90 questions with Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access tags

Sort by: Updated
1 answer

GSA traffic forwarding profile user/group assignment shows "temporarily unavailable" for all three default profiles.

Summary: GSA traffic forwarding profile user/group assignment shows "temporarily unavailable" for all three default profiles. Root cause identified: the profile backing service principals do not exist in the tenant. Evidence gathered via…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2026-07-21T15:09:33.4466667+00:00
Larry Yuan 0 Reputation points
commented 2026-07-23T14:30:05.2333333+00:00
Sina Salam 31,216 Reputation points Volunteer Moderator
0 answers

GSA traffic forwarding profile user/group assignment shows "temporarily unavailable" for all 3 profiles; backing service principals missing

Global Secure Access user and group assignment on all three default traffic forwarding profiles shows "temporarily unavailable" and has never worked. Root cause identified: the profile backing service principals do not exist in the tenant.…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2026-07-22T23:13:07.2266667+00:00
Larry Yuan 0 Reputation points
1 answer One of the answers was accepted by the question author.

valid MSFT or Azure websites

is "login.win" a valid MSFT/Azure website, that enterprise should permit outbound access to?

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2026-07-17T22:56:36.23+00:00
Mahoney, Glenn AG:EX 25 Reputation points
accepted 2026-07-17T23:18:32.85+00:00
Mahoney, Glenn AG:EX 25 Reputation points
3 answers

GSA installations in MAC

GSA was installed, but I can't sign in without  Intune MDM. I'm currently using Addigy MDM.

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2026-05-21T13:02:03.67+00:00
RSI_Raguvaran M 0 Reputation points
commented 2026-05-29T12:20:52.7633333+00:00
Djordje Novakovic 311 Reputation points
2 answers One of the answers was accepted by the question author.

GSA macOS client randomly blocks general internet access - DNS responses dropped for non-policy hostnames

Summary With the GSA client running on macOS, users are randomly unable to reach general internet sites (e.g. google.com) in browsers and other applications. Quitting the GSA client restores connectivity immediately. Reproducible across multiple client…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2026-04-21T06:58:32.76+00:00
Alex 45 Reputation points
accepted 2026-04-30T03:49:20.85+00:00
Alex 45 Reputation points
2 answers

Incorrect Public IP Location on Microsoft Entra

We have observed an incorrect location being displayed for one of our customer’s public IP addresses in Microsoft Entra. This incorrect location is causing an impact on the customer’s security and conditional access policy enforcement. Kindly help to…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2026-03-27T02:15:16.4733333+00:00
Weesingha Temrat 0 Reputation points
answered 2026-04-27T10:59:06.28+00:00
Shubham Sharma 17,925 Reputation points Microsoft External Staff Moderator
1 answer

Incorrect Public IP Location on Microsoft Entra

Dear Microsoft Support, We have observed an incorrect location being displayed for one of our customer’s public IP addresses in Microsoft Entra. Details are below: IP Address: <PII REMOVED> Incorrect Location Displayed: <PII REMOVED> Correct…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2026-03-25T04:34:31.5566667+00:00
Nipat Bengthong 0 Reputation points
commented 2026-04-09T09:23:54.4766667+00:00
Shubham Sharma 17,925 Reputation points Microsoft External Staff Moderator
1 answer

GSA authentication issues

I'm looking for suggestions. We have a bunch of employees that travel around a lot and primarily use work out of a financial application online which the company recently moved into Azure. This application also has quite a few Power BI and Power Automate…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2026-03-23T12:30:33.6833333+00:00
ShawnO 45 Reputation points
commented 2026-03-27T15:51:55.6466667+00:00
Sridevi Machavarapu 33,660 Reputation points Microsoft External Staff Moderator
0 answers

: Microsoft traffic profile configured but not working

Problem: Microsoft traffic profile configured but not working Details: We have EMS E3 licenses with Entra ID P1 ✅ Microsoft traffic profile is Enabled ✅ All users assigned ✅ Client installed and authenticated ✅ BUT: Magic-IP not received for…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2026-01-16T14:01:20.4666667+00:00
adm lunafo 0 Reputation points
2 answers

Entra policy -- enable vs report only

simple question -- when the enable policy is showing does that mean report only is on and the policy is NOT enabled? Is this confusing to others?

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-11-19T16:17:28.3433333+00:00
Eben Walker 0 Reputation points
commented 2025-11-27T11:09:38.3266667+00:00
Rukmini 43,820 Reputation points Microsoft External Staff Moderator
1 answer One of the answers was accepted by the question author.

