Private network connector firewall requirements
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 3eaa16e · +2 −2 lines · also on GitHub
⋯ 30 unchanged lines
3131
* For more information, see [Determine which .NET framework versions are installed](/dotnet/framework/migration-guide/how-to-determine-which-versions-are-installed).
3232
3333
> [!IMPORTANT]
34
−> Note that when using Kerberos Single Sign On (SSO) with Microsoft Application Proxy Service, Disable HTTP 2.0 on Entra private network connector for Windows Server 2019 or later. No need to disable when using Entra Private network connector with Private Access.
34
+> Note: When using the connector to access web applications published via Microsoft Entra application proxy, HTTP/2 must be disabled on the server hosting Microsoft Entra private network connector running on Windows Server 2019 or later. This configuration change is not required when using the Entra private network connector only with Global Secure Access Private Access.
3535
>
36
−> Disable the `HTTP2` protocol support in the `WinHttp` component for *Kerberos Constrained Delegation* to properly work. This is disabled by default in earlier versions of supported operating systems. Adding the following registry key and restarting the server disables it on Windows Server 2019 and later. This is a machine-wide registry key.
36
+> Disable the `HTTP2` protocol support in the `WinHttp` to enable web application published via Microsoft Entra application proxy properly work. This is disabled by default in earlier versions of supported operating systems. Adding the following registry key and restarting the server disables it on Windows Server 2019 and later. This is a machine-wide registry key.
3737
>
3838
> ```
3939
> Windows Registry Editor Version 5.00
⋯ 225 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 22:51 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.