Deep Dive on Microsoft Entra Private Access

A look at the Microsoft Entra Private Access zero trust network access works and all its capabilities!

🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!

▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
00:00 - Introduction
00:07 - Entra App Capabilities
03:59 - Traditional private access
06:38 - The Entra Secure Service Edge capability
10:05 - Global Secure Access client
13:24 - Viewing the client
16:29 - The connector
20:30 - Enabling Private Access
21:28 - Adding applications for Private Access
24:25 - NEVER overlap segments between apps
25:24 - Integrating with Conditional Access
27:29 - Demo of app access with Private Access
32:38 - Quick Access
37:44 - DNS handling
43:41 - Quick Access Private DNS
45:15 - Changes made to client by GSA
50:07 - Entra DNS service
56:43 - Summary
1:00:44 - Close

▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:

▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🥇 Certification Content Repository
📅 Weekly Azure Update
☁ Azure Master Class
⚙ DevOps Master Class
💻 PowerShell Master Class
🎓 Certification Cram Videos
🧠 Mentoring Content
❔ Questions? Maybe I answered it in my FAQ
👕 Cure Childhood Cancer Charity T-Shirt Channel Store

#microsoft #azuread #entra #johnsavillstechnicaltraining

[NTFAQGuy]

Deep dive into Microsoft Entra Private Access, a zero trust network access solution! Please make sure to read the description for the chapters and key information about this video and others.

⚠ P L E A S E N O T E ⚠

🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there!
🕰 I don't discuss future content nor take requests for future content so please don't ask 😇
🤔 Due to the channel growth and number of people wanting help I no longer can answer or even read questions and they will just stay in the moderation queue never to be seen so please post questions to other sites like Reddit, Microsoft Community Hub etc.

Thanks for watching!
🤙

[oderbang]

I love the way you slowly build up the complexity but make it fully understandable!

[rahulsaikh]

Hi John, It's my pleasure to watch your videos. Thanks for such great explanations. Let me try it in my lab.

[TomWhi]

Great delivery John. I was thinking how the whole name resolving thing would work but really glad you spent a good chunk on the video explaining it! It really is magic! Looking forward to testing it!

[DyegoM]

Awesome new resource/tool and great video John.

[VirtualPackets]

Product looks pretty comprehensive to be fair, the MS EPA & EIA will be a great addition to the MS SSE suite. Waiting for GA to see what the costs look like. Great overview John. Thanks

[savasakgol]

As usual, fantastic video John. Appreciate the work.

[Bobbingfire]

Thank you for a great dive in to this topic.

[matthewmiles]

I'm so thankful for your videos, you explain everything so well.

[Teramos]

Oh wow, Private DNS in Quick Access and UDP Support. Very nice, and thanks for the Video as always. I really hope that it will be included in Entra P1

[yulaw]

enjoying this video for today learning, thanks a lot!

[spawnshepherd]

This is really cool, not only because it gets you into the Zero-trust game easier, but because it also solves for private Azure DNS resolution for your user endpoints. Looks like if you roll this out correctly you don't have to rely on centralized FW forwarding to Private DNS resolver anymore, and you can roll this out using the client and adopt on as granular level (e.g. per app) as you need.

[EagleKel]

Well done in explaining all the details!

[markojuutinen]

This was great. Learned a oot. Thank you

[BuggageandGlitchage]

Looks great, it would be interesting if this could be used by workstations to refresh their trust relationship with the domain rather than relying on a traditional vpn.

[SashaFoxfort]

Good video, makes everything easier to understand.

When comes to DNS, would this only work if there is Azure DNS service setup?

In existing hybrid enviroment with VMs running DNS server, would it possible to tell EPA to use existing DNS address?

[Jayzetecs]

Great Video! Have you tested SMB performance? Is this potentially a solution for poor SMB performance over a traditional VPN?

[lesserleeking]

Any idea when the UDP can you used in the normal preview? Its the biggest limitation for a POC rollout. Private preview requests are not being taken anymore.

[sauvus]

John,

Some of the features that you've shown aren't currently available in the public preview (UDP support being one of them.) How would we go about getting this enabled for customer tenants?

[ggates]

Microsoft needs a new category for best of the best. Call it MVP squared. And Mr. Savill would be it.