[{"data":1,"prerenderedAt":1382},["ShallowReactive",2],{"sc:header-data-ja":3,"sc:footer-data-ja":489,"post-ja--posts-2025-09-25-gsa-unlocked-15953f0057f769":519,"authors_data":795,"content-ja-list-7b291c2dd91a4":1148,"authors_data:Christopher Brumm|Thomas Naunheim":1378},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"ja":13},{"title":14,"url":15,"alt":16},"ホーム","/ja","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"ja":21},{"title":22,"description":23},"Workplace","Microsoft 365を基盤に、スマートで安全な、柔軟性の高いワークプレイスを実現します。最新のテクノロジーとアイデンティティサービスが一つにつながります。",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"ja":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"ja":34},{"title":35,"url":36},"Managed Intune","/ja/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"ja":40},{"title":41,"url":42},"Managed Entra","/ja/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"ja":46},{"title":47,"url":48},"Managed Workplace","/ja/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"ja":52},{"title":53,"url":54},"Consulting Services","/ja/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"ja":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"ja":64},{"title":65,"url":66},"Microsoft Entra Suite","/ja/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"ja":70},{"title":71,"url":72},"Microsoft Intune","/ja/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"ja":76},{"title":77,"url":78},"Microsoft Windows","/ja/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"ja":82},{"title":83,"url":84},"Windows 365 Cloud PC","/ja/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"ja":88},{"title":89,"url":90},"Cloud Workplace Foundation","/ja/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"ja":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"ja":100},{"title":101,"url":102},"Microsoft 365 Copilot","/ja/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"ja":106},{"title":107,"url":108},"Teams","/ja/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"ja":112},{"title":113,"url":114},"SharePoint & Power Platform","/ja/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"ja":118},{"title":119,"url":120},"Exchange Online","/ja/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"ja":124},{"title":125,"url":126},"Information Protection & Compliance","/ja/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"ja":130},{"title":131,"description":132},"Azure","Azureで成長を後押しします。IaaSとPaaSによって、クラウドのコストを下げ、効率を高め、イノベーションを進めます。",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"ja":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"ja":142},{"title":143,"url":144},"Azure Managed Services","/ja/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"ja":148},{"title":149,"url":150},"Azure Consulting","/ja/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"ja":154},{"title":155},"シナリオ",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"ja":160},{"title":161,"url":162},"クラウドを計画する","/ja/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"ja":166},{"title":167,"url":168},"クラウドへ移行する","/ja/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"ja":172},{"title":173,"url":174},"ビジネスを刷新する","/ja/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"ja":178},{"title":179,"url":180},"VMware戦略を立て直す","/ja/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"ja":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"ja":190},{"title":191,"url":192},"Azure Foundation","/ja/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"ja":196},{"title":197,"url":198},"Azure AI Foundation","/ja/azure/azure-ai-foundation",{"name":86,"languages":200},{"ja":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"ja":205},{"title":206,"url":207},"Azure Data Foundation","/ja/azure/azure-data-foundation",{"name":188,"languages":209},{"ja":210},{"title":211,"url":212},"Azure Container Foundation","/ja/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"ja":216},{"title":217,"url":218},"Managed Dark Tenant","/ja/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"ja":222},{"title":223,"url":224},"Cloud Adoption Framework","/ja/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"ja":228},{"title":229,"url":230},"Cloud Competence Center","/ja/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"ja":234},{"title":235,"description":236,"emergency":237},"Security","受賞歴のある24時間365日のManaged Service、インシデント対応、最新水準の保護で、クラウドの安全を見守り、インフラを守ります。",{"text":238,"href":239,"skin":240,"icon":241},"サイバー攻撃の渦中ですか？","/ja/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"ja":249},{"title":250,"url":251},"Managed Red Tenant","/ja/security/managed-red-tenant",{"name":214,"languages":253},{"ja":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"ja":259},{"title":260,"url":261},"Sentinel Data Lake","/ja/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"ja":265},{"title":266,"url":267},"Security Consulting","/ja/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"ja":274},{"title":275,"url":276},"Cloud Security Operations Center","/ja/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"ja":280},{"title":281,"url":282},"Global Secure Access","/ja/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"ja":286},{"title":287,"url":288},"MyWorkID","/ja/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"ja":295},{"title":296,"url":297},"Preventive Services","/ja/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"ja":301},{"title":302,"url":303},"Data Security Service","/ja/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"ja":307},{"title":308,"url":309},"Security Copilot Agents","/ja/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"ja":313},{"title":314,"url":315},"NIS2を技術で実装する","/ja/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"ja":319},{"title":320,"description":321},"製品","完全に安全で100%クラウドネイティブなMicrosoft環境のためのCompanion製品です。