Deep Dive on Microsoft Entra Private Access

Рет қаралды 33,437

Күн бұрын

A look at the Microsoft Entra Private Access zero trust network access works and all its capabilities!
🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!
▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
00:00 - Introduction
00:07 - Entra App Capabilities
03:59 - Traditional private access
06:38 - The Entra Secure Service Edge capability
10:05 - Global Secure Access client
13:24 - Viewing the client
16:29 - The connector
20:30 - Enabling Private Access
21:28 - Adding applications for Private Access
24:25 - NEVER overlap segments between apps
25:24 - Integrating with Conditional Access
27:29 - Demo of app access with Private Access
32:38 - Quick Access
37:44 - DNS handling
43:41 - Quick Access Private DNS
45:15 - Changes made to client by GSA
50:07 - Entra DNS service
56:43 - Summary
1:00:44 - Close
▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:
🔗 github.com/johnthebrit/Random...
📽️ Internet Access - • Deep Dive on Microsoft...
▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🔗 learn.onboardtoazure.com
🥇 Certification Content Repository
🔗 github.com/johnthebrit/Certif...
📅 Weekly Azure Update
🔗 • Azure Infrastructure U...
☁ Azure Master Class
🔗 • Microsoft Azure Master...
⚙ DevOps Master Class
🔗 • DevOps Master Class
💻 PowerShell Master Class
🔗 • PowerShell Master Class
🎓 Certification Cram Videos
🔗 • Microsoft Certificatio...
🧠 Mentoring Content
🔗 • Virtual Mentoring
❔ Questions? Maybe I answered it in my FAQ
🔗 savilltech.com/faq
👕 Cure Childhood Cancer Charity T-Shirt Channel Store
🔗 johns-t-shirts-store.creator-...
👂 Enable the subtitles and from there you can translate to your native language via the auto-translate feature in settings! • KZfaq Captions and A... for a demo of using this feature.
SUBSCRIBE ✅ / @ntfaqguy
#microsoft #azuread #entra #johnsavillstechnicaltraining

Пікірлер: 58

@NTFAQGuy 5 ай бұрын

Deep dive into Microsoft Entra Private Access, a zero trust network access solution! Please make sure to read the description for the chapters and key information about this video and others. ⚠ P L E A S E N O T E ⚠ 🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there! 🕰 I don't discuss future content nor take requests for future content so please don't ask 😇 🤔 Due to the channel growth and number of people wanting help I no longer can answer or even read questions and they will just stay in the moderation queue never to be seen so please post questions to other sites like Reddit, Microsoft Community Hub etc. 👂 Translate the captions to your native language via the auto-translate feature in settings! kzfaq.info/get/bejne/rJuSaJZetc2pnX0.html for a demo of using this feature. Thanks for watching! 🤙

@oderbang 5 ай бұрын

I love the way you slowly build up the complexity but make it fully understandable!

@NTFAQGuy 5 ай бұрын

Thanks!

@DeanEllerbyMVP 5 ай бұрын

Love that you appreciate the skill involved in this delivery!

@daintellekt 2 ай бұрын

Absolutely brilliant 👏

@rahulsaikh893 5 ай бұрын

Hi John, It's my pleasure to watch your videos. Thanks for such great explanations. Let me try it in my lab.

@DyegoM0101 5 ай бұрын

Brilliant!!!!!! Awesome new resource/tool and great video John.

@NTFAQGuy 5 ай бұрын

Glad you liked it!

@savasakgol9107 3 ай бұрын

As usual, fantastic video John. Appreciate the work.

@NTFAQGuy 3 ай бұрын

Glad you enjoyed it

@TomWhi 5 ай бұрын

Great delivery John. I was thinking how the whole name resolving thing would work but really glad you spent a good chunk on the video explaining it! It really is magic! Looking forward to testing it!

@NTFAQGuy 5 ай бұрын

Glad to help

@matthewmiles6913 5 ай бұрын

I'm so thankful for your videos, you explain everything so well.

@NTFAQGuy 5 ай бұрын

Glad you like them!

