Transcribed
Microsoft Entra Private Access - Simply Explained
Jul 24, 2026 ·
13m 18s
Download and listen anywhere
Download your favorite episodes and enjoy them, wherever you are! Sign up or log in now to access offline listening.
Microsoft Entra Private Access - Simply Explained
Description
VPNs give remote users far too much access and create constant help desk friction. This Simply Explained episode is for IT admins and security teams who want to understand how...
show more
VPNs give remote users far too much access and create constant help desk friction. This Simply Explained episode is for IT admins and security teams who want to understand how Microsoft Entra Internet Access and Global Secure Access replace network trust with identity-driven Zero Trust, how Conditional Access stops token theft and how to get started with licensing.
In this episode
Key takeaways
Worth quoting
“VPNs trust the network, not the user. They check your credentials at the door, and then assume everything is fine for the rest of the session. That's the opposite of what modern security needs.” – Mirko Peters (01:21)
“Instead of protecting a network, you're protecting identities. Instead of building walls, you're building policies. And instead of trusting a connection, you're verifying every request.” – Mirko Peters (02:58)
Explore more on M365.FM
Follow and rate M365.FM in your podcast app, and join the free M365 community at m365con.net.
Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-microsoft-365-azure-cloud-power-platform-ai--6704921/support.
show less
In this episode
- 00:00 – Why traditional VPNs are broken
- 01:37 – From network trust to identity trust
- 03:10 – What Entra Internet Access is
- 04:54 – The three traffic forwarding profiles
- 06:45 – Conditional Access integration
- 08:45 – Web filtering and threat protection
- 11:11 – Licensing and getting started
Key takeaways
- Traditional VPNs trust the network and grant broad access, while Microsoft Entra Internet Access verifies identity, device and risk for every request.
- Global Secure Access routes traffic through Microsoft, internet and private access profiles, and Conditional Access can require the client to block stolen-token attacks.
- Web content filtering, TLS inspection, tenant restrictions and shadow AI discovery run at the network level, and the Microsoft traffic profile is already included with Entra ID P1.
Worth quoting
“VPNs trust the network, not the user. They check your credentials at the door, and then assume everything is fine for the rest of the session. That's the opposite of what modern security needs.” – Mirko Peters (01:21)
“Instead of protecting a network, you're protecting identities. Instead of building walls, you're building policies. And instead of trusting a connection, you're verifying every request.” – Mirko Peters (02:58)
Explore more on M365.FM
- Episode page: the full episode with chapters, key quotes and an FAQ on Global Secure Access
- Conditional Access – the policy engine that can require the Global Secure Access client and block stolen tokens
- Zero Trust – the never trust, always verify model that replaces network trust with identity trust
- Microsoft Entra ID – the central identity plane that makes real-time access decisions for every request
- Related episode: ENTRA PIM EXPLAINED: Securing Privileged Access with Mark Orr [MVP]
Follow and rate M365.FM in your podcast app, and join the free M365 community at m365con.net.
Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-microsoft-365-azure-cloud-power-platform-ai--6704921/support.
Information
| Author | Mirko Peters M365, Azure & AI |
| Organization | m365 FM |
| Website | www.m365.fm |
| Tags |
Copyright 2026 - Spreaker Inc. an iHeartMedia Company
Comments