協働、ネットワーク認証、ソフトウェア管理を強化します。",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"ja":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","クラウドベースのソフトウェア配布",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"ja":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","クラウドからの証明書配布",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"ja":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Office 365のデータをローカルで利用",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"ja":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","サーバー間のデータ移行",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"ja":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Microsoft 365向けのTerraform Provider",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"ja":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","ネットワークの認証",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"ja":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Microsoft Teamsで連絡先を探す",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"ja":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilotのリアルタイム監視",{"name":396,"languages":397},"casestudies",{"ja":398},{"title":399,"url":400,"description":401},"導入事例","/ja/casestudies","当社はクラウドの先駆者として、包括的なクラウドソリューションを提供するMicrosoftのトップパートナーです。ブループリントに基づくアプローチとInfrastructure as Codeの知見が土台にあります。",{"name":403,"languages":404,"children":407},"company",{"ja":405},{"title":406,"description":401},"会社",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"ja":411},{"title":412},"会社概要",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"ja":417},{"title":418,"url":419},"Facts & Figures","/ja/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"ja":423},{"title":424,"url":425},"お問い合わせと拠点","/ja/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"ja":429},{"title":430,"url":431},"スイスのglueckkanja","/ja/company/switzerland",{"name":433,"languages":434},"austria",{"ja":435},{"title":436,"url":437},"オーストリアのglueckkanja","/ja/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"ja":441},{"title":442},"キャリア",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"ja":447},{"title":448,"url":449},"採用情報","/ja/career",{"name":451,"languages":452},"company-young-professionals",{"ja":453},{"title":454,"url":455},"Young Professionals","/ja/young-professionals",{"name":457,"languages":458},"company-jobs",{"ja":459},{"title":460,"url":461},"募集職種","/ja/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"ja":465},{"title":466},"最新情報",[468,474],{"name":469,"languages":470},"company-blog",{"ja":471},{"title":472,"url":473},"ブログ","/ja/blog",{"name":469,"languages":475},{"ja":476},{"title":477,"url":478},"イベント","/ja/events",[480],{"name":481,"languages":482},"career-meta",{"ja":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"ja":487},{"title":488,"url":425,"active":484},"お問い合わせ",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksJa":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"プライバシーポリシー","/ja/privacy",{"title":514,"url":515},"運営者情報","/ja/imprint",{"title":517,"url":518},"Cookieなし","/ja/cookies",{"id":520,"title":521,"author":522,"body":525,"cta":494,"description":733,"eventid":494,"extension":749,"hideInRecent":484,"layout":750,"meta":751,"moment":755,"navigation":325,"path":786,"seo":787,"stem":788,"tags":789,"webcast":484,"__hash__":794},"content_ja/posts/2025-09-25-gsa-unlocked.md","Global Secure Access Unlocked",[523,524],"Christopher Brumm","Thomas Naunheim",{"type":526,"value":527,"toc":732},"minimal",[528,533,537,540,543,546,551,554,557,563,566,571,574,581,585,587,590,594,596,599,602,605,608,613,617,619,622,632,637,641,643,646,649,652,657,660,662,665,668,671,676,679,681,684,687,690,698,701,706,709,711,714,717,721,724,726,729],[529,530,532],"h2",{"id":531},"managed-red-tenantとは","Managed Red Tenantとは",[534,535,536],"p",{},"{: .h3-font-size}",[534,538,539],{},"Managed Red Tenantは、マネージドサービスで積み上げてきた当社の経験と、ワークプレース、Azure、セキュリティの各領域で実績のあるブループリントを組み合わせたものです。",[534,541,542],{},"その結果できあがるのが、分離された、完全にクラウド上でコードとして管理される環境です。管理者ユーザーとエンドポイントを実効的に保護します。Microsoft Entraテナントが複数あり、Active Directoryドメインも複数ある対象環境でも同じように働きます。",[534,544,545],{},"当社のソリューションはMicrosoftのクラウドネイティブなIDとセキュリティの機能に依拠し、ゼロトラストの原則を厳格に守ります。",[547,548,550],"h3",{"id":549},"security-service-edgeとしてのglobal-secure-access","Security Service EdgeとしてのGlobal Secure Access",[534,552,553],{},"{: .h4-font-size}",[534,555,556],{},"Global Secure Accessの最新の機能をManaged Red Tenantのさまざまな構成要素に組み込み、Virtual Access Workstations（VAW）へのアクセス時のセキュリティを高めるとともに、外向きの特権アクセスを保護し制限しています。",[534,558,559],{},[560,561,562],"strong",{},"Microsoft Entra Internet Access",[534,564,565],{},"はIDを中心に据えたSecure Web Gateway（SWG）として働き、公開インターネットへのアクセスを遮断し、通信先を特権インターフェイスと許可された企業のテナント環境だけに絞るために導入しています。Universal Conditional Access Evaluation（CAE）などの追加機能により、ほぼリアルタイムでのアクセス遮断も可能です。",[534,567,568],{},[560,569,570],{},"Microsoft Entra Private Access",[534,572,573],{},"はIDを中心に据えたZero Trust Network Access（ZTNA）のソリューションであり、VAWへの安全でプライベートなアクセスを実現する当社のアプローチの中核です。これを組み込むことで、AVDベースのエンドポイント上の特権セッションに保護の層がもう1つ加わります。VAWへ接続する前に、接続元クライアントに対して条件付きアクセスが適用されるからです。プライベートなリソースやオンプレミスのリソースを管理するアクセスを保護し、ゼロトラストの原則を当てはめることも、Private Accessが効いてくるもう1つのユースケースです。",[534,575,576],{},[577,578],"img",{"alt":579,"src":580},"image.png","https://res.cloudinary.com/c4a8/image/upload/blog/pics/gsa-img-01.png",[529,582,584],{"id":583},"managed-red-tenantにおけるglobal-secure-accessのユースケース","Managed Red TenantにおけるGlobal Secure Accessのユースケース",[534,586,536],{},[534,588,589],{},"Global Secure Accessは当社のManaged Red Tenantの設計の中核をなす要素の1つであり、セキュリティと使い勝手の両方を新しい水準に引き上げられることを当社は歓迎しています。その価値は個々のユースケースを見るといちばんよく分かるので、本稿で順に紹介します。",[547,591,593],{"id":592},"virtual-access-workstationsへのアクセス","Virtual Access Workstationsへのアクセス",[534,595,553],{},[534,597,598],{},"組織によっては、すべての管理者に物理的なPrivileged Admin Workstation（PAW）を配らないという判断をします。