Global Secure Access connector guidance now specifies separate TCP port ranges

The period’s meaningful changes center on Global Secure Access connector configuration and Conditional Access risk guidance. Connector material now identifies non-overlapping dynamic and AutoReuse TCP ranges, while Conditional Access guidance warns that device-platform data from user-agent strings can be modified and is not verified. Other updates refine Exchange role-assignment and network-content-filtering descriptions. Several remaining edits are reference cleanup, removing Workplace by Facebook or Meta references from Entra integration, provisioning, governance, and lifecycle pages.

• Global Secure Access · Fundamentals

  Connector port ranges and prerequisites are now explicit

  Global Secure Access connector guidance specifies non-overlapping dynamic TCP ports 49152–65535 and AutoReuse TCP ports 10000–49151. It adds configuration and verification commands, Windows Server 2016+ prerequisites, and the limitation that AutoReuse applies only to TCP. Administrators handling high-volume TCP workloads should review available and excluded ports before applying the settings.

• Entra ID · Conditional Access

  Conditional Access guidance flags modifiable device-platform signals

  The conditions guidance says device-platform information, including user-agent strings, can be modified and is not verified. It recommends combining device-platform conditions with Microsoft Intune device-compliance policies or using them in a block statement.

• Entra ID · Fundamentals

  Exchange role-assignment guidance now points to the Exchange admin center

  Groups guidance directs administrators to the Exchange admin center for role assignments through dynamic-membership groups. If the old Exchange admin center is required, it advises assigning the eligible role directly to the user rather than through role-assignable groups; Exchange PowerShell cmdlets continue to work as expected.

• Global Secure Access · Developer

  Network content-filtering descriptions clarify audit and block outcomes

  Global Secure Access guidance distinguishes Basic content filtering from Scan with Purview and explains that scanning can audit or block selected file and text content based on conditions.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.