GSA coexistence with Zscaler
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 842b22c · +10 −3 lines · also on GitHub
⋯ 258 unchanged lines
259259
260260
#### Test traffic flow
261261
262
−Test traffic flow:
262
+##### Verify internet traffic routes through Zscaler
263
+
263264
1. In the system tray, right-click **Global Secure Access Client** and then select **Advanced Diagnostics**. Select the **Traffic** tab and select **Start collecting**.
264265
1. Access these websites from the browser: `bing.com`, `salesforce.com`, `Instagram.com`.
265266
1. In the system tray, right-click **Global Secure Access Client** and select **Advanced Diagnostics** > **Traffic** tab.
⋯ 1 unchanged line
267268
1. Sign in to Microsoft Entra admin center and browse to **Global Secure Access** > **Monitor** > **Traffic logs**. Validate traffic related to these sites is missing from the Global Secure Access traffic logs.
268269
1. Sign in to Zscaler Internet Access (ZIA) admin portal and browse to **Analytics** > **Web Insights** > **Logs**.
269270
1. Validate traffic related to these sites is present in Zscaler logs.
271
+
272
+##### Verify private application traffic routes through Zscaler
273
+
270274
1. Access your private application set up in Zscaler Private Access. For example, open an RDP session to a private server.
271275
1. Sign in to Microsoft Entra admin center and browse to **Global Secure Access** > **Monitor** > **Traffic logs**.
272
−1. Validate traffic related to the RDP session **isn’t** in the Global Secure Access traffic logs
276
+1. Validate traffic related to the RDP session **isn’t** in the Global Secure Access traffic logs.
273277
1. Sign in to Zscaler Private Access (ZPA) admin portal and browse to **Analytics** > **Diagnostics** > **Logs**. Validate traffic related to the RDP session is present in the Dashboard or Diagnostic logs.
274
−1. Access Outlook Online (`outlook.com`, `outlook.office.com`, `outlook.office365.com`), SharePoint Online (`<yourtenantdomain>.sharepoint.com`).
278
+
279
+##### Verify Microsoft 365 traffic routes through Global Secure Access
280
+
281
+1. Access Outlook Online (`outlook.com`, `outlook.office.com`, `outlook.office365.com`), SharePoint Online (`<yourtenantdomain>.sharepoint.com`).
275282
1. In the system tray, right-click **Global Secure Access Client** and then select **Advanced Diagnostics**. In the **Traffic** dialog box, select **Stop collecting**.
276283
1. Scroll to confirm the Global Secure Access client handled only Microsoft 365 traffic.
277284
1. You can also validate that the traffic is captured in the Global Secure Access traffic logs. In the Microsoft Entra admin center, navigate to **Global Secure Access** > **Monitor** > **Traffic logs**.
⋯ 70 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 04:32 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.