ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 23:49 UTC Customize Public modeDiscuss ChangeIntel on Discord

GSA coexistence with Netskope

Timelines and exceptions · All guidance changes

Global Secure Access · Official Microsoft guidanceObserved changes retained

Observed content change

33 new passages (about 590 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

May need admin actionCheck your firewall and proxy allow lists.

Endpoint wording
NewOverview
[added: Microsoft Entra Private Access and Microsoft Entra Microsoft Access with Netskope Internet Access]
NewOverview
[added: In the fifth scenario, Global Secure Access handles private application and Microsoft 365 traffic. Netskope only captures internet traffic.]
NewNetskope Location Profiles
[added: Note These IP addresses should match the Microsoft services whose traffic you want the Global Secure Access client to forward. Verify the addresses against the Microsoft traffic forwarding profile rules in the Microsoft Entra admin center.]
NewMicrosoft Entra Private Access and Microsoft Entra Microsoft Access with Netskope Internet Access
[added: In this scenario, Global Secure Access handles private application and Microsoft 365 traffic. Netskope only captures internet traffic.]
NewMicrosoft Entra Private Access and Microsoft Entra Microsoft Access configuration
[added: Enable the Microsoft Entra Private Access forwarding profile and the Microsoft Entra Microsoft Access forwarding profile.]
NewNetskope Internet Access configuration
[added: Configure the MSFT SSE Service and MSFT SSE M365 profiles, as described in Netskope Location Profiles, for use in the steering configuration.]
NewNetskope Internet Access configuration
[added: Set up a Netskope steering configuration to steer web traffic.]
NewNetskope Internet Access configuration
[added: Install the Netskope client for Windows or macOS.]
NewAdd a steering configuration for internet access
[added: Enter a Configuration Name, such as MSFTSSEWebTraffic.]
NewAdd a steering configuration for internet access
[added: Under Cloud, Web and Firewall, select Web Traffic.]
NewAdd a steering configuration for internet access
[added: Set Bypass exception traffic at to Client.]
NewAdd a steering configuration for internet access
[added: Under Private Apps, select None.]
NewAdd a steering configuration for internet access
[added: Under Borderless SD-WAN Apps, select None.]
NewAdd a steering configuration for internet access
[added: Select MSFT SSE Service and MSFT SSE M365.]
NewAdd a steering configuration for internet access
[added: Select Bypass, select the Treat it like local IP address checkbox, and then select Add.]
NewAdd a steering configuration for internet access
[added: Select New Exception > Domains and add these domain exceptions: *.globalsecureaccess.microsoft.com, *.auth.microsoft.com, *.msftidentity.com, *.msidentity.com, *.onmicrosoft.com, *.outlook.com, *.protection.outlook.com, *.sharepoint.com, *.sharepointonline.com, *.svc.ms, *.wns.windows.com, account.activedirectory.windowsazure.com, accounts.accesscontrol.windows.net, admin.onedrive.com, adminwebservice.microsoftonline.com, api.passwordreset.microsoftonline.com, autologon.microsoftazuread-sso.com, becws.microsoftonline.com, ccs.login.microsoftonline.com, clientconfig.microsoftonline-p.net, companymanager.microsoftonline.com, device.login.microsoftonline.com, g.live.com, graph.microsoft.com, graph.windows.net, login-us.microsoftonline.com, login.microsoft.com, login.microsoftonline-p.com, login.microsoftonline.com, login.windows.net, logincert.microsoftonline.com, loginex.microsoftonline.com, nexus.microsoftonline-p.com, officeclient.microsoft.com, oneclient.sfx.ms, outlook.cloud.microsoft, outlook.office.com, outlook.office365.com, passwordreset.microsoftonline.com, provisioningapi.microsoftonline.com, spoprod-a.akamaihd.net > Save.]
NewVerify configurations for clients
[added: Right-click Global Secure Access Client > Advanced Diagnostics > Forwarding Profile and verify that only Private Access and Microsoft 365 rules are applied to this client.]
NewVerify configurations for clients
[added: Navigate to Advanced Diagnostics > Health Check and verify that no checks fail.]
NewVerify configurations for clients
[added: Right-click Netskope Client > Configuration. Verify that Steering Configuration matches the name of the configuration you created. If not, select the Update link.Note To troubleshoot health check failures, see Troubleshoot the Global Secure Access client.]
NewTest traffic flow
[added: In a browser, access bing.com, salesforce.com, and yelp.com.]

