{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/",
        "slug": "dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths",
        "url": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/"
        },
        "title": "Test mobile Edge site restrictions against indirect access paths",
        "summary": "What coverage limit should be recorded for an Intune-managed mobile Edge site block?",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "cyber-defense",
            "label": "Cyber defense",
            "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-17T16:33:07+00:00",
        "modified_at": "2026-09-17T16:42:35+00:00",
        "reviewed_on": "2026-09-17",
        "reading_minutes": 1,
        "word_count": 190,
        "potentially_affected": "Apply this review to allowed or blocked website lists for Microsoft Edge on iOS and Android. Define which browsing profile and configuration channel are intended to enforce the organization's restriction.",
        "dse_recommendation": "DSE recommends describing the exact restriction boundary in the policy approval.",
        "primary_source": {
            "name": "Manage Microsoft Edge on iOS and Android With Intune - Microsoft Intune | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/intune/app-management/configuration/configure-edge-ios-android",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Microsoft states that mobile Edge site restrictions block direct access, but not access through an intermediary such as a translation service. Managed-app AllowListURLs and BlockListURLs do not support Edge internal-page addresses; Microsoft documents a separate InternalPagesBlockList setting for those pages. <a href=\"https://learn.microsoft.com/en-us/intune/app-management/configuration/configure-edge-ios-android\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<h2>Applicability</h2>\n<p>Apply this review to allowed or blocked website lists for Microsoft Edge on iOS and Android. Define which browsing profile and configuration channel are intended to enforce the organization&#8217;s restriction.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends describing the exact restriction boundary in the policy approval. Review intermediary-service exposure with the security owner and decide which additional controls or acceptable-use requirements are needed for the stated purpose. Keep internal-page restrictions in their documented setting instead of assuming a website block covers every address scheme.</p>\n<h2>Verification</h2>\n<p>Use approved harmless test destinations to exercise direct navigation, relevant indirect access and the internal pages named in the policy. Record the browser platform, work profile and effective configuration. Compare the result with the written requirement and leave uncovered paths explicit before describing the control as complete.</p>\n<h2>Official references</h2>\n<p><a href=\"https://learn.microsoft.com/en-us/intune/app-management/configuration/configure-edge-ios-android\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn: Manage Microsoft Edge on iOS and Android With Intune</a>. Source reviewed September 17, 2026.</p>",
        "content_text": "Source facts\nMicrosoft states that mobile Edge site restrictions block direct access, but not access through an intermediary such as a translation service. Managed-app AllowListURLs and BlockListURLs do not support Edge internal-page addresses; Microsoft documents a separate InternalPagesBlockList setting for those pages. Microsoft Learn.\nApplicability\nApply this review to allowed or blocked website lists for Microsoft Edge on iOS and Android. Define which browsing profile and configuration channel are intended to enforce the organization’s restriction.\nDSE recommendation\nDSE recommends describing the exact restriction boundary in the policy approval. Review intermediary-service exposure with the security owner and decide which additional controls or acceptable-use requirements are needed for the stated purpose. Keep internal-page restrictions in their documented setting instead of assuming a website block covers every address scheme.\nVerification\nUse approved harmless test destinations to exercise direct navigation, relevant indirect access and the internal pages named in the policy. Record the browser platform, work profile and effective configuration. Compare the result with the written requirement and leave uncovered paths explicit before describing the control as complete.\nOfficial references\nMicrosoft Learn: Manage Microsoft Edge on iOS and Android With Intune. Source reviewed September 17, 2026.",
        "content_markdown": "## Source facts\n\nMicrosoft states that mobile Edge site restrictions block direct access, but not access through an intermediary such as a translation service. Managed-app AllowListURLs and BlockListURLs do not support Edge internal-page addresses; Microsoft documents a separate InternalPagesBlockList setting for those pages. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/app-management/configuration/configure-edge-ios-android).\n\n## Applicability\n\nApply this review to allowed or blocked website lists for Microsoft Edge on iOS and Android. Define which browsing profile and configuration channel are intended to enforce the organization’s restriction.\n\n## DSE recommendation\n\nDSE recommends describing the exact restriction boundary in the policy approval. Review intermediary-service exposure with the security owner and decide which additional controls or acceptable-use requirements are needed for the stated purpose. Keep internal-page restrictions in their documented setting instead of assuming a website block covers every address scheme.\n\n## Verification\n\nUse approved harmless test destinations to exercise direct navigation, relevant indirect access and the internal pages named in the policy. Record the browser platform, work profile and effective configuration. Compare the result with the written requirement and leave uncovered paths explicit before describing the control as complete.\n\n## Official references\n\n[Microsoft Learn: Manage Microsoft Edge on iOS and Android With Intune](https://learn.microsoft.com/en-us/intune/app-management/configuration/configure-edge-ios-android). Source reviewed September 17, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-17"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Test mobile Edge site restrictions against indirect access paths",
                        "item": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/",
                "headline": "Test mobile Edge site restrictions against indirect access paths",
                "description": "What coverage limit should be recorded for an Intune-managed mobile Edge site block?",
                "abstract": "What coverage limit should be recorded for an Intune-managed mobile Edge site block?",
                "articleBody": "Source facts\nMicrosoft states that mobile Edge site restrictions block direct access, but not access through an intermediary such as a translation service. Managed-app AllowListURLs and BlockListURLs do not support Edge internal-page addresses; Microsoft documents a separate InternalPagesBlockList setting for those pages. Microsoft Learn.\nApplicability\nApply this review to allowed or blocked website lists for Microsoft Edge on iOS and Android. Define which browsing profile and configuration channel are intended to enforce the organization’s restriction.\nDSE recommendation\nDSE recommends describing the exact restriction boundary in the policy approval. Review intermediary-service exposure with the security owner and decide which additional controls or acceptable-use requirements are needed for the stated purpose. Keep internal-page restrictions in their documented setting instead of assuming a website block covers every address scheme.\nVerification\nUse approved harmless test destinations to exercise direct navigation, relevant indirect access and the internal pages named in the policy. Record the browser platform, work profile and effective configuration. Compare the result with the written requirement and leave uncovered paths explicit before describing the control as complete.\nOfficial references\nMicrosoft Learn: Manage Microsoft Edge on iOS and Android With Intune. Source reviewed September 17, 2026.",
                "datePublished": "2026-09-17T16:33:07+00:00",
                "dateModified": "2026-09-17T16:42:35+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Test mobile Edge site restrictions against indirect access paths"
                },
                "articleSection": [
                    "Cybersecurity",
                    "IT"
                ],
                "keywords": [
                    "Cybersecurity",
                    "IT",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 190,
                "timeRequired": "PT1M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Manage Microsoft Edge on iOS and Android With Intune - Microsoft Intune | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/intune/app-management/configuration/configure-edge-ios-android"
                }
            }
        ]
    }
}