GSA coexistence with Zscaler
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 62935fd · +8 −8 lines · also on GitHub
⋯ 31 unchanged lines
3232
In this scenario, both clients handle traffic for separate private applications. Global Secure Access handles private applications in Microsoft Entra Private Access. Private applications in Zscaler use the Zscaler Private Access module. Zscaler Internet Access handles Internet traffic.
3333
3434
35
−3. **Microsoft Entra Microsoft Access with Zscaler Private Access and Zscaler Internet Access**
35
+3. [**Microsoft Entra Microsoft Access with Zscaler Private Access and Zscaler Internet Access**](#microsoft-entra-microsoft-access-with-zscaler-private-access-and-zscaler-internet-access)
3636
3737
In this scenario, Global Secure Access handles all Microsoft 365 traffic. Zscaler Private Access handles Private application traffic and Zscaler Internet Access handles Internet traffic.
3838
39
−4. **Microsoft Entra Internet Access and Microsoft Entra Microsoft Access with Zscaler Private Access**
39
+4. [**Microsoft Entra Internet Access and Microsoft Entra Microsoft Access with Zscaler Private Access**](#microsoft-entra-internet-access-and-microsoft-entra-microsoft-access-and-with-zscaler-private-access)
4040
4141
In this scenario, Global Secure Access handles Internet and Microsoft 365 traffic. Zscaler only captures Private application traffic. Therefore, the Zscaler Internet Access module is disabled from the Zscaler portal.
4242
⋯ 153 unchanged lines
196196
1. In the system tray, right-click **Global Secure Access Client** and then select **Advanced Diagnostics**. In the **Traffic** dialog box, select **Stop collecting**.
197197
1. Scroll to confirm the Global Secure Access client handled private application traffic for the SMB file share and didn't handle the RDP session traffic.
198198
199
−## Configuration 3: Microsoft Entra Microsoft Access with Zscaler Private Access and Zscaler Internet Access
199
+## Microsoft Entra Microsoft Access with Zscaler Private Access and Zscaler Internet Access
200200
201201
In this scenario, Global Secure Access handles all Microsoft 365 traffic. Zscaler Private Access handles Private application traffic and Zscaler Internet Access handles Internet traffic.
202202
203
−### Microsoft Entra Microsoft Access configuration 3
203
+### Microsoft Entra Microsoft Access
204204
205205
For this scenario, you need to:
206206
- [Enable Microsoft Entra Microsoft Access forwarding profile](https://github.com/MicrosoftDocs/entra-docs/blob/main/docs/global-secure-access/how-to-manage-microsoft-profile.md#enable-the-microsoft-traffic-profile).
207207
- Install and configure the [Global Secure Access client for Windows](how-to-install-windows-client.md) or [macOS](how-to-install-macos-client.md).
208208
209
−### Zscaler Private Access and Zscaler Internet Access configuration 3
209
+### Zscaler Private Access and Zscaler Internet Access
210210
211211
Perform in the Zscaler portal:
212212
- Set up and configure Zscaler Private Access.
⋯ 44 unchanged lines
257257
1. You can also validate that the traffic is captured in the Global Secure Access traffic logs. In the Microsoft Entra admin center, navigate to **Global Secure Access** > **Monitor** > **Traffic logs**.
258258
1. Validate traffic related to Outlook Online and SharePoint Online is missing from Zscaler Internet Access logs in **Analytics** > **Web Insights** > **Logs**.
259259
260
−## Configuration 4: Microsoft Entra Internet Access and Microsoft Entra Microsoft Access and with Zscaler Private Access
260
+## Microsoft Entra Internet Access and Microsoft Entra Microsoft Access and with Zscaler Private Access
261261
262262
In this scenario, Global Secure Access handles Internet and Microsoft 365 traffic. Zscaler only captures private application traffic. Therefore, the Zscaler Internet Access module is disabled from the Zscaler portal.
263263
264
−### Microsoft Entra Internet and Microsoft Access configuration 4
264
+### Microsoft Entra Internet and Microsoft Access
265265
266266
For this scenario, you need to configure:
267267
- [Enable Microsoft Entra Microsoft Access forwarding profile](https://github.com/MicrosoftDocs/entra-docs/blob/main/docs/global-secure-access/how-to-manage-microsoft-profile.md#enable-the-microsoft-traffic-profile) and [Microsoft Entra Internet Access forwarding profile](https://github.com/MicrosoftDocs/entra-docs/blob/main/docs/global-secure-access/how-to-manage-internet-access-profile.md#prerequisites).
⋯ 6 unchanged lines
274274
1. Leave destination type `FQDN` and in **Destination** enter `*.prod.zpath.net`.
275275
1. Select **Save**.
276276
277
−### Zscaler Private Access configuration 4
277
+### Zscaler Private Access
278278
279279
Perform the procedure in the Zscaler portal:
280280
- Set up and configure Zscaler Private Access.
⋯ 39 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 04:32 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.