Microsoft Entra Global Secure Access

Global Secure Access (GSA) is Microsoft's Security Service Edge (SSE) platform delivered through the Entra control plane. It has two products that share one client, one policy surface, and one identity model:

• Entra Internet Access — secure web gateway (SWG) for internet and Microsoft 365 traffic with Conditional Access applied to network flows.
• Entra Private Access — ZTNA replacement for traditional VPN, fronting on-prem and IaaS apps through Entra-authenticated connectors (evolution of Entra App Proxy).

When to use

Replacing VPN with ZTNA, applying Conditional Access to outbound internet traffic, restoring source IP for M365 sign-ins from the GSA client, or providing remote-worker access to TCP/UDP apps that aren't HTTPS.

Do not use this skill for generic CA policy authoring (conditional-access-mfa), hybrid network design (azure-network-security-design), or competing SSE products.