Skip to content
Microsoft

Microsoft Entra Internet Access: the secure web gateway

Microsoft Entra Internet Access

SecuritySaaSMonthly1-Year
SKU MST-NCE-EIA-C100
Your price
Term
Billing cycle
€4.40

per user per month, excluding VAT

Ask a question

No markup on top of Pax8's suggested retail. My margin is the Pax8 wholesale discount.

Check whether your current plan already includes this: Licence Overlap Check, free, and nothing leaves your browser.

Microsoft Entra Internet Access is an identity-centric secure web gateway. It secures access to internet, SaaS and Microsoft 365 destinations, and protects against internet threats, malicious network traffic and unsafe or non-compliant content, with web content filtering by category and by domain. It requires a Microsoft Entra ID P1 subscription or a plan that includes one. It is one of the five products in the Microsoft Entra Suite, which Microsoft 365 E7 includes, so check both before buying it on its own. It is the outbound half of Global Secure Access; Microsoft Entra Private Access is the inbound half.

What it is

Microsoft Entra Internet Access is Microsoft's secure web gateway, built around identity rather than around a network appliance. It inspects and controls where users go on the internet, including SaaS and Microsoft 365 destinations, and applies policy tied to the signed-in user rather than to an IP address.

Who it is for

Organisations replacing a web filtering appliance or a third-party gateway, and organisations that want internet access policy to move with the user rather than with the office they are sitting in.

Key capabilities

  • Secure access to internet, SaaS and Microsoft 365 destinations
  • Web content filtering by content category and by domain name
  • Protection against internet threats and malicious network traffic
  • Identity-centric policy, applied per user rather than per network location
  • Managed alongside Conditional Access in the Microsoft Entra admin centre

Requirements

A Microsoft Entra ID P1 subscription, or a plan that includes P1 such as Microsoft 365 E3, Business Premium, F1 or F3.

Where it already exists

The Microsoft Entra Suite includes Internet Access, and Microsoft 365 E7 includes the Suite. On either, this standalone product adds nothing.

The other half

Internet Access handles outbound traffic. Microsoft Entra Private Access handles access to your own internal applications. They are sold separately, so a requirement on one does not oblige you to buy the other.

Features
Identity-centric secure web gateway
Web content filtering by category and by domain
Covers internet, SaaS and Microsoft 365 destinations
Protection against malicious network traffic
Policy follows the user, not the network location
Requires Microsoft Entra ID P1 or a plan that includes it
Included in the Microsoft Entra Suite and Microsoft 365 E7
Use cases
Replacing a web filtering appliance that only works in the office
Applying one internet access policy to staff wherever they work
Restricting categories of site without maintaining an address list
Bringing Microsoft 365 traffic under the same access policy as the rest
FAQ
What licence does it need underneath?

A Microsoft Entra ID P1 subscription, or a plan that includes P1, such as Microsoft 365 E3, Business Premium, F1 or F3.

Is it included in anything I might already hold?

It is one of the five products in the Microsoft Entra Suite, and Microsoft 365 E7 includes the Suite. On either of those, this standalone licence adds nothing.

How does it differ from Microsoft Entra Private Access?

Internet Access covers outbound traffic to the internet, SaaS and Microsoft 365. Private Access covers access to your own internal applications. They are the two halves of Global Secure Access and are licensed separately.

Can it filter by website category?

Yes. Web content filtering works by content category and by domain name, so policy can be written in terms of what a site is rather than only which address it sits at.

Plan details
Vendor
Microsoft
Category
Security
Type
SaaS
Billing
Monthly
Commitment
1-Year
Available terms
1-Year, Monthly
SKU
MST-NCE-EIA-C100
How buying works
  1. 1You request the licence, or add it to the cart.
  2. 2I confirm price, term and seats, and check your VAT number in VIES. Businesses in the EU only.
  3. 3You pay before we provision, under the CSP Marketplace Terms. The invoice comes from Michal Jatczak, a sole trader registered in Malta, trading as ITSailor. Reverse charge for an EU VAT number that validates in VIES.
  4. 4Your authorised signatory accepts the Microsoft Customer Agreement before activation.
  5. 5I place the order with Pax8 within one business day of payment.
Microsoft NCE termsNew Commerce Experience applies: within 7 days (168 hours) of purchase or renewal you may cancel or reduce seats; a cancellation we execute within the first 24 hours is refunded in full, anything later pro rata. We act in Malta business hours. After day 7 the term is binding. CSP Marketplace Terms.