Daily.Entra.News
Aboutmerill.net
Product

Microsoft Entra Private Access

Track documentation and Message Center changes for Microsoft Entra Private Access.

Microsoft Learn documentation ↗

Latest Microsoft Entra Private Access changes

Zscalerprivateaccess Tutorial

General

Zscaler Private Access (ZPA) is available in the following [national cloud deployments](/graph/deployments).

Enable Intelligent Local Access

General

Learn how to enable the Intelligent Local Access (ILA) capability for Microsoft Entra Private Access, which optimizes traffic flow for clients accessing Entra apps via private networks.

Private Access Segmentation Strategies

Developer

Learn best practices for transitioning from VPN replacement with Quick Access to per-application segmentation using Microsoft Entra Private Access.

Source IP anchoring with Global Secure Access

Developer

Configure Microsoft Entra Private Access to tunnel specific application traffic through a private network for application's network-based access control policy.

Operate Private Access

Monitoring

| Connector high resource usage | CPU > 80% or memory > 85% sustained for 15+ minutes on a connector host | Network Ops L1 | Azure Monitor alert ([Playbook 5](#playbook-5-connector-group-capacity-alert)) | 1. Check the number of active sessions on the connector.<br>2. Redistribute load by adding another connector to the group.<br>3. Investigate if a specific application is generating unusual traffic volume. |

Licensing Guest Users

General

Guest users are only billed when they actively sign in to the Global Secure Access client for Private Access.

Operate Microsoft Entra Private Access

General

Post-deployment operations guide for Microsoft Entra Private Access, the Zero Trust network access (ZTNA) capability, covering alerting, health checks, integration, automation, and operational metrics.

Migrate from DirectAccess to Microsoft Entra Private Access

Monitoring

DirectAccess provides remote connectivity to internal resources but relies on IPv6 transition technologies, requires domain-joined Windows Enterprise clients, and grants full network-level access once connected. However, these architectural constraints don't meet the needs of modern hybrid and cloud-first environments.

Configure Global Access With Pim

Developer

Add just-in-time privileged access for critical servers and applications using Privileged Identity Management (PIM) with Microsoft Entra Private Access.

Configure Kerberos Sso

Authentication

Enable single sign-on to on-premises resources published through Microsoft Entra Private Access using Kerberos authentication. Optionally integrate Windows Hello for Business cloud Kerberos trust.

How to Manage the Private Access Profile

General

Configure the Private Access traffic forwarding profile to provide secure, VPN-less access to internal resources through Global Secure Access.

Target Resource Private Access Apps

Conditional Access

Configure Conditional Access policies for Quick Access and Private Access apps to control access to internal resources based on user, device, and location conditions.

Connectors

Fundamentals

After a connector is enrolled, it establishes outbound TLS tunnels to the Private Access cloud infrastructure. These tunnels handle all data path traffic. In addition, the control plane channel uses minimal bandwidth to drive keep-alive heartbeat, health reporting, connector updates, and other functions.

How to Manage the Private Access Profile

General

Configure the Private Access traffic forwarding profile to provide secure, VPN-less access to internal resources through Global Secure Access.

Enable Intelligent Local Network

General

Learn how to enable the Intelligent Local Access (ILA) capability for Microsoft Entra Private Access, which optimizes traffic flow for clients accessing Entra apps via private networks.

Enable Multi Geo

General

Learn how to enable Multi-Geo Capability for Microsoft Entra Private Access to optimize traffic flow from Microsoft Entra Clients to Microsoft Entra Apps.

Learn about Microsoft Entra Private Access

Fundamentals

Learn about how Microsoft Entra Private Access secures access to your private corporate resources through the creation of Quick Access and Global Secure Access apps.

Ciphers

General

Learn about the supported cryptographic algorithms, or ciphers, used for Microsoft Entra Private Access.

Configure Connectors

General

Learn how to configure Microsoft Entra private network connectors for Microsoft Entra Private Access.

Configure Domain Controllers

General

Learn how to configure Microsoft Entra Private Access for Active Directory Domain Controllers.

Configure Per App Access

Developer

Learn how to configure per-app access to your private, internal resources using Global Secure Access applications for Microsoft Entra Private Access.

Configure Quick Access

General

Learn how to specify the internal resources to secure with Microsoft Entra Private Access using a Quick Access app.

Connector Groups

Fundamentals

Learn how Microsoft Entra private network connector groups work, and how Microsoft Entra Private Access and application proxy use them.

