New Mechanics video posted yesterday:
It looks to me the video shows a not yet release version of the client.
The latest version I can download is 1.6.51 which looks differently and doesn't look like the app showed in the video!
You mention private DNS support and Kerberos SSO to file shares for Entra-ID only joined devices (not hybrid-joined) and the video clearly shows DNS (UDP) traffic to the DC. When was this released and how do you setup private DNS?
The documentation seems to be outdated: https://learn.microsoft.com/en-us/entra/global-secure-access/resource-faq#i-can-t-access-an-internal-resource-using-the-hostname-or-fqdn-when-ip-is-configured-in-quick-access-
Private DNS is currently not supported
My open questions
- where do I get release notes for the client?
- do different tenants get different client versions?
- I assume this because the download link includes a subscription ID: https://download.msappproxy.net/Subscription/GUID-GUID-GUID-GUID/Connector/GlobalSecureAccessClientInstaller
- What needs to be configured to use SSO, Kerberos and private DNS?
- FQDN to FileServer TCP port 445
- IP to DC/DNS UDP 53
- IP to DC/DNS TCP & UDP 88 for Kerberos
- right?
Thanks a lot and best regards.
Microsoft