Securing internet traffic from devices with identity-aware web filtering and threat protection
90 questions with Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access tags
GSA traffic forwarding profile user/group assignment shows "temporarily unavailable" for all three default profiles.
Summary: GSA traffic forwarding profile user/group assignment shows "temporarily unavailable" for all three default profiles. Root cause identified: the profile backing service principals do not exist in the tenant. Evidence gathered via…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
GSA traffic forwarding profile user/group assignment shows "temporarily unavailable" for all 3 profiles; backing service principals missing
Global Secure Access user and group assignment on all three default traffic forwarding profiles shows "temporarily unavailable" and has never worked. Root cause identified: the profile backing service principals do not exist in the tenant.…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
valid MSFT or Azure websites
is "login.win" a valid MSFT/Azure website, that enterprise should permit outbound access to?
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
GSA installations in MAC
GSA was installed, but I can't sign in without Intune MDM. I'm currently using Addigy MDM.
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
GSA macOS client randomly blocks general internet access - DNS responses dropped for non-policy hostnames
Summary With the GSA client running on macOS, users are randomly unable to reach general internet sites (e.g. google.com) in browsers and other applications. Quitting the GSA client restores connectivity immediately. Reproducible across multiple client…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Incorrect Public IP Location on Microsoft Entra
We have observed an incorrect location being displayed for one of our customer’s public IP addresses in Microsoft Entra. This incorrect location is causing an impact on the customer’s security and conditional access policy enforcement. Kindly help to…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Incorrect Public IP Location on Microsoft Entra
Dear Microsoft Support, We have observed an incorrect location being displayed for one of our customer’s public IP addresses in Microsoft Entra. Details are below: IP Address: <PII REMOVED> Incorrect Location Displayed: <PII REMOVED> Correct…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
GSA authentication issues
I'm looking for suggestions. We have a bunch of employees that travel around a lot and primarily use work out of a financial application online which the company recently moved into Azure. This application also has quite a few Power BI and Power Automate…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
: Microsoft traffic profile configured but not working
Problem: Microsoft traffic profile configured but not working Details: We have EMS E3 licenses with Entra ID P1 ✅ Microsoft traffic profile is Enabled ✅ All users assigned ✅ Client installed and authenticated ✅ BUT: Magic-IP not received for…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Entra policy -- enable vs report only
simple question -- when the enable policy is showing does that mean report only is on and the policy is NOT enabled? Is this confusing to others?
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Unable to reach website PICS.IO when GSCA (Global Secure Access Client) is active
we are unable to reach website PICS.IO when GSCA (Global Secure Access Client) is active. if I pause the client I can reach it without problems. we had similar issues with other websites, but I cannot document at this moment. we tried with several…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
How to connect GSA Internet access to Sophos firewall via site to site VPN for consistent egress IP
We’ve set up Microsoft Entra Global Secure Access (Internet Access) with a Remote Network and are trying to bring up a site‑to‑site IPsec (route‑based, IKEv2) tunnel from our in‑office Sophos firewall so branch Internet traffic goes through GSA but still…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Can you force GSA to use a POP within a country?
I'm trialing GSA Internet and located in Canada. I've noticed GSA will periodically change jump to a US based POP. This is causing problems for some Geo-restricted apps we use, and while I can exclude them from the forwarding policy I think it defeats…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
After enabling the TLS inspection policy, we are encountering blocks when accessing URLs via the GSA internet profile. The filtering policy named "GSA HTTP CONNECT method unsupported" is being triggered
We encountered errors while accessing internet-allowed URLs through the Internet Traffic Forwarding profile due to the GSA HTTP CONNECT method being unsupported by policy. This issue arose after enabling the TLS inspection policies.
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Don't have access to workbook area inside Entra Portal
Error while trying to gain access to the monitoring/workbook area of entra site after login. Error details Session ID 0bfae3ac9a334784946a8a1c9c449c07 Resource group name Subscription ID Resource ID Error code 401 Details Error loading your…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Lost Tenant Access
I tried logging in through these commands: az login --allow-no-subscriptions az account list --output table It still shows that my subscription is there and tenantId, but I can no longer login and see my resources in my azure Cloud. This happened…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Unable to add users to traffic forwarding profiles in GSA in MS Entra
In Entra > GSA > Traffic forwarding option, I don't have the option to add users or groups in any of the three profiles even though I have the Entra suite license available. It sasy ''temporary unavailable" in all 3 profiles.
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Incorrect Public IP Location on Microsoft Entra
Dear Microsoft Support, We have observed an incorrect location being displayed for one of our customer’s public IP addresses in Microsoft Entra. Details are below: IP Address: 146.88.51.155 Incorrect Location Displayed: Phuket, Thailand Correct Location:…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
incorrect location public ip on microsoft entra system.
my customer use microsoft entra for their security , but the system show their public ip in phuket province and it incorrect. IP Address: xxx.xxx.xx.xx Incorrect location: Phuket , Phuket TH Correct location: Samut Prakan , Phra Pradaeng TH Please help…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection
Sign in errors, private ipv6, and Global Secure Access
All of our users have Global Secure Access deployed and Entra Internet profile deployed. That profile tunnels all internet traffic through GSA. Recently, we've had some issues with a handful of our users signins violating a conditional Access Policy…
Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
Securing internet traffic from devices with identity-aware web filtering and threat protection