そうした権限の低い管理者向けに当社が用意しているのが、Virtual Access Workstations（VAW）と呼ぶものです。",[534,600,601],{},"ここで最も重要なのはVAWへの安全なアクセスであり、高い水準のセキュリティを確立することが欠かせないと当社は考えています。そこで鍵になるのがEntra Private Accessです。",[534,603,604],{},"管理者は自分の業務用デバイスからVAWに接続し、Managed Red Tenantのアカウントでサインインします。このID切り替えのため、接続するユーザーは元のデバイスとは別のテナントに属することになり、デバイスのコンプライアンス状態を提示できません。",[534,606,607],{},"そこで当社は、デバイス上の元のユーザーによる事前認証にGlobal Secure Accessを使っています。VAWは公開エンドポイントを持たず、Entra Private Access経由でしかアクセスできないため、ネットワークアクセスを非常に高い水準で守れます。業務環境側の条件付きアクセスが、デバイスのコンプライアンスやリスクに基づく制御を含め、強固なユーザー認証とデバイス認証を強制します。",[534,609,610],{},[577,611],{"alt":579,"src":612},"https://res.cloudinary.com/c4a8/image/upload/blog/pics/gsa-img-02.png",[547,614,616],{"id":615},"安全なwebフィルタリング","安全なWebフィルタリング",[534,618,553],{},[534,620,621],{},"管理用デバイスの大きな特徴は、攻撃面をできるだけ小さくするためにアプリケーションへのアクセスを厳しく絞っていることです。従来はproxy.pacファイルのようなローカルの仕組みや、共用の集中プロキシ（T0専用ではないもの）がよく使われてきましたが、当社はManaged Red Tenant内のデバイスについてEntra Internet Accessを選びました。",[623,624,625,629],"ul",{},[626,627,628],"li",{},"インターネットへのアクセスは、コンプライアンスに適合したデバイスから、かつ強固なユーザー認証を経た場合にのみ許可されます",[626,630,631],{},"アクセス先は明示的に承認したURLに限られます。さらにHTTPSの通信は（可能な場合）復号して検査するため、Azure DevOpsやGitHubの中の特定のパスに絞るといった制御もできます",[534,633,634],{},[577,635],{"alt":579,"src":636},"https://res.cloudinary.com/c4a8/image/upload/blog/pics/gsa-img-03.png",[547,638,640],{"id":639},"saasサービスと管理用インターフェイスに対するテナント制限","SaaSサービスと管理用インターフェイスに対するテナント制限",[534,642,553],{},[534,644,645],{},"SaaSサービスや管理用インターフェイスでは、URLがどのテナントでも同じであることが多く、前述のWebフィルタリングの手法では制御しづらくなります。",[534,647,648],{},"管理用デバイスからMicrosoftの承認済みポータルにサインインできるのをManaged Red Tenantのアカウントだけに限るため、当社はGlobal Secure Accessのテナント制限機能を使っています。",[534,650,651],{},"Entra Internet Accessを通じて、どのテナントでのサインインを許可するかがEntra IDに伝えられます。これにより、Managed Red Tenantのポリシーがすべて適用され、管理アクセスがB2Bコラボレーション経由でのみ行われることが保証されます。",[534,653,654],{},[577,655],{"alt":579,"src":656},"https://res.cloudinary.com/c4a8/image/upload/blog/pics/gsa-img-04.png",[547,658,659],{"id":659},"オンプレミスへのアクセス",[534,661,553],{},[534,663,664],{},"もちろんManaged Red Tenantは、オンプレミス環境やIaaS環境の管理にも使えます。そのためにはデータセンターへの安全なアクセスが必要です。Entra Private Accessは、高い水準のセキュリティと柔軟なアーキテクチャ、そして十分な性能を兼ね備えたZero Trust Network Accessを提供します。",[534,666,667],{},"データセンターやIaaS環境へのアクセスは、デバイスのコンプライアンスやリスクに基づく制御を含む、強固なユーザー認証とデバイス認証を前提としています。",[534,669,670],{},"個々の接続先をアプリセグメントとして扱うことで、きめ細かなアクセス制御ができ、それをEntra Governanceの機能で自動化できます。これにより、Just-In-Time管理や承認ワークフローなど、Managed Red Tenantですでに広く使われている仕組みがネットワーク層にまで広がります。",[534,672,673],{},[577,674],{"alt":579,"src":675},"https://res.cloudinary.com/c4a8/image/upload/blog/pics/gsa-img-05.png",[547,677,678],{"id":678},"ほぼリアルタイムでのアクセス失効",[534,680,553],{},[534,682,683],{},"ゼロトラストは、どれほど堅牢なアーキテクチャであっても、脅威を素早く確実に封じ込め、侵害された構成要素を隔離できるよう備えておくことも意味します。",[534,685,686],{},"Managed Red Tenantの環境では、テナント内のユーザーやデバイスが侵害される場合だけでなく、管理者のオフィスPCから攻撃が始まってVirtual Admin Workstationへ広がるという、より起こりやすい筋書きにも備えています。",[534,688,689],{},"Global Secure AccessのUniversal Continuous Access Evaluation（CAE）機能により、次の動作が自動で発動します。",[623,691,692,695],{},[626,693,694],{},"Workforce Tenant側のアカウントのユーザーリスクが「高」に設定された場合などに、Entra Private Access経由のVirtual Admin Workstationへのアクセスが遮断されます",[626,696,697],{},"Managed Red Tenant側のアカウントのセッションが終了された場合などに、管理用インターフェイスとデータセンター環境へのアクセスが失効します",[534,699,700],{},"さらに、Managed Red Tenant内のすべてのデバイスとアカウントの完全な隔離を、統合されたCSOCサービスがいつでも開始できます。",[534,702,703],{},[577,704],{"alt":579,"src":705},"https://res.cloudinary.com/c4a8/image/upload/blog/pics/gsa-img-06.png",[547,707,708],{"id":708},"情報量の増えたサインインとトークンの洞察",[534,710,553],{},[534,712,713],{},"アクセス制御の多彩な機能に加えて、Global Secure Accessはログの面でも状況を大きく変えます。ネットワーク層から得られるテレメトリが格段に増え、それを既存のサインインログや監査ログと突き合わせられます。",[534,715,716],{},"これにより当社のCSOCは、封じ込めを発動したあとにどの操作がまだ実行されたのかを特定できます。たとえば、すべてのトークンが継続的アクセス評価（CAE）に対応していなかった場合などです。",[534,718,719],{},[577,720],{"alt":579,"src":705},[529,722,723],{"id":723},"おわりに",[534,725,536],{},[534,727,728],{},"本稿はウェブキャストと同時に公開しています。ウェブキャストでは、Managed Red Tenant、Global Secure Access、統合の進め方、そして関連するユースケースを、ライブデモを交えて掘り下げています。",[534,730,731],{},"本稿で興味を持たれた方には、ぜひウェブキャストもご覧いただきたいと思います。もちろん、直接ご連絡いただくのも歓迎します。",{"title":733,"searchDepth":734,"depth":734,"links":735},"",2,[736,740,748],{"id":531,"depth":734,"text":532,"children":737},[738],{"id":549,"depth":739,"text":550},3,{"id":583,"depth":734,"text":584,"children":741},[742,743,744,745,746,747],{"id":592,"depth":739,"text":593},{"id":615,"depth":739,"text":616},{"id":639,"depth":739,"text":640},{"id":659,"depth":739,"text":659},{"id":678,"depth":739,"text":678},{"id":708,"depth":739,"text":708},{"id":723,"depth":734,"text":723},"md","post",{"lang":752,"seoTitle":753,"titleClass":754,"date":755,"categories":756,"blogtitlepic":757,"socialimg":758,"customExcerpt":759,"keywords":760,"maxContent":325,"textImageTeaser":761,"asideNav":776,"footer":784,"scripts":785,"published":325},"ja","EntraとGlobal Secure AccessによるMicrosoft 365管理者アクセスの保護","h2-font-size","2025-09-25",[235],"head-gsa-unlocked.jpg","/blog/heads/head-gsa-unlocked.jpg","本稿では、Microsoft Global Secure Accessが当社のManaged Red Tenantでセキュリティと制御をどう高めるのかを取り上げます。Entra Internet AccessとPrivate Accessを使えば、管理者セッションを保護し、ゼロトラストを徹底し、クラウドとオンプレミスのリソースへのアクセスを整理できます。実際のユースケースとアーキテクチャの解説を通じて、M365環境を効果的に守る方法を示します。","Microsoft Global Secure Access, Entra Internet Access, Entra Private Access, Managed Red Tenant, ゼロトラスト, M365セキュリティ, 条件付きアクセス, 管理者アクセス制御, セキュアWebフィルタリング, 仮想管理ワークステーション, CAE, テナント制限, Microsoft 365, クラウドセキュリティ",{"image":762,"cloudinary":325,"alt":763,"bgColor":764,"offset":325,"white":325,"list":765,"left":484,"float":484,"firstColWidth":770,"secondColWidth":771,"copyClasses":772,"headline":773,"subline":774,"spacing":775},"/icons/shape-managed-red-tenant.svg","Copilotのアイコン","#E44418",[766],{"ctaText":767,"ctaHref":768,"ctaType":769,"external":325},"YouTubeでセッション全編を視聴する","https://youtu.be/SpEOIdoA-uc","Button",5,7,"richtext","Global Secure Access Unlocked：Managed Red Tenantでの実装の実際","\u003Cp>Managed Red Tenantでは、特権アクセスを厳密に分離しています。