SC-100: Microsoft Cybersecurity ArchitectDemo

Global Secure Access uses traffic forwarding profiles (Microsoft traffic, Private access, and Internet access) to determine which network traffic is routed through the Global Secure Access client. Because App1 is an internet-hosted SaaS application, you must enable and configure the Internet Access traffic forwarding profile so that traffic destined for App1 is tunneled through the Global Secure Access client rather than going directly to the internet. Conditional Access policies can require the Global Secure Access client or a compliant network as a sign-in condition, but they do not control which traffic is actually forwarded through the client; that forwarding behavior is governed by the traffic forwarding profile configuration.