Connectors

Fundamentals

Learn how Microsoft Entra private network connectors work and how Microsoft Entra Private Access and application proxy use them.

Enable Multi Geo

General

Learn how to enable Multi-Geo Capability for Microsoft Entra Private Access to optimize traffic flow from Microsoft Entra Clients to Microsoft Entra Apps.

Manage Private Access Profile

General

Learn how to manage the Private Access traffic forwarding profile for Microsoft Entra Private Access.

Private Access

Fundamentals

Learn about how Microsoft Entra Private Access secures access to your private corporate resources through the creation of Quick Access and Global Secure Access apps.

Source IP anchoring with Global Secure Access

Developer

Configure Microsoft Entra Private Access to tunnel specific application traffic through a private network for application's network-based access control policy.

Configure Domain Controllers

Monitoring

- Use **Event Viewer** from **Application and Service Logs** > **Microsoft** > **Windows** > **Private Access Sensor** to review Private Access Sensor logs.

Enable Intelligent Local Access (preview)

General

Learn how to enable the Intelligent Local Access (ILA) capability for Microsoft Entra Private Access, which optimizes traffic flow for clients accessing Entra apps via private networks.

Configure Domain Controllers

General

To configure Microsoft Entra Private Access for Active Directory Domain Controllers, you must have the following:

Cisco Coexistence

General

5. Add DNS suffixes defined in your Private DNS or Enterprise App segments (only required if Private Access traffic forwarding profile is enabled). For example, if your Private DNS suffix is `contoso.local` and you have a private app at `contoso.com`, add both suffixes.

Configure Quick Access

Developer

Configuring your Quick Access settings is a major component to utilizing Microsoft Entra Private Access. When you configure Quick Access for the first time, Private Access creates a new enterprise application. The properties of this new app are automatically configured to work with Private Access.

Ciphers

General

Learn about the supported cryptographic algorithms, or ciphers, used for Microsoft Entra Private Access.

Enable Multi Geo

General

Learn how to enable Multi-Geo Capability for Microsoft Entra Private Access to optimize traffic flow from Microsoft Entra Clients to Microsoft Entra Apps.

Configure Connectors

General

Learn how to configure Microsoft Entra private network connectors for Microsoft Entra Private Access.

Configure Per App Access

Developer

Learn how to configure per-app access to your private, internal resources using Global Secure Access applications for Microsoft Entra Private Access.

Configure Quick Access

General

Learn how to specify the internal resources to secure with Microsoft Entra Private Access using a Quick Access app.

Connector Groups

Fundamentals

Learn how Microsoft Entra private network connector groups work and how they're used by Microsoft Entra Private Access and application proxy.

Connectors

Fundamentals

Learn how Microsoft Entra private network connectors work and how they're used by Microsoft Entra Private Access and application proxy.

Manage Private Access Profile

General

Learn how to manage the Private Access traffic forwarding profile for Microsoft Entra Private Access.

Private Access

Fundamentals

Learn about how Microsoft Entra Private Access secures access to your private corporate resources through the creation of Quick Access and Global Secure Access apps.

Version History

General

- The connector now supports routing outbound traffic to destinations in Microsoft Entra Private Access through a forward proxy, enhancing network control.

Version History

General

- The connector now supports routing outbound traffic to destination in GSA Private Access through a forward proxy, enhancing network control.

Configure Global Access With Pim

Security

For the scenario where you need to control access to specific *critical* resources, such as highly valued servers and applications, Microsoft recommends that you add an extra security layer by enforcing just-in-time privileged access on top of their already secured private access.

Manage Private Access Profile

Conditional Access

Conditional Access policies for Private Access are configured at the application level for each app. Conditional Access policies can be created and applied to the application from two places:

Zscalerprivateaccess Tutorial

General

To configure the integration of Zscaler Private Access (ZPA) into Microsoft Entra ID, you need to add Zscaler Private Access (ZPA) from the gallery to your list of managed SaaS apps.

Zscalerprivateaccessadministrator Tutorial

General

To configure the integration of Zscaler Private Access Administrator into Microsoft Entra ID, you need to add Zscaler Private Access Administrator from the gallery to your list of managed SaaS apps.

Gsa Deployment Guide Intro

Architecture

- [Microsoft Global Secure Access Deployment Guide for Microsoft Entra Private Access](gsa-deployment-guide-private-access.md)