Event banner
Event details
106 Comments
Can private access override a firewall policy?
- Jeevan_Bisht
Microsoft
All connections are outbound, and our services is designed to not have admins to make any changes to the firewall rules. Thanks for participating in today's AMA: Microsoft Entra Internet Access and Microsoft Entra Private Access! For reference, the panel covered this topic at around 37:00.
- Can I use the same application proxy connector for both web and non-web applications?
Thanks for participating in today's AMA: Microsoft Entra Internet Access and Microsoft Entra Private Access! For reference, the panel covered this topic at around 43:00.
- Ian_ParramoreYes, as long as you're using a Connector version that supports Private Access you use this for both Application Proxy and Private Access.
- Excellent. Thanks, Ian!
- Can I access IPv6 resources over the tunnel? And is the global SSE available via IPv6?
tdetznerIPv6 support is part of our roadmap plan. We will share more as we progress.- Thanks, Thomas. I look forward to hearing more in the future. 🙂
- Does the agent create a single DTLS tunnel, or they are micro tunnels created for each session?
- We use gRPC (not DTLS) for client tunnels and are looking to support UDP as a transport for gRPC in the future. Client tunnels are multi-dimensional for best resiliency. We run multiple micro tunnels to multiple edge rings to provide maximum protection against failures at an individual tunnel level as well as the broader environment/platform level to our enterprise customers.
- why gRPC? , doesn't it have a larger processing overhead
- tdetznerThe client will create dedicated tunnels to the respective endpoints (M365, Private, Internet) and inside those tunnels it will create channels to tunnel the payload traffic
- Does the GSA client use DTLS? Or standard TLS?
- Does client DNS resolution work over Private Internet Access? For example, an SMB mapped drive connection that points to an internal hostname/FQDN?
Thanks for participating in today's AMA: Microsoft Entra Internet Access and Microsoft Entra Private Access! For reference, the panel covered this topic at around 50:00.
- Jeevan_BishtIt's not part of the current public preview, but it being worked today and planned as part of the General Availability.
- Coming up with a unified client for Defender for Endpoint + Global Access will be game changer ! Any rough ETA when it will be in preview mode ?
- Ian_ParramoreNo timeline we're able to share at this point.
- Is it safe to use in production while in preview?
Thanks for participating in today's AMA: Microsoft Entra Internet Access and Microsoft Entra Private Access! For reference, the panel covered this topic at around 30:00.
- Jeevan_BishtWe document what is means to be in preview https://azure.microsoft.com/en-us/support/legal/preview-supplemental-terms/
- This may be more of a business decision re risk appetite.
- Is the Private Access solution going to be FIPS 140-2 compliant?
Thanks for participating in today's AMA: Microsoft Entra Internet Access and Microsoft Entra Private Access! For reference, the panel covered this topic at around 25:00.
- Jeevan_Bisht
In general, all standards for Microsoft services will be applicable at General Availability.
- If we're trying the public preview items and have issues (we couldn't get the agent to connect properly), where should we go to report issues/find troubleshooting or support suggestions?
- Gustavo_MaulerTo chat with our support engineers, please submit a ticket https://aka.ms/AzureSupport
Thanks for participating in today's AMA: Microsoft Entra Internet Access and Microsoft Entra Private Access! For reference, the panel covered this topic at around 32:00.
- Jeevan_BishtYou should be able to use our standard support process to help you get unblocked and provide feedback.
- Will one make it easier to connect to a linux-only azure environment? Competitors only deploy proxy connectors on Linux vm or lighter
- tdetznerLinux support is part of our roadmap plan and we plan to provide a client for Linux. We will share more as we progress.
- Ian_ParramoreWe will also continue to evaluate the platform requirements for Private Access and Application Proxy connectors.