ライブデモを通じて、Global Secure Accessで管理作業をどう保護しているかをご覧いただきます。\u003Cbr /> \u003Cbr /> 英語で行う本セッションでご紹介する内容です。\u003C/p> \u003Cul> \u003Cli>ID切り替えを伴うPAWとVAWが、安全な管理用ワークステーションをどう実現するか\u003C/li> \u003Cli>テナント制限とクロステナントアクセスポリシーが、許可されたアクセスだけをどう通すか\u003C/li> \u003Cli>アプリ単位のトンネルと継続的アクセス評価が、従来のVPNをどう置き換えつつあるか\u003C/li> \u003Cli>Just-in-Time管理がMicrosoft PIMで実際どう動くか\u003C/li> \u003C/ul> ","space-top-2 space-bottom-2 mt-10",{"menuItems":777},[778,780,782],{"href":779,"text":532},"#managed-red-tenantとは",{"href":781,"text":584},"#managed-red-tenantにおけるglobal-secure-accessのユースケース",{"href":783,"text":723},"#おわりに",{"noMargin":325},{"slick":325},"/posts/2025-09-25-gsa-unlocked",{"title":521,"description":733},"posts/2025-09-25-gsa-unlocked",[790,101,791,792,793,281],"Red Tenant","M365 Data Governance","SharePoint Security","AI Data Preparation","oGrNpSVwVlaaFtA2r1ePVGjcglrs2FuyBXJbOa4-7k8",{"id":796,"extension":797,"meta":798,"stem":8,"__hash__":1147},"authors_data/authors.json","json",{"path":799,"Fritz Zurhorst":800,"Alexander Schlindwein":806,"Sophie Luna":812,"Nadine Klein":820,"Karsten Kleinschmidt":826,"Julian Wendt":834,"Holger Bunkradt":839,"Ralf Mania":845,"Oliver Kieselbach":851,"Steffen Schwerdtfeger":857,"Gunnar Winter":865,"Jan Petersen":870,"Thorsten Kunzi":875,"Moritz Pohl":879,"Thorben Pöschus":884,"Christoph Hannebauer":890,"Marco Scheel":894,"Christopher Brumm":899,"Florian Klante":905,"Niklas Bachmann":910,"Nils Krautkrämer":915,"Patrick Treptau":921,"Peter Beckendorf":926,"Patrick Sobau":931,"Jörg Wunderlich":936,"Michael Breither":940,"Christian Kanja":945,"Zeba Hoffmann":951,"Jochen Fröhlich":956,"Jan Geisbauer":960,"Gerrit Reinke":972,"Christian Kordel":978,"Stephan Wälde":982,"Carolin Kanja":987,"Adrian Ritter":993,"Marvin Bangert":998,"Thorsten Pickhan":1004,"Christian Lorenz":1010,"Denis Böhm":1015,"Fabian Bader":1020,"Juan Jose Fernandez Perez":1026,"Mahschid Sayyar":1031,"Benjamin Dassow":1036,"Markus Walschburger":1041,"Jonathan Haist":1046,"Daniel Rohregger":1051,"Thomas Naunheim":1056,"Florian Stöckl":1060,"Pascal Asch":1065,"Markus Kättner":1070,"Anna Ulbricht":1077,"Annette Brauns":1084,"body":1090,"title":1146},"/authors",{"display_name":801,"avatar":802,"permalink":803,"linkedin":804,"imageOffsetTop":805},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":807,"avatar":808,"permalink":809,"twitter":810,"linkedin":811},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":813,"avatar":814,"permalink":815,"twitter":816,"linkedin":817,"imageOffsetLeft":818,"imageOffsetTop":819},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":821,"avatar":822,"permalink":823,"twitter":824,"linkedin":825,"imageOffsetTop":805},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":827,"avatar":828,"permalink":829,"twitter":830,"linkedin":831,"imageOffsetTop":832,"imageOffsetLeft":833},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":835,"avatar":836,"permalink":837,"linkedin":838},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":840,"avatar":841,"permalink":842,"linkedin":843,"twitter":844},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":846,"avatar":847,"permalink":848,"linkedin":849,"twitter":850},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":852,"avatar":853,"permalink":854,"linkedin":855,"twitter":856},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":858,"avatar":859,"permalink":860,"linkedin":861,"twitter":862,"imageOffsetTop":863,"imageOffsetLeft":864},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":866,"avatar":867,"permalink":868,"twitter":816,"linkedin":869},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":871,"avatar":872,"permalink":873,"twitter":816,"linkedin":874},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":876,"avatar":877,"permalink":878,"twitter":816,"linkedin":869,"imageOffsetTop":805},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":880,"avatar":881,"permalink":882,"twitter":816,"linkedin":883},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":885,"avatar":886,"permalink":887,"twitter":888,"linkedin":889},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":891,"avatar":892,"permalink":893,"twitter":816,"linkedin":869,"imageOffsetTop":805},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":895,"avatar":896,"permalink":897,"twitter":898,"linkedin":898},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":523,"avatar":900,"permalink":901,"twitter":902,"linkedin":903,"imageOffsetTop":904},"people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":906,"avatar":907,"permalink":908,"linkedin":909,"twitter":816},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":911,"avatar":912,"permalink":913,"linkedin":914,"twitter":816},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":916,"avatar":917,"permalink":918,"twitter":919,"linkedin":920},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":922,"avatar":923,"permalink":924,"linkedin":925,"twitter":816},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":927,"avatar":928,"permalink":929,"linkedin":930,"twitter":816,"imageOffsetTop":805},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":932,"avatar":933,"permalink":934,"linkedin":935,"twitter":816},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":937,"avatar":938,"permalink":939,"twitter":816},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":941,"avatar":942,"permalink":943,"twitter":816,"linkedin":944},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":946,"avatar":947,"permalink":948,"twitter":949,"linkedin":950},