Unable to reach website PICS.IO when GSCA (Global Secure Access Client) is active

we are unable to reach website PICS.IO when GSCA (Global Secure Access Client) is active. if I pause the client I can reach it without problems. we had similar issues with other websites, but I cannot document at this moment. we tried with several…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-11-11T13:46:52.7466667+00:00
Dario ADMIN. Porru 20 Reputation points
accepted 2025-11-14T15:25:16.16+00:00
Dario ADMIN. Porru 20 Reputation points
0 answers

How to connect GSA Internet access to Sophos firewall via site to site VPN for consistent egress IP

We’ve set up Microsoft Entra Global Secure Access (Internet Access) with a Remote Network and are trying to bring up a site‑to‑site IPsec (route‑based, IKEv2) tunnel from our in‑office Sophos firewall so branch Internet traffic goes through GSA but still…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-10-22T14:20:05.8866667+00:00
William 0 Reputation points
1 answer One of the answers was accepted by the question author.

Can you force GSA to use a POP within a country?

I'm trialing GSA Internet and located in Canada. I've noticed GSA will periodically change jump to a US based POP. This is causing problems for some Geo-restricted apps we use, and while I can exclude them from the forwarding policy I think it defeats…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-10-03T16:10:57.92+00:00
KarlV86 25 Reputation points
accepted 2025-10-14T09:46:41.71+00:00
KarlV86 25 Reputation points
0 answers

After enabling the TLS inspection policy, we are encountering blocks when accessing URLs via the GSA internet profile. The filtering policy named "GSA HTTP CONNECT method unsupported" is being triggered

We encountered errors while accessing internet-allowed URLs through the Internet Traffic Forwarding profile due to the GSA HTTP CONNECT method being unsupported by policy. This issue arose after enabling the TLS inspection policies.

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-10-14T08:37:45.8066667+00:00
Viji Udaiyar 0 Reputation points
edited the question 2025-10-14T08:38:22.53+00:00
Viji Udaiyar 0 Reputation points
1 answer

Don't have access to workbook area inside Entra Portal

Error while trying to gain access to the monitoring/workbook area of entra site after login. Error details Session ID 0bfae3ac9a334784946a8a1c9c449c07 Resource group name Subscription ID Resource ID Error code 401 Details Error loading your…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-10-01T20:01:25.6933333+00:00
IT Department 0 Reputation points
answered 2025-10-07T20:51:28.93+00:00
VEMULA SRISAI 13,890 Reputation points Microsoft External Staff Moderator
1 answer

Lost Tenant Access

I tried logging in through these commands: az login --allow-no-subscriptions az account list --output table It still shows that my subscription is there and tenantId, but I can no longer login and see my resources in my azure Cloud. This happened…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-09-22T08:14:11.2533333+00:00
King Bautista 0 Reputation points
commented 2025-10-03T10:07:43.41+00:00
Anonymous
0 answers

Unable to add users to traffic forwarding profiles in GSA in MS Entra

In Entra > GSA > Traffic forwarding option, I don't have the option to add users or groups in any of the three profiles even though I have the Entra suite license available. It sasy ''temporary unavailable" in all 3 profiles.

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-09-25T10:16:25.6666667+00:00
New Var 15 Reputation points
commented 2025-09-26T20:27:22.72+00:00
sivarshney 0 Reputation points
0 answers

Incorrect Public IP Location on Microsoft Entra

Dear Microsoft Support, We have observed an incorrect location being displayed for one of our customer’s public IP addresses in Microsoft Entra. Details are below: IP Address: 146.88.51.155 Incorrect Location Displayed: Phuket, Thailand Correct Location:…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-08-30T04:05:44.86+00:00
Nuchit Phuanglamchiak 0 Reputation points
commented 2025-09-15T08:35:54.3466667+00:00
Anonymous
2 answers One of the answers was accepted by the question author.

incorrect location public ip on microsoft entra system.

my customer use microsoft entra for their security , but the system show their public ip in phuket province and it incorrect. IP Address: xxx.xxx.xx.xx Incorrect location: Phuket , Phuket TH Correct location: Samut Prakan , Phra Pradaeng TH Please help…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-08-06T06:14:55.1+00:00
Nipon Phunrungluck 20 Reputation points
accepted 2025-09-12T05:17:45.5833333+00:00
Nipon Phunrungluck 20 Reputation points
1 answer

Sign in errors, private ipv6, and Global Secure Access

All of our users have Global Secure Access deployed and Entra Internet profile deployed. That profile tunnels all internet traffic through GSA. Recently, we've had some issues with a handful of our users signins violating a conditional Access Policy…

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
asked 2025-08-08T19:22:05.2533333+00:00
Neil Beytagh 11 Reputation points
commented 2025-09-09T09:18:26.0133333+00:00
Anonymous