MicrosoftI am still little sad about the Private DNS feature is still in public preview.
Its a key part of the private access solution, and our test concludes that it is very unstable.
Sometimes we need to restart the tunneling service (GSAclient) in order to do single label name lookup.( and this requires local admin permission, witch our users do not have)
Also the GSA client is not goood at detecting a MFA validation has succeeded.
It takes 2-3 minutes from the user signing in and afterwards validating MFA , until the GSA client connects to SSE.
This is sadly bad user experience, in comparison with other VPN clients.
I also experience occasionally dropouts, when the client says ( you need to sign in)