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":952,"avatar":953,"permalink":954,"linkedin":955,"twitter":816},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":957,"avatar":958,"permalink":959,"twitter":816,"linkedin":869},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":961,"avatar":962,"permalink":963,"twitter":964,"linkedin":964,"imageOffsetTop":805,"socials":965},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[966,969],{"text":967,"href":968},"Blog","https://emptydc.com",{"text":970,"href":971},"Podcast","https://hairlessinthecloud.com",{"display_name":973,"avatar":974,"permalink":975,"twitter":976,"linkedin":977},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":979,"avatar":980,"permalink":981,"twitter":816,"linkedin":869},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":983,"avatar":984,"permalink":985,"twitter":986,"linkedin":869},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":988,"avatar":989,"permalink":990,"twitter":991,"linkedin":992},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":994,"avatar":995,"permalink":996,"twitter":997,"linkedin":997},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":999,"avatar":1000,"permalink":1001,"twitter":1002,"linkedin":1003},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1005,"avatar":1006,"permalink":1007,"twitter":1008,"linkedin":1009},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1011,"avatar":1012,"permalink":1013,"linkedin":1014,"twitter":816},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1016,"avatar":1017,"permalink":1018,"linkedin":1019,"twitter":816},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1021,"avatar":1022,"permalink":1023,"linkedin":1024,"twitter":1025},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1027,"avatar":1028,"permalink":1029,"linkedin":1030},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1032,"avatar":1033,"permalink":1034,"linkedin":1035},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1037,"avatar":1038,"permalink":1039,"linkedin":1040},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1042,"avatar":1043,"permalink":1044,"linkedin":1045},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1047,"avatar":1048,"permalink":1049,"linkedin":1050,"imageOffsetTop":805},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1052,"avatar":1053,"permalink":1054,"linkedin":1055,"imageOffsetTop":805},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":524,"avatar":1057,"permalink":1058,"linkedin":1059,"imageOffsetTop":904},"people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1061,"avatar":1062,"permalink":1063,"linkedin":1064,"imageOffsetTop":904},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1066,"avatar":1067,"permalink":1068,"linkedin":1069,"imageOffsetTop":904},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1071,"avatar":1072,"permalink":1073,"linkedin":1074,"imageOffsetTop":1075,"imageOffsetLeft":1076},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1078,"avatar":1079,"permalink":1080,"linkedin":1081,"imageOffsetTop":1082,"imageOffsetLeft":1083},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1085,"avatar":1086,"permalink":1087,"linkedin":1088,"imageOffsetTop":1089,"imageOffsetLeft":832},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1091,"Alexander Schlindwein":1092,"Sophie Luna":1093,"Nadine Klein":1094,"Karsten Kleinschmidt":1095,"Julian Wendt":1096,"Holger Bunkradt":1097,"Ralf Mania":1098,"Oliver Kieselbach":1099,"Steffen Schwerdtfeger":1100,"Gunnar Winter":1101,"Jan Petersen":1102,"Thorsten Kunzi":1103,"Moritz Pohl":1104,"Thorben Pöschus":1105,"Christoph Hannebauer":1106,"Marco Scheel":1107,"Christopher Brumm":1108,"Florian Klante":1109,"Niklas Bachmann":1110,"Nils Krautkrämer":1111,"Patrick Treptau":1112,"Peter Beckendorf":1113,"Patrick Sobau":1114,"Jörg Wunderlich":1115,"Michael Breither":1116,"Christian Kanja":1117,"Zeba Hoffmann":1118,"Jochen Fröhlich":1119,"Jan Geisbauer":1120,"Gerrit Reinke":1124,"Christian Kordel":1125,"Stephan Wälde":1126,"Carolin Kanja":1127,"Adrian Ritter":1128,"Marvin Bangert":1129,"Thorsten Pickhan":1130,"Christian Lorenz":1131,"Denis Böhm":1132,"Fabian Bader":1133,"Juan Jose Fernandez Perez":1134,"Mahschid Sayyar":1135,"Benjamin Dassow":1136,"Markus Walschburger":1137,"Jonathan Haist":1138,"Daniel Rohregger":1139,"Thomas Naunheim":1140,"Florian Stöckl":1141,"Pascal Asch":1142,"Markus Kättner":1143,"Anna Ulbricht":1144,"Annette Brauns":1145},{"display_name":801,"avatar":802,"permalink":803,"linkedin":804,"imageOffsetTop":805},{"display_name":807,"avatar":808,"permalink":809,"twitter":810,"linkedin":811},{"display_name":813,"avatar":814,"permalink":815,"twitter":816,"linkedin":817,"imageOffsetLeft":818,"imageOffsetTop":819},{"display_name":821,"avatar":822,"permalink":823,"twitter":824,"linkedin":825,"imageOffsetTop":805},{"display_name":827,"avatar":828,"permalink":829,"twitter":830,"linkedin":831,"imageOffsetTop":832,"imageOffsetLeft":833},{"display_name":835,"avatar":836,"permalink":837,"linkedin":838},{"display_name":840,"avatar":841,"permalink":842,"linkedin":843,"twitter":844},{"display_name":846,"avatar":847,"permalink":848,"linkedin":849,"twitter":850},{"display_name":852,"avatar":853,"permalink":854,"linkedin":855,"twitter":856},{"display_name":858,"avatar":859,"permalink":860,"linkedin":861,"twitter":862,"imageOffsetTop":863,"imageOffsetLeft":864},{"display_name":866,"avatar":867,"permalink":868,"twitter":816,"linkedin":869},{"display_name":871,"avatar":872,"permalink":873,"twitter":816,"linkedin":874},{"display_name":876,"avatar":877,"permalink":878,"twitter":816,"linkedin":869,"imageOffsetTop":805},{"display_name":880,"avatar":881,"permalink":882,"twitter":816,"linkedin":883},{"display_name":885,"avatar":