GSA known limitations
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit ec162af · +5 −1 lines · also on GitHub
⋯ 4 unchanged lines
55
author: HULKsmashGithub
66
ms.topic: reference
77
ms.author: jayrusso
8
−ms.date: 04/15/2026
8
+ms.date: 05/29/2026
99
ms.custom: agent-id-ignite
1010
1111
⋯ 251 unchanged lines
263263
- The Global Secure Access client doesn't support IPv6. The client tunnels only IPv4 traffic and transfers IPv6 traffic directly to the network. To make sure that all traffic routes to Global Secure Access, set the network adapter properties to [IPv4 preferred](troubleshoot-global-secure-access-client-diagnostics-health-check.md#ipv4-preferred).
264264
- UDP isn't supported on this platform yet.
265265
- Traffic available for acquisition in the Microsoft traffic profile isn't available for acquisition in the Internet Access traffic profile.
266
+- Source traffic type filtering (preview) is supported only for client-based Global Secure Access connections. Remote networks don't support source traffic type rules.
267
+- HTTP method request filtering (preview) enforcement requires TLS inspection for HTTPS traffic. Without TLS inspection, HTTP method headers aren't visible, and only Server Name Indication (SNI)-based web content filtering rules apply.
268
+- When the Global Secure Access client can't determine task or processor information, source traffic type is classified as **Unknown**.
269
+- Source traffic type classification accuracy depends on the Global Secure Access client's ability to inspect process metadata on the endpoint device.
266270
267271
## B2B guest access (preview) limitations
268272
<a name="b2b-guest-access-limitations"></a>
⋯ 20 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 22:20 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.