In today’s fast-paced technology world, protecting your business from the threats of online activity is more important than ever. With employees scattered across different locations and using various devices, the task of securing your business has become more complex. That’s where Microsoft Entra Internet Access comes in.

But what is it - and how does it protect your business?

A Trip Back in Time

Let’s rewind the clock a bit. About 20 years ago, we were all used to sitting at our desks in offices, staring at static desktop computers. Our work was housed on servers tucked away in these buildings. Back then, security was simple - we built beefy firewalls around our premises and that was pretty much the extent of it.

Fast forward to today - the world has changed. Most businesses now use cloud services like Microsoft 365, and employees can work from anywhere. From the accounts team member who works from home part-time to the sales guy hopping between coffee shops and hotel Wi-Fi, managing security for all of these remote devices has become a nightmare for IT teams.

How to Protect Your Business in a Cloud-First World

With the rise of remote work and cloud services, the task of safeguarding user access has become even more complicated. Enter SASE (Secure Access Service Edge) - a technology aimed at solving this issue. Microsoft, not wanting to be left out, joined the SASE party with their own offering: Microsoft Entra Global Secure Access.

Entra Global Secure Access includes two main products: Entra Internet Access and Entra Private Access. Entra Internet Access is perfect for companies that are 100% cloud-based. If your business relies entirely on Microsoft 365 and has no on-premise servers, this product is for you.

Entra Private Access, on the other hand, is tailored for businesses that still rely on servers for certain legacy apps. But for this blog, we’ll focus on Entra Internet Access and how it can revolutionize your remote work security.

How Does Entra Internet Access Work?

Picture this: your sales guy is at his favorite coffee shop, laptop open, accessing his emails via Microsoft 365. He connects to the Wi-Fi, logs into Outlook, Teams, and OneDrive, and starts working. Without additional security, he’s simply relying on the coffee shop’s Wi-Fi to keep his work safe. This is where Entra Internet Access steps in.

When you configure Entra Internet Access through Microsoft 365, you install the software on your employee’s devices - laptops, phones, tablets - and it connects to Microsoft’s secure global network, ensuring that all activity on Microsoft 365 services, including Outlook, SharePoint, and Teams, is routed through a secure, private connection. This gives your remote workers the same level of security as if they were working from the office, even when they’re on a public Wi-Fi network.

Why Not Just Use a VPN?

You might be thinking: “This sounds like a VPN, right?” Well, yes - and no. While Entra Internet Access functions in a similar way to a VPN, it’s much more advanced. Microsoft claims that their solution is "identity-aware," meaning it integrates seamlessly with Conditional Access.

With Conditional Access, you can set policies to ensure that only secure devices can access your corporate resources. For instance, you can prevent your sales guy from accessing Microsoft 365 services unless he’s connected to the secure global network. If he tries to connect from an insecure network or an unapproved device, access will be blocked.

Entra Internet Access Pricing

Let’s talk money. Microsoft Entra Internet Access is priced at £410 per user per month. While that may seem like a lot, the value it provides in terms of security and protection is immense.

If you’re looking for even more features, you can opt for the Entra Suite, which costs £990 per user per month. This package includes additional services, and I’ll cover that in a future post.

How to Set Up Entra Internet Access - A Step-By-Step Guide

Setting up Entra Internet Access is a breeze. You don’t need to be a tech genius to get started. Here’s a quick guide:

1. Log in to your Microsoft 365 admin center as a global admin.

2. Navigate to the Identity and Security section.

3. Select Global Secure Access from the menu.

4. Enable the service (if it’s not already activated).

5. Download and install the Entra Global Secure Access client on your employees’ devices (Windows, MacOS, Android, or iOS).

Once set up, you can start configuring Conditional Access policies to ensure that only approved devices and networks can access your corporate resources.

Next-Level Conditional Access with Entra Internet Access

Now, let’s kick things up a notch. How about creating a policy that forces devices to be compliant before they can access Microsoft 365? This is what I like to call Conditional Access Wizardry. With this setup, your employees won’t be able to access resources unless their devices are secure and meet your compliance requirements.

This is a game-changer for businesses serious about security. Imagine knowing that only approved, compliant devices can access your sensitive corporate data.

Final Thoughts - Is Entra Internet Access Right for You?

Microsoft Entra Internet Access is a powerful solution for businesses looking to protect their cloud-based assets. It’s easy to set up, integrates well with existing Microsoft 365 services, and offers a higher level of security than traditional VPNs.

If your company operates remotely or has employees who work in multiple locations, investing in Entra Internet Access could be one of the best decisions you make for your business’s security.