Deep Dive on Microsoft Entra Private Access

A look at the Microsoft Entra Private Access zero trust network access works and all its capabilities!
🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!
▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
00:00 - Introduction
00:07 - Entra App Capabilities
03:59 - Traditional private access
06:38 - The Entra Secure Service Edge capability
10:05 - Global Secure Access client
13:24 - Viewing the client
16:29 - The connector
20:30 - Enabling Private Access
21:28 - Adding applications for Private Access
24:25 - NEVER overlap segments between apps
25:24 - Integrating with Conditional Access
27:29 - Demo of app access with Private Access
32:38 - Quick Access
37:44 - DNS handling
43:41 - Quick Access Private DNS
45:15 - Changes made to client by GSA
50:07 - Entra DNS service
56:43 - Summary
1:00:44 - Close
▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:
🔗 github.com/johnthebrit/Random...
📽️ Internet Access - • Deep Dive on Microsoft...
▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🔗 learn.onboardtoazure.com
🥇 Certification Content Repository
🔗 github.com/johnthebrit/Certif...
📅 Weekly Azure Update
🔗 • Azure Infrastructure U...
☁ Azure Master Class
🔗 • Microsoft Azure Master...
⚙ DevOps Master Class
🔗 • DevOps Master Class
💻 PowerShell Master Class
🔗 • PowerShell Master Class
🎓 Certification Cram Videos
🔗 • Microsoft Certificatio...
🧠 Mentoring Content
🔗 • Virtual Mentoring
❔ Questions? Maybe I answered it in my FAQ
🔗 savilltech.com/faq
👕 Cure Childhood Cancer Charity T-Shirt Channel Store
🔗 johns-t-shirts-store.creator-...
👂 Enable the subtitles and from there you can translate to your native language via the auto-translate feature in settings! • KZbin Captions and A... for a demo of using this feature.
SUBSCRIBE ✅ / @ntfaqguy
#microsoft #azuread #entra #johnsavillstechnicaltraining

[@NTFAQGuy]

Deep dive into Microsoft Entra Private Access, a zero trust network access solution! Please make sure to read the description for the chapters and key information about this video and others. ⚠ P L E A S E N O T E ⚠ 🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there! 🕰 I don't discuss future content nor take requests for future content so please don't ask 😇 🤔 Due to the channel growth and number of people wanting help I no longer can answer or even read questions and they will just stay in the moderation queue never to be seen so please post questions to other sites like Reddit, Microsoft Community Hub etc. 👂 Translate the captions to your native language via the auto-translate feature in settings! kzbin.info/www/bejne/rGbFZmZjhcx4o6s for a demo of using this feature. Thanks for watching! 🤙

[@oderbang]

I love the way you slowly build up the complexity but make it fully understandable!

[@NTFAQGuy]

Thanks!

[@DeanEllerbyMVP]

Love that you appreciate the skill involved in this delivery!

[@daintellekt]

Absolutely brilliant 👏

[@rahulsaikh893]

Hi John, It's my pleasure to watch your videos. Thanks for such great explanations. Let me try it in my lab.

[@DyegoM0101]

Brilliant!!!!!! Awesome new resource/tool and great video John.

[@NTFAQGuy]

Glad you liked it!

[@Bobbingfire]

Thank you for a great dive in to this topic.

[@matthewmiles6913]

I'm so thankful for your videos, you explain everything so well.

[@NTFAQGuy]

Glad you like them!

[@TomWhi]

Great delivery John. I was thinking how the whole name resolving thing would work but really glad you spent a good chunk on the video explaining it! It really is magic! Looking forward to testing it!

[@NTFAQGuy]

Glad to help

[@savasakgol9107]

As usual, fantastic video John. Appreciate the work.

[@NTFAQGuy]

Glad you enjoyed it

[@VirtualPackets]

Product looks pretty comprehensive to be fair, the MS EPA & EIA will be a great addition to the MS SSE suite. Waiting for GA to see what the costs look like. Great overview John. Thanks

[@yulaw3289]

enjoying this video for today learning, thanks a lot!

[@misterlcf]

Amazing video as usual, Thanks John

[@NTFAQGuy]

My pleasure!

[@Teramos]

Oh wow, Private DNS in Quick Access and UDP Support. Very nice, and thanks for the Video as always. I really hope that it will be included in Entra P1

[@NTFAQGuy]

My pleasure!

[@dwightgoble6308]

I heard that it will be a stand-alone license with Entra ID - they may add it to a suite too - should be revealed at GA in the next month or so

[@kelkelnguyen]

Well done in explaining all the details!

[@NTFAQGuy]

Glad it was helpful!

[@spawnshepherd]

This is really cool, not only because it gets you into the Zero-trust game easier, but because it also solves for private Azure DNS resolution for your user endpoints. Looks like if you roll this out correctly you don't have to rely on centralized FW forwarding to Private DNS resolver anymore, and you can roll this out using the client and adopt on as granular level (e.g. per app) as you need.

[@NTFAQGuy]

If it had a PE into a vnet the connector had path to etc.

[@markojuutinen]

This was great. Learned a oot. Thank you

[@NTFAQGuy]

Great to hear!

[@jeffreybrodsky4908]

Thank you!

[@AzureCloudCowboy]

Good Afternoon John

[@magroll4368]

Really nice overview! 👍

[@NTFAQGuy]

Thanks! 👍

[@BuggageandGlitchage]

Looks great, it would be interesting if this could be used by workstations to refresh their trust relationship with the domain rather than relying on a traditional vpn.

[@ThePawkon]

awesome

[@Jayzetecs]

Great Video! Have you tested SMB performance? Is this potentially a solution for poor SMB performance over a traditional VPN?

[@NTFAQGuy]

I have not.

[@SashaFoxfort]

Good video, makes everything easier to understand. When comes to DNS, would this only work if there is Azure DNS service setup? In existing hybrid enviroment with VMs running DNS server, would it possible to tell EPA to use existing DNS address?

[@NTFAQGuy]

Zero relationship to azure dns. You are just saying which suffixes should be sent via gsa for resolution. My dns servers were windows server that connectors spoke to.

[@lesserleeking]

Any idea when the UDP can you used in the normal preview? Its the biggest limitation for a POC rollout. Private preview requests are not being taken anymore.

[@sauvus]

John, Some of the features that you've shown aren't currently available in the public preview (UDP support being one of them.) How would we go about getting this enabled for customer tenants?

[@NTFAQGuy]

You can sign up for preview.

[@NTFAQGuy]

aka.ms/entra-qa-signup

[@pradeesh1652]

I think this technology will overtake zscalar ZPA in few days..

[@geroffmilan3328]

That'll depend on the cost...

[@ggates5859]

Microsoft needs a new category for best of the best. Call it MVP squared. And Mr. Savill would be it.

[@brodierobson4490]

Cannot find the Private DNS....

[@NTFAQGuy]

Part of preview right now you need to sign up for.

[@paputitalian]

Great video John and great feature as well, I think that could easily be a game changer. Any news about the GA date? Thanks

[@anthonydelagarde3990]

Thank you!

[@NTFAQGuy]

You're welcome!