GSA client exclamation mark, Forwarding policy dosen't exist in registry
Good day, Have difficult time getting Entra Private Access working. Entra portal --------------- GSA > Dashboard > Device Status says : 0 have the Global Secure Access Client installed: 0.0% The client pc is entra joined and is compliant, the client user has Entra ID Suite Trail license assigned. Traffic forwarding > Private access is enabled, have Quick Access application configured for SMB access. User and group assigments is set to a group where the user resides. Microsoft traffic profile and Internet access profile = disabled (as for now i just want to make the Private acces profile working) Enterprise applications = 1 active Connectors are online with status active. Client PC ------ Event log of client pc says the understated: Error occurred while requesting a new forwarding profile: The SSL connection could not be established, see inner exception.. Request Parameters: Microsoft Entra Device ID: 61ma02-9453-1277-98gz-hkdhksa3d0, Correlation vector: kdfhkshfkashdJ.0, APS URL: https://aps.globalsecureaccess.microsoft.com/api/v3/AgentSettings?os=Windows%2010&clientVersion=2.8.45.0. The client will continue working with the existing forwarding profile. GSA Advanced diagnostics: Username : empty Tenant ID : empty Forwarding profile ID: empty Client version 2.8.45.0 Health check = is green till Policy server is reachable, after that exclamation mark. https://aps.globalsecureaccess.microsoft.com/api/v3/AgentSettings?os=Windows%2010&clientVersion=2.8.45.0 if i try the above url in the browser then i get invalid request, this means that the client is able to reach the server, which means network or DNS issues are unlikely and the The SSL handshake is successful, and the certificate is valid. Need guidance as to understand why the client is not able to retreive profiles, i am using windows 11. Tried with disabling firewall too. Thanks!
App Proxy Pre-Authentication
Hi there, I just setup a NDES + SCEP on our infrastructure and all is working well so far but I was wondering If it is possible to allow only Entra Joined devices (intune managed) to it instead of Entra ID auth (user auth) or passthrough. I tried with conditionnal access policies with no luck so far. Thanks !Entra Private network Connector very slow compared to direct access using pass-through
I have a web based application with a backend SQL server attached to it. We have both internal and external users accessing it. Internal users go directly to the https website, while external users go through the application proxy. After logging in, and open a project which fires off a SQL query, there is a huge delay when going through the proxy that i cant figure out why. Internally looking up a project takes between 10-20 sec depending on the size of the project, while using the same method and same project through the proxy we are waiting 1-2 minutes for the same result. The old server is running in a DMZ sone, and i want to replace this with a app proxy based server, but being so slow I'm not able to move forward. Any ideas what to look for?
Entra Global Secure Access/ Internet Access
We have apps in Azure and AWS. These cloud apps are IP restricted. Staff can only access these apps if they're working in the office or connected to the office VPN (ie: traffic is proxy'd over the vpn and out through the office wan ip). Rather than VPN, could we use 'Entra Internet Access' to allow remote users access to these Azure/AWS cloud apps? Is that possible and if so, would we need to install the Global Secure Access connectors in Azure and AWS or is there some kind of shared egress IP we can use and whitelist in Azure/AWS?Microsoft Entra Application Proxy cannot access ressource
Hi, I'm having trouble accessing my RDS server via my proxy application. Configuration: 1x Server in Windows 2022 with all roles installed (Broker, GTW, etc...) I used the explanations provided by the following site : RDS AAD PROXY For my test phase, I used the Azure domain (msappproxy) and not a custom domain. Everything works until I launch my application via my HTML5 page. I get the following error: Before the error appears, I can see (not all the time) the following message: Then the main error occurs. On the firewall side, everything is open(Outside). My gateway rules have also been configured to let ports 3389 and 443 through (I had seen this possible solution in another forum). I also use a self-signed certificate that I created following the guide previously mentioned above. Do you have any idea what might be blocking? Thanks!
Global Secure Access bypass (Internet and web filtering)
Hi, I understand in Global Secure Access "365" I can use a Conditional Access Policy to block access to 365 if not from a "All Compliant Network locations" to prevent a user pausing the Client. But If I want to use Global Secure Access "Internet" and use the web filtering, how do I prevent a user pausing the client and bypassing the restriction. I assume this would be a Conditional access rule, but how would you prevent any/all Internet traffic bypassing the client on pause?
MS Teams error code CA50021
Hello everyone, I have a user who couldn't sign in to Teams, the issue was CAA50021, I've tried removing the device from Azure AD join and then rejoining the device and took time the device to join the azure again, I've also uninstalled Teams and reinstalled it and deleted the Windows login information, however the problem persists, does anyone have any other ideas on how to troubelshoot the problem? Could be related to conditional access? Thanks in Advanced
Azure Application Proxy - Add application segments gray out
We are try to add Azure Application Proxy - wildcard application as when add then Add application segments gray out and not allow to click to add function Internal Url : https://*.test.com External Url : https://*.test.com please help me how to configure to can Add application segments
