Forum Discussion
Entra Global Secure Access/ Internet Access
We have apps in Azure and AWS. These cloud apps are IP restricted. Staff can only access these apps if they're working in the office or connected to the office VPN (ie: traffic is proxy'd over the vp...
Hey Phil, you can use GSA Private Access feature to do this. You can create applications based on FQDN, doesn't matter if they are internal or not. As soon as you configure your FQDN for private access, traffic will be routed through your configured connector group. The application proxy vms in your connector group can be configured to use Azure nat gateway with a static IP, so you can whitelist this IP in other services. But even better is to have connectors in your VPC/vnet to not even expose your applications if access is anyhow restricted. Then traffic will be kept private for restricted apps.
