# Test mobile Edge site restrictions against indirect access paths

> What coverage limit should be recorded for an Intune-managed mobile Edge site block?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-17T16:33:07+00:00
- Modified: 2026-09-17T16:42:35+00:00
- Last reviewed by DSE: 2026-09-17
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 1 minutes

## What you need to know

What coverage limit should be recorded for an Intune-managed mobile Edge site block?

## Potentially affected

Apply this review to allowed or blocked website lists for Microsoft Edge on iOS and Android. Define which browsing profile and configuration channel are intended to enforce the organization's restriction.

## DSE recommendation

DSE recommends describing the exact restriction boundary in the policy approval.

## Article

## Source facts

Microsoft states that mobile Edge site restrictions block direct access, but not access through an intermediary such as a translation service. Managed-app AllowListURLs and BlockListURLs do not support Edge internal-page addresses; Microsoft documents a separate InternalPagesBlockList setting for those pages. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/app-management/configuration/configure-edge-ios-android).

## Applicability

Apply this review to allowed or blocked website lists for Microsoft Edge on iOS and Android. Define which browsing profile and configuration channel are intended to enforce the organization’s restriction.

## DSE recommendation

DSE recommends describing the exact restriction boundary in the policy approval. Review intermediary-service exposure with the security owner and decide which additional controls or acceptable-use requirements are needed for the stated purpose. Keep internal-page restrictions in their documented setting instead of assuming a website block covers every address scheme.

## Verification

Use approved harmless test destinations to exercise direct navigation, relevant indirect access and the internal pages named in the policy. Record the browser platform, work profile and effective configuration. Compare the result with the written requirement and leave uncovered paths explicit before describing the control as complete.

## Official references

[Microsoft Learn: Manage Microsoft Edge on iOS and Android With Intune](https://learn.microsoft.com/en-us/intune/app-management/configuration/configure-edge-ios-android). Source reviewed September 17, 2026.

## Primary reference

- Name: Manage Microsoft Edge on iOS and Android With Intune - Microsoft Intune | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/intune/app-management/configuration/configure-edge-ios-android
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Test mobile Edge site restrictions against indirect access paths,” DSE Security, https://update.dsesecurity.com/updates/dse-20260917-113-test-mobile-edge-site-restrictions-against-indirect-access-paths/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.