GSA remote network connectivity
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 930dceb · +16 −1 lines · also on GitHub
⋯ 1 unchanged line
22
title: Global Secure Access remote network connectivity
33
description: Learn how remote network connectivity in Global Secure Access allows users to connect to your corporate network from a remote location, such as a branch office.
44
ms.topic: concept-article
5
−ms.date: 09/02/2025
5
+ms.date: 02/21/2026
66
ai-usage: ai-assisted
77
---
88
⋯ 26 unchanged lines
3535
3636
Global Secure Access remote network connectivity provides a secure solution between a remote network and the Global Secure Access service. It doesn't provide a secure connection between one remote network and another.
3737
To learn more about secure remote network-to-remote network connectivity, see the [Azure Virtual WAN documentation](/azure/virtual-wan/).
38
+
39
+## Supported traffic forwarding profiles
40
+
41
+Remote networks don't support all the same traffic forwarding profiles as the Global Secure Access client. The following table summarizes which connectivity methods support each profile:
42
+
43
+| Traffic forwarding profile | Global Secure Access client | Remote network |
44
+|---|---|---|
45
+| **Microsoft traffic** | ✅ Supported | ✅ Supported |
46
+| **Internet Access** | ✅ Supported | ❌ Not supported as a traffic forwarding profile |
47
+| **Private Access** | ✅ Supported | ❌ Not supported |
48
+
49
+> [!IMPORTANT]
50
+> Only the **Microsoft traffic** forwarding profile can be assigned to remote networks. **Private Access** and **Internet Access** traffic forwarding profiles require the Global Secure Access client installed on end-user devices. For more information, see [Understand traffic forwarding profiles](concept-traffic-forwarding.md).
51
+
52
+Although the Internet Access traffic forwarding profile is client-only, you can still apply Internet Access security policies (such as web content filtering) to remote network traffic. Use the [baseline security profile](how-to-apply-security-policies-remote-network.md) to enforce these policies at the tenant level for all traffic routed through Global Secure Access, including remote network traffic. User-aware Conditional Access policies for Internet Access require the Global Secure Access client.
3853
3954
## Why remote network connectivity is important for you?
4055
Maintaining security of a corporate network is increasingly difficult in a world of remote work and distributed teams. Security Service Edge (SSE) promises a world of security where customers can access their corporate resources from anywhere in the world without needing to back haul their traffic to headquarters.
⋯ 118 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:20 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.