Microsoft’s Strategic Move: Expanding Entra Into the Secure Service Edge (SSE)

Microsoft Expands Entra IAM Line into SSE to Address Rising Threats

Microsoft has released a new set of products aimed at bolstering its Entra identity and access management (IAM) line to address the expanding threat landscape. With the alarming rise in password attacks, Microsoft emphasizes the need for secure access and protection.

Increasing Password Attack Rates

Microsoft‘s President of Identity, Joy Chik, reveals that within the past year, the average number of passwords attacked per second has soared to over 4,000. This represents a significant increase from the previous year’s average of 1,287, marking a 2.5-times surge in attacks. The alarming rise in these figures underscores the critical importance of enhancing secure access measures.

Entra Internet Access and Entra Private Access

The key highlight of Microsoft‘s recent product release is the introduction of Entra Internet Access and Entra Private Access, which are now in public preview. Entra Internet Access is an identity-centric zero-trust network access (ZTNA) service designed to safeguard Internet traffic. This service seamlessly integrates with Microsoft‘s Conditional Access intelligent policy engine. On the other hand, Entra Private Access facilitates controlled access to business assets and applications based on network conditions and situational needs.

These two products mark Microsoft‘s first foray into the secure service edge (SSE) product category. Entra Private Access allows users to securely access company resources through a secure web gateway, regardless of their location. Meanwhile, Entra Internet Access ensures the security of the network access itself, safeguarding against suspicious access attempts through two-factor authentication (2FA) prompts, access restrictions, or user blocking.

Comprehensive Entra Product Line

Microsoft‘s Entra product line extends beyond Entra Internet Access and Entra Private Access. Previously, Microsoft introduced Entra project line, which included Azure Active Directory (Azure AD), Entra Permissions Management, Entra Verified ID, Entra ID Governance, and Entra Workload ID.

Entra ID Governance, now generally available, provides additional features such as lifecycle management workflows and entitlement management. Entra Verified ID allows users to add verified information to a digital wallet, allowing them to authenticate their employment on LinkedIn or career certifications to their employers. Entra Workload ID focuses on verifying identity and controlling access for non-human users or machine identities.

Furthermore, Entra External Identity, currently in public preview, extends secure identity access to external users such as customers, guests, and business partners. This addition brings customer identity and access management (CIAM) capabilities to the Entra platform, enabling robust security measures across all user types.

The Role of AI in Enhancing Security

Recognizing the significance of artificial intelligence (AI) and machine learning (ML) in modern cybersecurity, Microsoft incorporates these technologies into its Entra offerings. Entra ID, formerly known as Azure AD, leverages the vast amount of data collected by Entra Internet Access and Entra Private Access to identify anomalous user behavior and flag suspicious variations. Detected anomalies can trigger alarms or direct blocking of user access.

Microsoft also employs AI/ML in workflow automation, addressing challenges related to employee life cycles, job changes, and access management. By analyzing typical access patterns, Entra creates standard sets of permissions for new employees and generates security compliance reports. This holistic approach allows security teams to detect, monitor, and remediate security issues more effectively.

Editorial: Strengthening Internet Security, Enhancing User Experience

The growing threat landscape and increasingly sophisticated cyberattacks necessitate constant innovation in the realm of internet security. Microsoft‘s expansion of its Entra IAM line into the secure service edge (SSE) reflects a strategic move to address these evolving challenges.

The introduction of Entra Internet Access and Entra Private Access showcases Microsoft‘s comprehensive approach towards secure access management. Zero-trust network access and controlled access based on network conditions provide the necessary layers of protection to prevent unauthorized access and improve overall security posture.

Moreover, the integration of AI and ML into the Entra product line demonstrates Microsoft‘s commitment to leveraging cutting-edge technologies for enhanced cybersecurity. By adopting AI-driven anomaly detection and workflow automation, organizations can proactively protect their resources and streamline access management processes.

However, while these advancements in technology offer promising solutions, organizations must remain vigilant in their internet security practices. Relying solely on sophisticated software and services can create a false sense of security. A holistic approach combining user education, robust security policies, and regular security assessments is crucial for effective protection against cyber threats.

Advice for Businesses and Individuals

Understanding the importance of comprehensive internet security measures is pivotal for both businesses and individuals. To minimize the risk of falling victim to cyberattacks, consider the following recommendations:

• Implement multi-factor authentication (MFA): Enable MFA for all accounts to add an additional layer of security.
• Adopt a zero-trust approach: Implement a strict access control policy, verifying each user’s identity and ensuring their access levels align with business requirements.
• Regularly update and patch software: Keep all software and devices up to date to mitigate potential vulnerabilities.
• Conduct employee training and security awareness programs: Educate employees about the various cyber threats and best practices for identifying and responding to them.
• Monitor and analyze user behavior: Leverage AI and ML technologies to detect anomalous behavior and promptly address potential security breaches.

By following these recommendations and maintaining a proactive stance towards internet security, organizations and individuals can bolster their defenses against the ever-expanding threat landscape.