Entra ID GSA - Logging of HTTP Content and Agent Type

Hi all,

I'm currently working on a Proof of Concept (PoC) for an enterprise-level client who is considering transitioning to Entra ID Global Secure Access (GSA) as a replacement for their existing VPN and proxy infrastructure.

They have a few specific logging requirements that we need to address:

Logging of HTTP content types

Logging of HTTP User-Agent types

We’re planning to set up Azure Secure Web Gateway (SWG) for them, along with Entra ID Private Access. All devices involved are already Entra ID joined.

From my research, I understand that Azure SWG performs TLS/SSL inspection, but I haven’t found clear documentation on whether it can log the specific HTTP-level details mentioned above.

If anyone has experience with this setup or can confirm whether these logging requirements can be met (either natively or via workarounds), your input would be greatly appreciated.

Thanks in advance!