886,"permalink":887,"twitter":888,"linkedin":889},{"display_name":891,"avatar":892,"permalink":893,"twitter":816,"linkedin":869,"imageOffsetTop":805},{"display_name":895,"avatar":896,"permalink":897,"twitter":898,"linkedin":898},{"display_name":523,"avatar":900,"permalink":901,"twitter":902,"linkedin":903,"imageOffsetTop":904},{"display_name":906,"avatar":907,"permalink":908,"linkedin":909,"twitter":816},{"display_name":911,"avatar":912,"permalink":913,"linkedin":914,"twitter":816},{"display_name":916,"avatar":917,"permalink":918,"twitter":919,"linkedin":920},{"display_name":922,"avatar":923,"permalink":924,"linkedin":925,"twitter":816},{"display_name":927,"avatar":928,"permalink":929,"linkedin":930,"twitter":816,"imageOffsetTop":805},{"display_name":932,"avatar":933,"permalink":934,"linkedin":935,"twitter":816},{"display_name":937,"avatar":938,"permalink":939,"twitter":816},{"display_name":941,"avatar":942,"permalink":943,"twitter":816,"linkedin":944},{"display_name":946,"avatar":947,"permalink":948,"twitter":949,"linkedin":950},{"display_name":952,"avatar":953,"permalink":954,"linkedin":955,"twitter":816},{"display_name":957,"avatar":958,"permalink":959,"twitter":816,"linkedin":869},{"display_name":961,"avatar":962,"permalink":963,"twitter":964,"linkedin":964,"imageOffsetTop":805,"socials":1121},[1122,1123],{"text":967,"href":968},{"text":970,"href":971},{"display_name":973,"avatar":974,"permalink":975,"twitter":976,"linkedin":977},{"display_name":979,"avatar":980,"permalink":981,"twitter":816,"linkedin":869},{"display_name":983,"avatar":984,"permalink":985,"twitter":986,"linkedin":869},{"display_name":988,"avatar":989,"permalink":990,"twitter":991,"linkedin":992},{"display_name":994,"avatar":995,"permalink":996,"twitter":997,"linkedin":997},{"display_name":999,"avatar":1000,"permalink":1001,"twitter":1002,"linkedin":1003},{"display_name":1005,"avatar":1006,"permalink":1007,"twitter":1008,"linkedin":1009},{"display_name":1011,"avatar":1012,"permalink":1013,"linkedin":1014,"twitter":816},{"display_name":1016,"avatar":1017,"permalink":1018,"linkedin":1019,"twitter":816},{"display_name":1021,"avatar":1022,"permalink":1023,"linkedin":1024,"twitter":1025},{"display_name":1027,"avatar":1028,"permalink":1029,"linkedin":1030},{"display_name":1032,"avatar":1033,"permalink":1034,"linkedin":1035},{"display_name":1037,"avatar":1038,"permalink":1039,"linkedin":1040},{"display_name":1042,"avatar":1043,"permalink":1044,"linkedin":1045},{"display_name":1047,"avatar":1048,"permalink":1049,"linkedin":1050,"imageOffsetTop":805},{"display_name":1052,"avatar":1053,"permalink":1054,"linkedin":1055,"imageOffsetTop":805},{"display_name":524,"avatar":1057,"permalink":1058,"linkedin":1059,"imageOffsetTop":904},{"display_name":1061,"avatar":1062,"permalink":1063,"linkedin":1064,"imageOffsetTop":904},{"display_name":1066,"avatar":1067,"permalink":1068,"linkedin":1069,"imageOffsetTop":904},{"display_name":1071,"avatar":1072,"permalink":1073,"linkedin":1074,"imageOffsetTop":1075,"imageOffsetLeft":1076},{"display_name":1078,"avatar":1079,"permalink":1080,"linkedin":1081,"imageOffsetTop":1082,"imageOffsetLeft":1083},{"display_name":1085,"avatar":1086,"permalink":1087,"linkedin":1088,"imageOffsetTop":1089,"imageOffsetLeft":832},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1149,"authors":1365},[1150,1167,1181,1195,1211,1224,1237,1250,1262,1278,1292,1307,1325,1336,1349],{"id":1151,"title":1152,"author":1153,"cta":494,"description":733,"hideInRecent":484,"layout":750,"meta":1154,"moment":1159,"path":1160,"stem":1161,"tags":1162,"webcast":484},"content_ja/posts/2026-09-22-end-of-mfa-sms.md","MFA向けSMSの終わり",[827],{"lang":752,"date":1155,"categories":1156,"blogtitlepic":1157,"customExcerpt":1158},"2026-09-21",[235],"head-conditional-access.jpg","企業がいまフィッシング耐性のある、できるだけパスワードレスな認証方式へ移行すべき理由。","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[235,1163,1164,1165,1166],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1168,"title":1169,"author":1170,"cta":494,"description":733,"hideInRecent":484,"layout":750,"meta":1171,"moment":1155,"path":1175,"stem":1176,"tags":1177,"webcast":484},"content_ja/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix。ユーザー自身がエクスプロイトになるとき、そしてそれを止める方法",[801,821],{"lang":752,"date":1155,"categories":1172,"blogtitlepic":1173,"customExcerpt":1174},[235],"head-clickfix.jpg","ClickFixはユーザーを自分自身への攻撃者に変えます。偽のCAPTCHA、コピー＆ペースト、そして悪意あるコードがメモリ上で走り、ディスクには何も残りません。Microsoft Defenderがこの攻撃をどう検知するのか、検知はどこで限界に達するのか、そしてRunMRUハントと4つの防御レイヤーでその隙間をどう埋めるのかを解説します。","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1178,1179,1180],"Defender","SOC","Endpoint Security",{"id":1182,"title":1183,"author":1184,"cta":494,"description":733,"hideInRecent":484,"layout":750,"meta":1185,"moment":1155,"path":1189,"stem":1190,"tags":1191,"webcast":484},"content_ja/posts/2026-09-21-red-tenant-dark-tenant-cio.md","管理業務と日常業務を1台のPCで。Game Overです。",[961],{"lang":752,"date":1155,"categories":1186,"blogtitlepic":1187,"customExcerpt":1188},[235],"head-game-over-en.jpg","CIOにとってテナントが1つでは足りない理由と、2つ目がめったに検討されない理由。Managed Red Tenantは管理業務をオフィス環境からアーキテクチャとして分離し、Managed Dark Tenantは防御が破られてもなお組織が動き続けられるようにします。それが運用モデル、SOCのシグナル、そしてNISG 2026による証明義務にとって何を意味するのかを解説します。","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[235,1192,1193,1194],"Privileged Access","Zero Trust","NIS2",{"id":1196,"title":1197,"author":1198,"cta":494,"description":1199,"hideInRecent":484,"layout":750,"meta":1200,"moment":1201,"path":1206,"stem":1207,"tags":1208,"webcast":484},"content_ja/posts/2026-08-08-isg-germany-2026.md","4度のLeader。ISGドイツ調査2026のglueckkanja",[988],"ISGは今年、調査の名称を変更しました。Microsoft Cloud EcosystemはMicrosoft AI and Cloud Ecosystemになり、名称とともに評価の尺度も移りました。問われるのはもはや、誰がMicrosoftプラットフォームを導入したかではなく、誰がCopilot、エージェント、AIワークロードを制御可能なかたちで運用しているかです。