Microsoft's wording from Microsoft source, © Microsoft Corporation, under MIT. ChangeIntel marks removed and added words, drops formatting and shortens long unchanged stretches.

Read the current Microsoft source · Link to this observation · Compare any two versions

Sections to inspect

Up to 12 section headings from retained before/after evidence. The current source may have changed again.

Why this was flagged

The changed words, with a few words around them, matched these rule categories: network endpoints. These matches identify subjects to assess; they do not establish a policy change or applicability.

Observation details · observed 22 Oct 23:53 UTC
Observed by ChangeIntel
22 Oct 23:53 UTC
Source update metadata
22 Oct 07:34 UTC
Microsoft's latest commit in that period
Number fifth Netskope coexistence scenario correctly · committed 22 Oct 05:23 UTC · View diff
First observed on this installation
6 Oct 16:26 UTC
Last successful check
25 Oct 00:15 UTC
Next check due
today 00:15 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

This is an earlier observation; review the latest in My radar.

Timeline

From the capture of 22 Oct 23:53 UTC · an earlier observation

Requirements, exceptions and scope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  2. Exception added Overviewseen by ChangeIntel
  3. Exception added Verify configurations for clientsseen by ChangeIntel
  4. Recommendation added Netskope Location Profilesseen by ChangeIntel
10 earlier changes
Observed history and review priority

Captured 22 Oct 23:53 UTC; extracted 22 Oct 23:53 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 24

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read 25 Oct 00:15 UTC.

  1. Number fifth Netskope coexistence scenario correctly Served on LearnView diff
  2. Add Netskope coexistence scenario for Private and Microsoft Access View diff
  3. Remove non-breaking space (NBSP, U+00A0) characters across 13 files View diff
  4. AI readiness: add Overview heading to GSA articles (batch 4) View diff
  5. Editorial pass: GSA remaining 35 articles - compliance audit View diff
  6. Fixes broken links with high confidence replacements. View diff
  7. Removed macOS limitations for Netskope View diff
  8. Refactor section headers in Netskope coexistence guide View diff
  9. Update date and format in Netskope coexistence guide View diff
  10. Update how-to-netskope-coexistence.md View diff
  11. Update how-to-netskope-coexistence.md View diff
  12. Update how-to-netskope-coexistence.md View diff
  13. Update how-to-netskope-coexistence.md View diff
  14. Update how-to-netskope-coexistence.md View diff
  15. Update how-to-netskope-coexistence.md View diff
  16. Update how-to-netskope-coexistence.md View diff
  17. Update docs/global-secure-access/how-to-netskope-coexistence.md View diff
  18. Update docs/global-secure-access/how-to-netskope-coexistence.md View diff
  19. Update docs/global-secure-access/how-to-netskope-coexistence.md View diff
  20. Update docs/global-secure-access/how-to-netskope-coexistence.md View diff
2 metadata-only edits · author, dates or topic labels, no article text
  1. [BULK UPDATE] Moves metadata to folder level in docfx.json. Metadata onlyView diff
  2. Add ms.service metadata to Netskope coexistence doc Metadata onlyView diff

Retained observations

  • 24 Oct 00:08 UTC

    Source metadata changed; retained article content is unchanged.

  • 22 Oct 23:53 UTC · shown above
  • 18 Oct 23:18 UTC

    The page title or its body outside the tracked passages changed. Review the source for its effect.

  • 6 Oct 16:26 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026
  1. 22 Oct 2026 · 23:54:54 UTC SummaryMicrosoft's guidance publishes no dates; 9 sections of requirements, exceptions or scope. → Microsoft's guidance publishes no dates; 11 sections of requirements, exceptions or scope.
  2. 18 Oct 2026 · 23:20:08 UTC SummaryGuidance extraction is incomplete. Legacy capture: table structure or oversized sections are unavailable for extraction Earlier recorded facts remain historical evidence; omitted statements have unknown status. → Microsoft's guidance publishes no dates; 9 sections of requirements, exceptions or scope.

The most recent 100 field changes are listed. Complete recorded revisions are kept separately.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 25 Oct 23:49 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.