ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

Coexistence with Cisco Secure Access

This page's changes and edits · All guidance changes

Microsoft's edit ·

AI readiness: fix structure violations in Cisco coexistence articles

Microsoft's commit message in MicrosoftDocs/entra-docs · commit ebe30a2 · +15 −15 lines · also on GitHub

11 ---
22 title: Security Service Edge (SSE) Coexistence With Microsoft and Cisco Secure Access
3 −description: Microsoft and Cisco’s Secure Access coexistence solution guide.
3 +description: "Configure Microsoft Global Secure Access and Cisco Secure Access for unified SASE capabilities. Covers deployment steps, FQDN and IP bypasses, and client configuration."
44 ms.topic: how-to
5 −ms.date: 03/13/2026
5 +ms.date: 03/18/2026
66 ms.subservice: entra-private-access
77 ms.reviewer: shkhalid
88 ai-usage: ai-assisted
⋯ 7 unchanged lines
1616
1717 This guide outlines how to configure and deploy Global Secure Access solutions alongside Cisco Secure Access SSE offerings. By using both platforms, you can optimize your organization's security posture while maintaining high-performance connectivity for private applications, Microsoft 365 traffic, and internet access.
1818
19 −## Scenarios
19 +## Supported coexistence scenarios
2020
2121 This guide covers the following coexistence scenarios:
2222
⋯ 94 unchanged lines
117117
118118 ### 1. Microsoft Entra Private Access with Cisco Secure Internet Access
119119
120 −**Global Secure Access configuration**
120 +#### Configure Global Secure Access
121121
122122 1. Enable Private Access forwarding profile.
123123 1. Install a private network connector.
124124 1. Configure Quick Access and private DNS.
125125 1. Install and configure the Global Secure Access client for Windows or macOS.
126126
127 −**Cisco Secure Access configuration**
127 +#### Configure Cisco Secure Access
128128
129129 1. Configure required destinations to bypass Internet Security. For instructions, see [Bypass Global Secure Access IPs and FQDNs in Cisco Secure Access / Umbrella](#bypass-global-secure-access-ips-and-fqdns-in-cisco-secure-accessumbrella) and select the tab for **Cisco Secure Access portal** or **Umbrella portal**.
130130 1. Deploy and configure Cisco Secure Client with Umbrella module.
131131
132 −**Validation**
132 +#### Validate the configuration
133133 1. Ensure both clients are enabled and the Umbrella profile is `Active`.
134134 1. To verify rules are applied and health checks pass, use Advanced Diagnostics in the Global Secure Access client.
135135 1. Test traffic flow by accessing various sites and validating traffic logs in both platforms.
⋯ 7 unchanged lines
143143
144144 ### 2. Microsoft Entra Private Access with Cisco Secure Internet Access and Cisco Secure Private Access
145145
146 −**Global Secure Access configuration**
146 +#### Configure Global Secure Access
147147
148148 1. Enable Private Access forwarding profile.
149149 1. Install a private network connector.
150150 1. Configure Quick Access and private DNS.
151151 1. Install and configure the Global Secure Access client for Windows or macOS.
152152
153 −**Cisco Secure Access configuration**
153 +#### Configure Cisco Secure Access
154154
155155 1. Configure required destinations to bypass Internet Security. For instructions, see [Bypass Global Secure Access IPs and FQDNs in Cisco Secure Access / Umbrella](#bypass-global-secure-access-ips-and-fqdns-in-cisco-secure-accessumbrella) and select the tab for **Cisco Secure Access portal** or **Umbrella portal**.
156156 1. Deploy and configure Cisco Secure Client with Zero Trust Access and Umbrella modules.
157157 1. Add private resources and create access policies.
158158
159 −**Validation**
159 +#### Validate the configuration
160160 1. Ensure both clients are enabled and the Umbrella profile is `Active`.
161161 1. To verify rules are applied and health checks pass, use Advanced Diagnostics in the Global Secure Access client.
162162 1. Test traffic flow by accessing various sites and validating traffic logs in both platforms.
⋯ 9 unchanged lines
172172
173173 ### 3. Microsoft Entra Microsoft Access with Cisco Secure Internet Access and Cisco Secure Private Access
174174
175 −**Global Secure Access configuration**
175 +#### Configure Global Secure Access
176176
177177 1. Enable Microsoft Access forwarding profile.
178178 1. Install and configure the Global Secure Access client for Windows or macOS.
179179
180 −**Cisco Secure Access configuration**
180 +#### Configure Cisco Secure Access
181181
182182 1. Configure required destinations to bypass Internet Security, including other Microsoft IPs and FQDNs. For instructions, see [Bypass Global Secure Access IPs and FQDNs in Cisco Secure Access / Umbrella](#bypass-global-secure-access-ips-and-fqdns-in-cisco-secure-accessumbrella) and select the tab for **Cisco Secure Access portal** or **Umbrella portal**.
183183 1. Deploy and configure Cisco Secure Client with Zero Trust Access and Umbrella modules.
184184 1. Add private resources and access policies.
185185
186 −**Validation**
186 +#### Validate the configuration
187187 1. Ensure both clients are enabled and the Umbrella profile is `Active`.
188188 1. To verify rules are applied and health checks pass, use Advanced Diagnostics in the Global Secure Access client.
189189 1. Test traffic flow by accessing various sites and validating traffic logs in both platforms.
⋯ 9 unchanged lines
199199
200200 ### 4. Microsoft Entra Internet Access and Microsoft Access with Cisco Secure Private Access
201201
202 −**Global Secure Access configuration**
202 +#### Configure Global Secure Access
203203
204204 1. Enable Internet Access and Microsoft Access forwarding profiles.
205205 1. Install and configure the Global Secure Access client for Windows or macOS.
206206 1. Add a custom bypass for Cisco Secure Access: `*.zpc.sse.cisco.com`.
207207
208 −**Cisco Secure Access configuration**
208 +#### Configure Cisco Secure Access
209209
210210 1. Configure required destinations to bypass Internet Security, including other Microsoft IPs and FQDNs. For instructions, see [Bypass Global Secure Access IPs and FQDNs in Cisco Secure Access / Umbrella](#bypass-global-secure-access-ips-and-fqdns-in-cisco-secure-accessumbrella) and select the tab for **Cisco Secure Access portal** or **Umbrella portal**.
211211 1. Deploy and configure Cisco Secure Client with Zero Trust Access module.
⋯ 2 unchanged lines
214214 > [!NOTE]
215215 > For this scenario, Cisco Secure Access only handles private traffic. The Umbrella module is not installed.
216216
217 −**Validation**
217 +#### Validate the configuration
218218 1. Ensure both clients are enabled.
219219 1. To verify rules are applied and health checks pass, use Advanced Diagnostics in the Global Secure Access client.
220220 1. Test traffic flow by accessing various sites and validating traffic logs in both platforms.
⋯ 14 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:50 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.