Entra Private Access is a Zero Trust Network Access (ZTNA) cloud service solution from Microsoft that is part of the Global Secure Access suite of technologies. It leverages the Entra Private Network Connector (formerly Azure App Proxy), allowing administrators to easily publish private, on-premises applications by installing the connector on an on-premises server. Administrators can leverage Entra ID authentication and conditional access policies to ensure device compliance or enforce multifactor authentication (MFA), if required.

Private Access vs. Always On VPN

Entra Private Access will be a compelling alternative to Always On VPN in the future. Specifically, organizations using native Entra joined devices could benefit tremendously from this technology. Entra Private Access is much simpler to implement than Always On VPN and requires no on-premises infrastructure other than the Entra Private Network connector. Using Entra Private Access also means that no inbound access from the Internet is required, making the solution inherently more secure and reducing the public attack surface. For organizations using hybrid Entra join, Always On VPN continues to be the best Microsoft solution for these scenarios.

More Information

I’ve had the privilege of participating in the private preview for Microsoft Entra Internet Access and Private Access. If you’d like to learn more about these technologies and how they can help your organization, fill out the form below, and I’ll provide more information.