Coexistence with Cisco Secure Access
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 183b3c8 · +0 −16 lines · also on GitHub
⋯ 168 unchanged lines
169169
6. Validate the SMB file share traffic is captured in Global Secure Access logs and isn't shown in Cisco logs.
170170
7. Stop collecting traffic and confirm correct traffic handling.
171171
172
−---
173
−
174172
### 2. Microsoft Entra Private Access with Cisco Secure Internet Access and Cisco Secure Private Access
175173
176
−
177174
**Global Secure Access configuration**
178175
179176
1. Enable Private Access forwarding profile.
⋯ 21 unchanged lines
201198
8. Validate the RDP traffic is captured in Cisco logs and isn't shown in Global Secure Access logs.
202199
9. Stop collecting traffic and confirm correct traffic handling.
203200
204
− ---
205
−
206201
207202
### 3. Microsoft Entra Microsoft Access with Cisco Secure Internet Access and Cisco Secure Private Access
208203
209
−
210
−
211
−
212204
**Global Secure Access configuration**
213205
214206
1. Enable Microsoft Access forwarding profile.
⋯ 19 unchanged lines
234226
8. Validate traffic logs in both portals.
235227
9. Stop collecting traffic and confirm Global Secure Access only captured Microsoft traffic.
236228
237
−---
238
−
239229
### 4. Microsoft Entra Internet Access and Microsoft Access with Cisco Secure Private Access
240230
241
−
242
−
243
−
244231
**Global Secure Access configuration**
245232
246233
1. Enable Internet Access and Microsoft Access forwarding profiles.
247234
1. Install and configure the Global Secure Access client for Windows or macOS.
248235
1. Add a custom bypass for Cisco Secure Access: `*.zpc.sse.cisco.com`.
249236
250
−
251237
**Cisco Secure Access configuration**
252238
253239
1. Configure required destinations to bypass Internet Security, including other Microsoft IPs and FQDNs. For instructions, see [Bypass Global Secure Access IPs and FQDNs in Cisco Secure Access / Umbrella](#bypass-global-secure-access-ips-and-fqdns-in-cisco-secure-accessumbrella) and select the tab for **Cisco Secure Access portal** or **Umbrella portal**.
⋯ 15 unchanged lines
269255
6. Validate traffic logs in both portals.
270256
7. Stop collecting traffic and confirm Global Secure Access **didn't** handle private application traffic.
271257
272
−
273
−---
274258
> [!NOTE]
275259
> For troubleshooting health check failures, see [Troubleshoot the Global Secure Access client: Health check](troubleshoot-global-secure-access-client-diagnostics-health-check.md).
276260
⋯ 3 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:50 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.