この新しい尺度によって当社の位置づけが変わることはありませんでした。ISG Provider Lens®調査ドイツ2026は、当社を4つのクアドラントでLeaderに位置づけています。Microsoft Productivity and Business Process ServicesとAzure Managed Servicesの、それぞれLarge MarketとMid Marketです。2021年、2023年、2024年、2025年に続き、ドイツでは5回目のLeader評価となります。スイスでのLeaderクアドラント入りはその2週間前でした。",{"lang":752,"date":1201,"categories":1202,"blogtitlepic":1204,"customExcerpt":1205},"2026-08-08",[1203],"Corporate","head-isg-de-2026.png","ISG Provider Lens®調査2026は、ドイツにおいてglueckkanjaを4つのクアドラントでLeaderに位置づけました。Microsoft Productivity and Business Process ServicesとAzure Managed Servicesの、それぞれLarge MarketとMid Marketです。調査の名称はMicrosoft AI and Cloud Ecosystemに変わり、評価の尺度も移りました。AIとエージェントのワークロードを制御可能なかたちで運用できるかが問われています。","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1209,1210],"Award","ISG",{"id":1212,"title":1213,"author":1214,"cta":494,"description":1215,"hideInRecent":484,"layout":750,"meta":1216,"moment":1217,"path":1221,"stem":1222,"tags":1223,"webcast":484},"content_ja/posts/2026-07-31-isg-switzerland-2026.md","Rising StarからLeaderへ。ISGスイス調査2026のglueckkanja",[988],"2024年に当社はglueckkanja Switzerland AGを設立し、ベルンのBahnhofplatz 10bにあるzentroomにオフィスを構えました。2025年、ISGはスイス市場で当社をRising Starに位置づけました。アナリストがLeaderクアドラントへの躍進を見込むベンダーという位置づけです。その躍進がいま記録されました。ISG Provider Lens®調査2026は、スイスにおいて当社をMicrosoft AI and Cloud Ecosystemクアドラントの、Azure Managed Services領域とMicrosoft Productivity and Business Process Services領域でLeaderに位置づけています。",{"lang":752,"date":1217,"categories":1218,"blogtitlepic":1219,"customExcerpt":1220},"2026-07-31",[1203],"head-isg-ch-2026.png","ISG Provider Lens®調査2026は、スイスにおいてglueckkanjaをMicrosoft AI and Cloud Ecosystemクアドラントの、Azure Managed Services領域とMicrosoft Productivity and Business Process Services領域でLeaderに位置づけました。ベルンでの市場参入から2年、Rising Star選出から1年でのことです。","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1209,1210],{"id":1225,"title":1226,"author":1227,"cta":494,"description":733,"hideInRecent":484,"layout":750,"meta":1228,"moment":1229,"path":1233,"stem":1234,"tags":1235,"webcast":484},"content_ja/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak。OpenAI／Hugging Faceの事案が示すこと、示さないこと",[961],{"lang":752,"date":1229,"categories":1230,"blogtitlepic":1231,"customExcerpt":1232},"2026-07-24",[235],"head-outbreak.jpg","AIエージェントがテスト環境から脱出し、ゼロデイを見つけ、別の企業をハッキングする。映画の脚本のようですが、2026年7月に実際に起きました。冷静に位置づける時期です。少しの心理学、2人のセキュリティ専門家、そしてそれが自社の防御にとって何を意味するのかという問いとともに。","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1236,1179,1193],"AI",{"id":1238,"title":1239,"author":1240,"cta":494,"description":1241,"hideInRecent":484,"layout":750,"meta":1242,"moment":1243,"path":1247,"stem":1248,"tags":1249,"webcast":484},"content_ja/posts/2026-07-22-isg-cybersecurity-2026.md","LeaderそしてRising Star。ISGサイバーセキュリティ調査2026のglueckkanja",[988],"新たに加わったクアドラントで、いきなりLeaderになりました。ISG Provider Lens®調査「Cybersecurity – Services and Solutions 2026」は、ドイツの中堅中小企業向けNext-Gen SOC/MDR Services分野でglueckkanjaをLeaderと位置づけています。Next-Gen SOC/MDR Servicesの全体市場では、ISGは当社をRising Starに選出しました。つまり、今後12か月から24か月のうちにLeaderクアドラントへ躍進するとアナリストが見込むベンダーだということです。",{"lang":752,"date":1243,"categories":1244,"blogtitlepic":1245,"customExcerpt":1246},"2026-07-22",[1203],"head-isg-cybersecurity-2026.png","ISG Provider Lens®調査 Cybersecurity 2026は、glueckkanjaをNext-Gen SOC/MDR Services（Midmarket）クアドラントのLeaderに選出しました。Next-Gen SOC/MDR Servicesの全体市場では、当社はRising Starです。ISGは当社の平均を上回る成長、Microsoftセキュリティに関する深い専門性、そしてドイツ国内から提供する24時間365日のSOCを評価しています。","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1209,1210,235],{"id":1251,"title":1252,"author":1253,"cta":494,"description":1254,"hideInRecent":484,"layout":750,"meta":1255,"moment":1256,"path":1259,"stem":1260,"tags":1261,"webcast":484},"content_ja/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity：AIが実際に働くために本当に必要なもの",[988],"ある製造業の企業が、14,000あるSKUのうちどれが実際に利益を生んでいるのかを知りたいと考えました。答えは3つのシステムの中にありますが、それらは一度もデータを1件たりともやり取りしたことがありません。少し前までは、その答えを得るのに3つの部門、2週間、そして相当な善意が必要でした。2026年初頭からは、AIがこの問いに数分で答えられます。データを走査し、関連を結び、推奨を出す。ただし、アクセスできることが前提です。",{"lang":752,"date":1256,"categories":1257,"blogtitlepic":1258},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1236,131],{"id":1263,"title":1264,"author":1265,"cta":494,"description":1266,"hideInRecent":484,"layout":750,"meta":1267,"moment":1268,"path":1272,"stem":1273,"tags":1274,"webcast":484},"content_ja/posts/2026-07-01-onboarding-process.md","契約書にサインしたあと：当社のオンボーディングはこう進みます",[1078],"オンボーディングは実際どう進むのですか。応募者との会話で繰り返し受ける質問です。オンボーディングがぎくしゃくした経験を持つ人が少なくないからでしょう。だからこそ当社は、最初から安心してもらうことを大切にしています。",{"lang":752,"date":1268,"categories":1269,"blogtitlepic":1270,"customExcerpt":1271},"2026-07-01",[1203],"Onboarding_Blogheader","契約書にサインが済み、大きな一歩は終わりました。では、ここからどうなるのでしょうか。PreBoardingからチームでの最初の1週間まで、当社のオンボーディングの舞台裏をご案内します。","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1275,1276,1277],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1279,"title":1280,"author":1281,"cta":494,"description":1282,"hideInRecent":484,"layout":750,"meta":1283,"moment":1284,"path":1288,"stem":1289,"tags":1290,"webcast":484},"content_ja/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner：当社もその一員です",[988],"Microsoftのパートナーエコシステムには数多くの表彰がありますが、Frontier Partner Badgeはその成り立ちにおいて他の称号と一線を画します。申請することはできず、Microsoft側の主導で、ごく限られたパートナーに授与されます。対象となるには、1つの領域で秀でるのではなく、複数の領域で同時に実力を示さなければなりません。Microsoftが確認するのは、Cloud & AI Platforms、AI Business Solutions、そしてSecurityにおける実証済みの能力です。つまり対象は、AIを既存のITへの後付けではなく、IDからエンドポイント、そして本番のAI運用までを貫くアーキテクチャの帰結として捉えている企業です。",{"lang":752,"date":1284,"categories":1285,"blogtitlepic":1286,"customExcerpt":1287},"2026-06-26",[1203],"head-frontier-partner-badge.jpg","最近、Microsoft AI Cloud Partner Programに新たな最高位の称号としてFrontier Partner Badgeが設けられました。Microsoftがこれを授与するのは、ワークプレイスからクラウドプラットフォーム、セキュリティ、そしてAIアプリケーションそのものに至るまで、Microsoftスタック全体でAIプロジェクトを確実に届けられると実績で示した、世界でもごく限られたパートナーだけです。