұрын
Great video but where are you guys getting these 365 tenants from for demo purposes.
@bearded365guy 5 ай бұрын
Spun up a tenant and bought some licenses
@dongelhouse 5 ай бұрын
I asked my employer for a MSDN subscription. You get some bucks to spin up VM's and you get E5 licenses to test.
@socialwill 5 ай бұрын
I really like this idea, but it only restricts if you have the client installed.
@bearded365guy 5 ай бұрын
It only allows clients access via the client…. So if you don’t have the client, no access
@socialwill 5 ай бұрын
@@bearded365guy correct, however for the Private or local access it would be great if there was a way to secure the local target so that it only allows access if you have the client. You could then do MFA for internal needs.
@lakergreat1 5 ай бұрын
How does this factor into zero trust Microsoft strategy?
@maheshdesilva2308 3 ай бұрын
Any eta on when it will hit ga?
@bearded365guy 3 ай бұрын
Don’t know yet
@rogerthomas7040 21 күн бұрын
Why do I get the feeling that this will be a service that the EU goes after due to it being included with O365, just like Teams was. For any Microsoft focussed business that is managing mainly business assets this seems a far easier solution than the standalone offerings that are out there.
@bearded365guy 19 күн бұрын
@@rogerthomas7040 Yes…..👍
@aaronk9910 5 ай бұрын
Can't I just pause the client like you did to simply access social media again?
@socialwill 5 ай бұрын
I was thinking the same thing.
@MichaelBrownPlus 5 ай бұрын
He’s an administrator. Clients won’t have control over the service.
@jeremybeatson5222 5 ай бұрын
During my testing even a standard user can pause the client. Surely that will change when the service reaches General Availability? It defeats the purpose of the client entirely if a standard user can pause it. Can anyone else confirm the same results?
@SaskiaMestern Ай бұрын
Interesting - but it would have been nice to mention at the beginning that this is not for 365 Business Standard users...
@bearded365guy Ай бұрын
Pricing has just been released! At the time of filming, it was unknown .
@SaskiaMestern Ай бұрын
@@bearded365guy Thank you!
@seanfaherty 5 ай бұрын
So the best idea you have is for people to run all their network traffic through Microsoft . I don’t think you’ve thought about this very long
@bearded365guy 5 ай бұрын
Microsoft, the billion dollar company thought about it more than me….
@seanfaherty 4 ай бұрын
obviously. But why would you encourage your subscribers to volunteer to be part of a scheme which would encrypt the data on your computer so Microsoft can be the only company who is able to sell your data to the data brokers ? Why not encourage people to use an OS with no telemetry ? why not promote the idea of self hosted VPNs ? You are part of the problem @@bearded365guy
@edgecrush3r 2 ай бұрын
This just made zScaler ZPI and ZPA pretty redundant.
@bearded365guy 2 ай бұрын
Yep…
@infotruther 5 ай бұрын
Hi finity?
@diegoandrade-ns4hu 4 ай бұрын
It's free? thanks!!
@sonny.eblacas Ай бұрын
This is a cheat code ❤🔥🧨💯
@mikesveganlife4359 5 ай бұрын
Microsoft finally seeing the need for the same thing the Google cloud platform has had since 2017 if not sooner?
@bearded365guy 5 ай бұрын
What Google technology are you referring to?
@vladjirasek 5 ай бұрын
Tailscale beats this on every aspect.
@bearded365guy 5 ай бұрын
I’ve not used that.
@spaceshipdev 4 ай бұрын
Oh yeh, this is Tailscale's territory all day long
@Spp235. 5 ай бұрын
Uggh it took over 6 mins before he even showed it. Come on save the edification and configuration to the end…
@prabhakaranudayakumar7556 16 күн бұрын
🎉❤
@r3tr0n17 5 сағат бұрын
Way too complicated.. I'd rather use Twingate :) but thanks for the video nonetheless.. Great Job!
@brokengabe2342 5 ай бұрын
I trust Microsoft as much as I can trust their open source operating system. Especially after Bill Gates stated that he thinks the government should have access to everyone's data.
@bearded365guy 5 ай бұрын
You could use another product if you don’t like Microsoft…
@infini.tesimo 4 ай бұрын
@@bearded365guyit's more like do you not see the problem given the responses you have given out to nearly all the comments you commented on?
@bearded365guy 4 ай бұрын
It’s a completely free world. I’m a content creator. I don’t have any affiliation with Microsoft. If people don’t want to use their products, they don’t have to.
@rolling_marbles 5 ай бұрын
Not a new technology, just new to Microsoft. This has been done by Zscaler, Palo Alto, Cisco, and VMware for several years now. Cloudflare also does it now. Secure Access Service Edge (SASE) has existed as a VPN replacement for almost 10 years now. This is far from new to the industry.
@bearded365guy 5 ай бұрын
I don’t disagree. This is SSE not SASE though.
@ByronScottJones 5 ай бұрын
Not new to Microsoft either. They had this technology in windows server over a decade ago. This is just a cloud version.
@fbifido2 4 ай бұрын
How does this video show us "No more VPN" ?????????????????????????????????????????
@infotruther 5 ай бұрын
Hap ol boy hap on.
@SwissPGO 4 ай бұрын
They can't even support linux ? We have 30% linux devices
@degu44 5 ай бұрын
Great infornational video but this is going to be too complicated to setup for the average user. Not everyone has administrator knowledge or experience.
@bearded365guy 5 ай бұрын
Hopefully the video might help
@BigFunnyGiant 4 ай бұрын
You mean “Microsoft capture all your data in the name of preventing to be secure”.
@AnonyMooseUK 12 күн бұрын
And then, ms spin the product as another license at $12 per person, even if you don't need governance or both secure access products. Thanks ms...😢
@tahaaminmazumder8869 5 ай бұрын
Microsoft and privacy or security don't go along...they are always running in the opposite directions, LOL!😂
@FOSSuser 4 ай бұрын
Microsoft and secure and private is an oxymoron with ms Spyware telemetry including like tictoc keystrokes
@jesus.moreno 5 ай бұрын
OMG ... no way .... fuck ... I love you man .... but what happend if the user uninstall the program ? ... i want to block for all the network all social media and betting websites .... it will work for shared email accounts ?? ... or only for licensed accounts ?
@tridy7893 4 ай бұрын
Well, this is exactly what it is - VPN from Microsoft, isn't it?
@bearded365guy 4 ай бұрын
It’s more than a VPN
@tridy7893 4 ай бұрын
I agree, a VPN with Firewall with App control and some others. The example you present, with blocking social networks, I believe is not a good example of "more than VPN". There is so much work done in a browser these days, including most of the Office docs as well, the protection often comes about basically listing the websites one is allowed (or not allowed) to go to. EntraID or VPN cert for security is a separate question. As for blocking *users* from using social media, I disagree with that. Blocking computers - yes; blocking users - no. People often have 2 mobile phones - one for work, and one for personal needs. I wonder why. If I were to use this solution as a user, I would either do it like you did - I would run the work instance in a VM, or I would have 2 computers. Again it secures the work environment by implementing solutions like that. And it is ok. But there is no way it is going to change the behavior of the people.