Private Access sensor release history
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 3977e05 · +34 −0 lines · also on GitHub
⋯ 19 unchanged lines
2020
1. Browse to **Global Secure Access** > **Connect** > **Connectors and sensors** > **Private access sensors**.
2121
1. Select **Download private access sensor**.
2222
23
+## Version 2.2.79
24
+
25
+Released for download on September 29, 2026.
26
+
27
+### Over-the-air automatic updates
28
+
29
+- Adds automatic downloads and installation of future sensor updates.
30
+
31
+> [!NOTE]
32
+> Upgrading from version 2.2.42 requires a one-time installation of the full sensor installer from the Microsoft Entra admin center to enable OTA updates.
33
+
34
+### Security enhancements
35
+
36
+- Extends Kerberos policy enforcement to UDP alongside TCP.
37
+- Hardens network packet validation and removes the local registry break-glass override in favor of cloud policy.
38
+
39
+### Access enforcement
40
+
41
+- Matches non-wildcard SPNs and requested Kerberos service names (`sname`) by their owning Active Directory account SID, rather than relying only on exact service-name strings. This extends protection to aliases of the same account. Existing name-based matching is retained when account resolution is unavailable.
42
+- Corrects wildcard SPN matching. Wildcard rules remain name-based.
43
+
44
+### Diagnostics and telemetry
45
+
46
+- Improves Kerberos transport, service-name resolution, and firewall diagnostics.
47
+
48
+### Bug fixes
49
+
50
+- Includes bug fixes and minor improvements.
51
+
52
+### Upgrade considerations
53
+
54
+- Allow inbound TCP and UDP on port 1337.
55
+- IPv6 Kerberos traffic is unsupported and blocked; use IPv4.
56
+
2357
## Version 2.2.42
2458
2559
Released for download on June 16, 2026.
⋯ 28 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 22:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.