DACH圏でこのグループに属するのは数社にすぎず、当社はそのうちの1社です。","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1209,1291,1236],"Microsoft Partner",{"id":1293,"title":1294,"author":1295,"cta":494,"description":1296,"hideInRecent":484,"layout":750,"meta":1297,"moment":1298,"path":1302,"stem":1303,"tags":1304,"webcast":484},"content_ja/posts/2026-06-09-vair-run.md","チャリティのために160キロ",[1085],"日曜の朝8時30分、マイン川沿いのHolbeinsteg。おそろいのNinjaCatシャツを着た11人の同僚が、Frankfurter Rundenのスタートに並びました。雨も雷鳴も込みです。良いことのために走るという動機は、悪天候でもランニングシューズの紐を結ぶのに十分でした。",{"lang":752,"date":1298,"categories":1299,"blogtitlepic":1300,"customExcerpt":1301},"2026-06-08",[1203],"frankfurter-runden.png","同僚11人、16周、160キロ、雷雨、そして表彰台。glueckkanjaはFrankfurter Runden 2026に参加し、走った1周ごとにVAIR e.V.へ寄付しました。同団体はオフェンバッハでインクルーシブなスポーツ・カルチャーパークを建設しています。","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1305,1275,1306],"Top Arbeitgeber","Soziales Engagement",{"id":1308,"title":1309,"author":1310,"cta":494,"description":1311,"hideInRecent":484,"layout":750,"meta":1312,"moment":1313,"path":1317,"stem":1318,"tags":1319,"webcast":484},"content_ja/posts/2026-04-10-incident-to-intelligence.md","未知のAMOSスティーラーの解剖：アラートから免疫獲得まで数時間",[1066],"当社のSOCでアラートが発報すると、そこから時計が動き始めます。対象となったお客様だけでなく、当社の保護下にあるすべての組織にとってです。現代の脅威環境で最も危険な瞬間はインテリジェンス・ギャップ、つまり新しいマルウェア亜種が最初に投入されてから、業界がその存在を知る日までの時間の窓です。",{"lang":752,"date":1313,"categories":1314,"blogtitlepic":1315,"customExcerpt":1316},"2026-04-10",[235],"head-amos-stealer.png","これまで文書化されていなかったAMOSスティーラーの亜種が、macOSエンドポイントを侵害しました。既知のハッシュはなく、公開データベースにC2データもありません。当社のSOCは6層の難読化を解体し、すべての指標を抽出したうえで、業界がこの検体を目にするよりも前に、数時間以内ですべてのSOCのお客様へ保護を配布しました。","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1320,1321,1322,1323,1324],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1326,"title":1327,"author":1328,"cta":494,"description":1329,"hideInRecent":484,"layout":750,"meta":1330,"moment":1331,"path":1334,"stem":1335,"tags":494,"webcast":484},"content_ja/posts/2026-03-21-microsoft-edge-corporate-browser.md","Edgeを唯一の社内標準ブラウザーにすべき理由",[858],"企業環境におけるブラウザーの選定は戦略的な判断です。セキュリティの水準と運用の手間を直接左右します。長らくGoogle Chromeが自然な選択肢でしたが、Microsoft Edgeは既存のスタックに直接組み込まれるブラウザーへと進化しました。特にMicrosoft 365を利用し、管理をIntuneで行っている環境ではその効果が大きくなります。",{"lang":752,"date":1331,"blogtitlepic":1332,"customExcerpt":1333},"2026-03-21","head-microsoft-edge-default-browser.jpg","Chromeを本気で選んだ企業はほとんどありません。独自の同期ロジック、独自のアカウント管理、独自のポリシー画面を抱えたまま、ただそこにあっただけです。一方でMicrosoft Edgeは、すでに動いているインフラ、つまりEntra ID、Intune、Defenderに直接組み込まれます。本記事では、移行がどのようなものか、IntuneのポリシーでどのようにChromeをランディングページへリダイレクトするか、そして2つのブラウザーを並行運用するのをやめると何が不要になるかを紹介します。","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1337,"title":1338,"author":1339,"cta":494,"description":1340,"hideInRecent":484,"layout":750,"meta":1341,"moment":1342,"path":1346,"stem":1347,"tags":1348,"webcast":484},"content_ja/posts/2026-03-20-stryker-attack-intune-privilege.md","必要だったのは管理者アカウント1つだけでした",[961],"2026年3月11日水曜日。79か国のStrykerのオフィスで従業員がPCの電源を入れると、中身は空でした。ログイン画面はロゴに置き換わっていました。社用ノートPC、社用スマートフォン、そして同社のBYODプログラムに登録されていた私物端末まで、すべてが一夜のうちに同時に消去されました。ランサムウェアもマルウェアのシグネチャも、エンドポイント検知ツールが捉えられるものは何もありませんでした。",{"lang":752,"date":1342,"categories":1343,"blogtitlepic":1344,"customExcerpt":1345},"2026-03-20",[235],"head-stryker.jpg","2026年3月11日、Handalaは79か国の端末を消去しました。そのために必要だったのは、侵害されたIntuneの管理者アカウント1つだけです。マルウェアもエクスプロイトもなく、正規の管理ツールが所有者自身に向けられました。何が起きたのか、なぜそれが通用したのか、そして塞ぐべき2つのアーキテクチャ上の穴について説明します。","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[790,71,1192,1193],{"id":1350,"title":1351,"author":1352,"cta":494,"description":1353,"hideInRecent":484,"layout":750,"meta":1354,"moment":1355,"path":1359,"stem":1360,"tags":1361,"webcast":484},"content_ja/posts/2026-03-16-ai-agent-hackathon.md","6つのAgent。4週間。実際の運用へ。",[988],"自社のIT部門は、Agentなら数分で片づく作業に毎週何時間を費やしているでしょうか。",{"lang":752,"date":1355,"categories":1356,"blogtitlepic":1357,"customExcerpt":1358},"2026-03-16",[1203],"head-ai-agent-hackathon.jpg","6社、4週間のビルドフェーズ、6つの動作するAI Agent。これが第1回glueckkanja AI Agent Hackathonの成果です。Kiekert、Dr. Oetker、Eckes-Granini、igefa、lila logistikがCopilot StudioでAgentを構築し、それらは現在すでに本番で稼働しています。そこで何が生まれ、この形式がどのように機能するのかを紹介します。","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1236,1362,1363,1364],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1366,"Fritz Zurhorst":1367,"Nadine Klein":1368,"Jan Geisbauer":1369,"Carolin Kanja":1373,"Anna Ulbricht":1374,"Annette Brauns":1375,"Pascal Asch":1376,"Steffen Schwerdtfeger":1377},{"display_name":827,"avatar":828,"permalink":829,"twitter":830,"linkedin":831,"imageOffsetTop":832,"imageOffsetLeft":833},{"display_name":801,"avatar":802,"permalink":803,"linkedin":804,"imageOffsetTop":805},{"display_name":821,"avatar":822,"permalink":823,"twitter":824,"linkedin":825,"imageOffsetTop":805},{"display_name":961,"avatar":962,"permalink":963,"twitter":964,"linkedin":964,"imageOffsetTop":805,"socials":1370},[1371,1372],{"text":967,"href":968},{"text":970,"href":971},{"display_name":988,"avatar":989,"permalink":990,"twitter":991,"linkedin":992},{"display_name":1078,"avatar":1079,"permalink":1080,"linkedin":1081,"imageOffsetTop":1082,"imageOffsetLeft":1083},{"display_name":1085,"avatar":1086,"permalink":1087,"linkedin":1088,"imageOffsetTop":1089,"imageOffsetLeft":832},{"display_name":1066,"avatar":1067,"permalink":1068,"linkedin":1069,"imageOffsetTop":904},{"display_name":858,"avatar":859,"permalink":860,"linkedin":861,"twitter":862,"imageOffsetTop":863,"imageOffsetLeft":864},{"id":796,"extension":797,"meta":1379,"stem":8,"__hash__":1147},{"Christopher Brumm":1380,"Thomas Naunheim":1381},{"display_name":523,"avatar":900,"permalink":901,"twitter":902,"linkedin":903,"imageOffsetTop":904},{"display_name":524,"avatar":1057,"permalink":1058,"linkedin":1059,"imageOffsetTop":904},1791383936720]