GSA remote network connectivity
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 5661489 · +6 −2 lines · also on GitHub
⋯ 4 unchanged lines
55
ms.author: kenwith
66
manager: dougeby
77
ms.topic: concept-article
8
−ms.date: 05/09/2025
8
+ms.date: 08/22/2025
99
ms.service: global-secure-access
1010
ai-usage: ai-assisted
1111
---
⋯ 18 unchanged lines
3030
3131
**Evolving threats** – Malicious actors are finding new avenues to attack the devices at the edge of networks. Edge devices in branch offices or even home offices are often the most vulnerable point of attack.
3232
33
+> [!TIP]
34
+> For guidance on enhancing the resilience of remote networks, see [Best practices for Global Secure Access remote network resilience](remote-network-resilience.md).
35
+
3336
## How does Global Secure Access remote network connectivity work?
3437
3538
To connect a remote network to Global Secure Access, you set up an Internet Protocol Security (IPSec) tunnel between your on-premises equipment and the Global Secure Access endpoint. Traffic that you specify is routed through the IPSec tunnel to the nearest Global Secure Access endpoint. You can apply security policies in the Microsoft Entra admin center.
⋯ 17 unchanged lines
5356
5457
### How much bandwidth will be allocated per tenant
5558
56
−The total bandwidth you are allocated is determined by the number of licenses purchased. Each Microsoft Entra ID P1 license, Microsoft Entra Internet Access license, or Microsoft Entra Suite license contributes to your total bandwidth. Bandwidth for remote networks can be assigned to IPsec tunnels in increments of 250 Mbps, 500 Mbps, 750 Mbps, or 1000 Mbps. This flexibility allows you to allocate bandwidth to different remote network locations according to your specific needs. For optimal performance, Microsoft recommends configuring at least two IPsec tunnels per location for high availability. The table below details the total bandwidth based on the number of licenses purchased.
59
+The total bandwidth you're allocated is determined by the number of licenses purchased. Each Microsoft Entra ID P1 license, Microsoft Entra Internet Access license, or Microsoft Entra Suite license contributes to your total bandwidth. Bandwidth for remote networks can be assigned to IPsec tunnels in increments of 250 Mbps, 500 Mbps, 750 Mbps, or 1000 Mbps. This flexibility allows you to allocate bandwidth to different remote network locations according to your specific needs. For optimal performance, Microsoft recommends configuring at least two IPsec tunnels per location for high availability. The table below details the total bandwidth based on the number of licenses purchased.
5760
5861
#### Initial bandwidth allocation
5962
⋯ 96 unchanged lines
156159
## Next steps
157160
- [List all remote networks](how-to-list-remote-networks.md)
158161
- [Manage remote networks](how-to-manage-remote-networks.md)
162
+- [Best practices for Global Secure Access remote network resilience](remote-network-resilience.md)
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:20 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.