GSA coexistence with Zscaler
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit cf2ce05 · +3 −3 lines · also on GitHub
⋯ 5 unchanged lines
66
ms.author: kenwith
77
manager: dougeby
88
ms.topic: how-to
9
−ms.date: 04/30/2025
9
+ms.date: 10/07/2025
1010
ms.service: global-secure-access
1111
ms.subservice: entra-private-access
1212
ms.reviewer: shkhalid
⋯ 10 unchanged lines
2323
2424
This guide outlines how to configure and deploy Microsoft Entra solutions alongside Zscaler's Security Service Edge (SSE) offerings. By using the strengths of both platforms, you can optimize your organization's security posture while maintaining high-performance connectivity for private applications, Microsoft 365 traffic, and internet access.
2525
26
−1. **Microsoft Entra Private Access with Zscaler Internet Access**
26
+1. [**Microsoft Entra Private Access with Zscaler Internet Access**](microsoft-entra-private-access-with-zscaler-internet-access)
2727
2828
In this scenario, Global Secure Access handles private application traffic. Zscaler only captures Internet traffic. Therefore, the Zscaler Private Access module is disabled from the Zscaler portal.
2929
⋯ 46 unchanged lines
7676
`<tenantid>.private-backup.client.globalsecureaccess.microsoft.com`, `<tenantid>.internet-backup.client.globalsecureaccess.microsoft.com`, `<tenantid>.m365-backup.client.globalsecureaccess.microsoft.com`, `<tenantid>.auth-backup.client.globalsecureaccess.microsoft.com`.
7777
- Install and configure Zscaler Client Connector software.
7878
79
−## Configuration 1: Microsoft Entra Private Access with Zscaler Internet Access
79
+## Microsoft Entra Private Access with Zscaler Internet Access
8080
8181
In this scenario, Microsoft Entra Private Access handles private application traffic, while Zscaler Internet Access manages Internet traffic. The Zscaler Private Access module is disabled in the Zscaler portal. To configure Microsoft Entra Private Access, you need to complete several steps. First, enable the forwarding profile. Next, install the Private Network Connector. After that, set up Quick Access and configure Private DNS. Finally, install the Global Secure Access client. For Zscaler Internet Access, the configuration involves creating a forwarding profile and app profile, adding bypass rules for Microsoft Entra services, and installing the Zscaler Client Connector. Finally, the configurations are verified, and traffic flow are tested to ensure proper handling of private and Internet traffic by the respective solutions.
8282
⋯ 237 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 04:32 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.