GSA points of presence and IP addresses
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 2fa3783 · +1 −1 lines · also on GitHub
⋯ 92 unchanged lines
9393
The Global Secure Access service is accessed from the Global Secure Access client and is used for Microsoft Entra Internet Access (including Microsoft 365) and Microsoft Entra Private Access traffic. The Internet Protocol (IP) addresses are listed.
9494
9595
### FQDN and IP addresses where the Global Secure Access service receives traffic
96
−Add Anycast IP ranges for accessing the Global Secure Access service edge to your enterprise Access Control Lists (ACLs) and firewalls. When operating in a side-by-side model with other Security Service Edge (SSE) clients, add the Anycast IP ranges to these other clients.
96
+Add Anycast IP ranges for accessing the Global Secure Access service edge to your enterprise Access Control Lists (ACLs) and firewalls. When operating in a side-by-side model with other Security Service Edge (SSE) clients, add the Anycast IP ranges to these other clients. If you are using TLS inspection on your egress firewalls, exclude GSA traffic from TLS inspection.
9797
9898
The Global Secure Access service receives traffic on these FQDNs and IP addresses:
9999
- `*.globalsecureaccess.microsoft.com`
⋯ 13 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 02:30 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.