@VirtualPackets 5 ай бұрын

Product looks pretty comprehensive to be fair, the MS EPA & EIA will be a great addition to the MS SSE suite. Waiting for GA to see what the costs look like. Great overview John. Thanks

@Bobbingfire 2 ай бұрын

Thank you for a great dive in to this topic.

@misterlcf 5 ай бұрын

Amazing video as usual, Thanks John

@NTFAQGuy 5 ай бұрын

My pleasure!

@Teramos 5 ай бұрын

Oh wow, Private DNS in Quick Access and UDP Support. Very nice, and thanks for the Video as always. I really hope that it will be included in Entra P1

@NTFAQGuy 5 ай бұрын

My pleasure!

@dwightgoble6308 Ай бұрын

I heard that it will be a stand-alone license with Entra ID - they may add it to a suite too - should be revealed at GA in the next month or so

@yulaw3289 Ай бұрын

enjoying this video for today learning, thanks a lot!

@spawnshepherd 5 ай бұрын

This is really cool, not only because it gets you into the Zero-trust game easier, but because it also solves for private Azure DNS resolution for your user endpoints. Looks like if you roll this out correctly you don't have to rely on centralized FW forwarding to Private DNS resolver anymore, and you can roll this out using the client and adopt on as granular level (e.g. per app) as you need.

@NTFAQGuy 5 ай бұрын

If it had a PE into a vnet the connector had path to etc.

@EagleKel 2 ай бұрын

Well done in explaining all the details!

@NTFAQGuy 2 ай бұрын

Glad it was helpful!

@magroll4368 2 ай бұрын

Really nice overview! 👍

@NTFAQGuy 2 ай бұрын

Thanks! 👍

@markojuutinen 3 ай бұрын

This was great. Learned a oot. Thank you

@NTFAQGuy 3 ай бұрын

Great to hear!

@AzureCloudCowboy 5 ай бұрын

Good Afternoon John

@jeffreybrodsky4908 5 ай бұрын

Thank you!

@markdriver8511 15 күн бұрын

Really good explanation thanks :-)

@NTFAQGuy 15 күн бұрын

You are welcome!

@BuggageandGlitchage 4 ай бұрын

Looks great, it would be interesting if this could be used by workstations to refresh their trust relationship with the domain rather than relying on a traditional vpn.

@ThePawkon 5 ай бұрын

awesome

@SashaFoxfort 5 ай бұрын

Good video, makes everything easier to understand. When comes to DNS, would this only work if there is Azure DNS service setup? In existing hybrid enviroment with VMs running DNS server, would it possible to tell EPA to use existing DNS address?

@NTFAQGuy 5 ай бұрын

Zero relationship to azure dns. You are just saying which suffixes should be sent via gsa for resolution. My dns servers were windows server that connectors spoke to.

@Jayzetecs 5 ай бұрын

Great Video! Have you tested SMB performance? Is this potentially a solution for poor SMB performance over a traditional VPN?

@NTFAQGuy 5 ай бұрын

I have not.

@lesserleeking 2 ай бұрын

Any idea when the UDP can you used in the normal preview? Its the biggest limitation for a POC rollout. Private preview requests are not being taken anymore.

@sauvus 5 ай бұрын

John, Some of the features that you've shown aren't currently available in the public preview (UDP support being one of them.) How would we go about getting this enabled for customer tenants?

@NTFAQGuy 5 ай бұрын

You can sign up for preview.

@NTFAQGuy 5 ай бұрын

aka.ms/entra-qa-signup

@ggates5859 2 ай бұрын

Microsoft needs a new category for best of the best. Call it MVP squared. And Mr. Savill would be it.

@pradeesh1652 5 ай бұрын

I think this technology will overtake zscalar ZPA in few days..

@geroffmilan3328 Ай бұрын

That'll depend on the cost...

@discokrueger522 10 күн бұрын

We've looked at the solution and the beauty of a single pane of glass SSE/ZTNA solution impressed me. Unfortunately we have a lot of private devices, which are only Entra ID registered but not joined, which makes the solution unusable for us. I don't get, why Entra ID registered is fine for Android, but not for Windows devices.