Network-25409: Global Secure Access Web content filtering controls internet access based on website categories #745
Conversation
There was a problem hiding this comment.
Pull request overview
This pull request adds a new test (Test-Assessment.25409) for validating web content filtering policies based on website categories in Global Secure Access. The test checks whether webCategory rules are configured and properly applied through either the Baseline Profile or security profiles linked to active Conditional Access policies.
Key Changes
- Adds comprehensive test logic to validate web content filtering by website categories
- Implements detailed reporting with markdown tables showing filtering policies, profiles, and Conditional Access linkages
- Includes proper error handling for Graph API calls
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| src/powershell/tests/Test-Assessment.25409.ps1 | New PowerShell test function that queries filtering policies and profiles, validates webCategory rules, checks Baseline and Security Profile configurations, and generates detailed markdown reports |
| src/powershell/tests/Test-Assessment.25409.md | Documentation explaining the security risks of not having web content filtering and providing remediation guidance with links to Microsoft Learn articles |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
ashwinikarke
changed the title
alexandair
left a comment
alexandair
left a comment
There was a problem hiding this comment.
@ashwinikarke Please, address my feedback.
| $policyName = $wcfPolicy.name | ||
|
|
||
| # Get full policy details with rules to check for webCategory | ||
| $policyDetails = Invoke-ZtGraphRequest -RelativeUri "networkAccess/filteringPolicies/$policyId`?`$select=id,name,action&`$expand=policyRules" -ApiVersion beta |
There was a problem hiding this comment.
Where is $select=id,name,action specified in the spec?
I don't see the action property used later?
There was a problem hiding this comment.
@alexandair I’ve updated it, the spec uses version, not action, so corrected $select to match the spec.
No description provided.