GSA Windows client health check
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit e9cefb9 · +2 −2 lines · also on GitHub
⋯ 2 unchanged lines
33
description: Troubleshoot the Global Secure Access client using the Health check tab in the Advanced diagnostics utility.
44
ms.service: global-secure-access
55
ms.topic: troubleshooting
6
−ms.date: 08/13/2024
6
+ms.date: 08/16/2024
77
ms.author: jayrusso
88
author: HULKsmashGithub
99
manager: amycolannino
⋯ 260 unchanged lines
270270
This test checks whether the proxy is configured on the device. If the end-user device is configured to use a proxy for outgoing traffic to the internet, you must exclude the destination IPs/FQDNs acquired by the client with a Proxy Auto-Configuration (PAC) file or with the Web Proxy Auto-Discovery (WPAD) protocol.
271271
272272
#### Change the PAC file
273
−Add the FQDNs/IPs to be tunneled to Global Secure Access edge as exclusions in the PAC file, so that HTTP requests for these destinations won’t be redirected to the proxy. (These FQDNs/IPs are also set to be tunneled to Global Secure Access in the forwarding profile.)
273
+Add the IPs/FQDNs to be tunneled to Global Secure Access edge as exclusions in the PAC file, so that HTTP requests for these destinations won't redirect to the proxy. (These IPs/FQDNs are also set to tunnel to Global Secure Access in the forwarding profile.)
274274
To show the client's health status properly, add the FQDN used for health probing to the exclusions list: `.edgediagnostic.globalsecureaccess.microsoft.com`.
275275
276276
Example PAC file containing exclusions:
⋯ 65 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:46 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.