Tuesday, 27 October 2026

Internet Access preview guidance now states DNS traffic cannot be filtered

The period is concentrated in Microsoft Entra Internet Access: a new preview guide covers cloud-firewall setup for Global Secure Access clients, while updates make traffic acquisition and DNS limits explicit. The main administrator takeaway is that the preview Internet Access forwarding profile does not acquire DNS traffic; wildcard rules and FQDN destinations do not change that, so cloud firewall policies do not filter DNS.

• Internet Access · General

  DNS acquisition and filtering limitation is now explicit

  The Internet Access traffic forwarding profile does not acquire DNS traffic in preview. Wildcard acquisition rules and FQDN destinations do not enable DNS acquisition, so cloud firewall policies cannot filter DNS traffic.

• Internet Access · General

  Cloud Firewall guidance separates traffic acquisition from policy enforcement

  Updated guidance explains that acquisition rules determine which traffic is forwarded, while cloud firewall policies allow or block that traffic. It adds TCP and UDP wildcard examples, bypass and routing-precedence details, and QUIC limitations.

• Internet Access · General

  New preview guide covers Global Secure Access client firewall setup

  A new article explains traffic acquisition, Allow and Block firewall rules, security profiles, and enforcement verification for client traffic. It also identifies required roles, licensing, forwarding profiles, and client prerequisites.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.