Global Secure Access Client (preview) won't Tunnel?

VPN
1

I setup the Global Secure Access for private access to test as a VPN replacement as our needs for VPN are very limited. However since I setup a few months back, the client health check is failing. It states at the very top:

“Connection to Private Access diagnostic URL failed”

I have all green checks except:

Tunneling succeeded Private Access

I’ve done all the IPv6/Secure DNS settings per the learn articles (The Global Secure Access Client for Windows - Global Secure Access | Microsoft Learn) and there is no proxy. I just assumed that maybe something with my tenant wasn’t setup yet. However if I have the options in the entra portal, I would think that it’s enabled for preview in my tenant.

I just have a very simple forwarding profile to allow 3389 to my workstation (single IP). I did try setting up Internet access and M365 access and when I did that, the client got the forwarding info, but still failed to tunnel for those as well.

Anyone else have this issue?

2

having the same issues. it was working last month when implemented but it has now stop working

3

same here. uninstall, reboot, reinstall…works…reboot, wont tunnel.

4

Anyone have any luck here? Installed the newest version and after each reboot, it wont connect leaving no internet access on the device. In the event logs, all I get is “Global Secure Access Client is disconnected from all channels” and no way to reconnect. Pause/Resume and same error after it connects.

5

How can we disable Tunnel on an existing device so we can test GSA (Android). Microsoft states that Tunnel and GSA cannot coexist on the same device.

6

I opened a support ticket with MS and someone actually picked up the ticket. I’ll post my findings here once I have something.

7

I’m having a similar issue… after the GSAC is installed I lose internet (which also prevents tunneling of course) because one of the services seems to not have sufficient permission to start when installed as SYSTEM via InTune. All internet access is broken until I uninstall with an admin account.

8

which client version are you using? have you tried the Health Check page under Advanced diagnostics?

9

That will be great. Very keen to know what has happened

10

If anyone else is seeing this, the only work around I found was install manually as local admin, and provide the GlobalSecureAccessDriver.sys file when it asks for a CD.

11

the newest client: 2.1.102.0 - everything under the health check is good outside of the tunnel error “connection to M365 diagnostic URL failed” . traffic is “flowing” via the traffic tab but the taskbar icon shows disconnected and I cannot actually get to anything on the internet or private. Event logs show successfully connected/authenticated, but then shows “Global Secure Access Client is disconnected from all channels”. I uninstalled VPN clients - almost a fresh install. It works well when I first install, but after a reboot or a log off and nothing works. A reinstall is the only way I can get it to work correctly.

12

Nothing yet. I just got off a call with them and they gave me a new client and it’s doing the same thing. I’m currently onsite today without my laptop so I really can’t test.

13

I finally got it working. They had suggested I uninstall my other VPN client, which I did. I then reinstalled the GSA client and boom, it’s working. Not sure why there is an issue with having another VPN client installed at the same time. My VPN client is old and due for an upgrade. I’m going to install the latest version of my VPN client and see if this breaks the GSA but that would be my suggestion to try.

14

Hi, same problem here. After installation of the GSA client everything is fine until reboot. Then the tunneling succeeded is red in advanced diagnostic. Anyone else have this issue or a solution?

15

Ditto! I temporarily disabled my corp VPN, and the client is much more responsive, now. I am currently testing, and have managed to restrict access to Microsoft services, unless the client is present. I’ve targeted it to just a test user so far. However, I’m also looking at web filtering (the “Internet” access profile), but I can’t seem to get it to work. I have blocked access to social medial, as an example, but I can still get to Facebook. I even tried adding *.facebook.com, but no joy. Have you come across this?