Help with configuration Conditional access policy with GSA

Hello Support Team,

I would like your assistance in configuring a Conditional Access policy in Microsoft Entra Global Secure Access (GSA) to restrict company resource access only to corporate-managed devices. We are using Intune for that.

Specifically, I need guidance on:

Proper setup of Traffic Forwarding profiles (Microsoft, Private, Internet) for this scenario.

Creating and targeting the Conditional Access policy so that access is blocked for non-corporate or non-compliant devices.

Monitoring and validating the policy impact using sign-in logs and GSA traffic reports.

Could you please provide step-by-step guidance or documentation to ensure the policy is configured correctly without disrupting user access?

As a result, I want get access to Microsoft corporate resources using corporate accounts only from corporate-managed devices.

Thank you in advance for your support.