Category: Entra | Andy Kemp Consulting

22 Sept 2026 17 min read

What I Learned Deploying Global Secure Access for Real

After ten posts exploring Microsoft Global Secure Access, it is time to step back from the configuration guides and architecture diagrams. These are the lessons I learned from d...

Microsoft Global Secure Access · Part 10

Cyber Security #Cyber Security #GSA

22 Sept 2026 19 min read

Global Secure Access and Privileged Access: An Architecture I Want to Test

What could Microsoft Global Secure Access add to a privileged-access architecture? This article explores a conceptual design combining Entra Private Access, application segmenta...

Microsoft Global Secure Access · Part 9

Cyber Security #Cyber Security #GSA

21 Sept 2026 17 min read

Designing Entra Private Access Properly: Don't Rebuild Your VPN in the Cloud

Microsoft Entra Private Access can replace traditional VPN access, but simply publishing broad private networks through Quick Access risks recreating the same access model in a...

Microsoft Global Secure Access · Part 8

Cyber Security #Cyber Security #GSA

16 Sept 2026 14 min read

Global Secure Access Alongside Your Existing Security Stack

Where Global Secure Access fits alongside Intune, Defender, Conditional Access and network controls, and how to separate useful overlap from policy duplication.

Microsoft Global Secure Access · Part 7

Cyber Security #Cyber Security #GSA

31 Aug 2026 23 min read

Migrating from a Traditional Secure Web Gateway to Global Secure Access

Migrating from a traditional Secure Web Gateway to Microsoft Global Secure Access is more than replacing one endpoint client with another. This article explores policy rationali...

Microsoft Global Secure Access · Part 6

Entra #Cyber Security #GSA

26 Aug 2026 15 min read

Entra Internet Access: Moving Web Security to the Identity Layer

Explore how Microsoft Entra Internet Access moves traditional Secure Web Gateway controls towards an identity-aware security model, combining web filtering, user and group polic...

Microsoft Global Secure Access · Part 5

Cyber Security #Cyber Security #GSA

25 Aug 2026 12 min read

Global Secure Access on Mobile Devices

Explore how Microsoft Global Secure Access extends identity-aware access to managed iOS, iPadOS and Android devices using Entra Internet Access and Entra Private Access.

Microsoft Global Secure Access · Part 4

Cyber Security #Cyber Security #GSA

24 Aug 2026 26 min read

Microsoft Global Secure Access on macOS: Extending Identity-Driven Access Beyond Windows

Explore how Microsoft Global Secure Access brings identity-driven Private Access, Internet Access and Microsoft traffic controls to managed macOS devices.

Microsoft Global Secure Access · Part 3

Cyber Security #Cyber Security #GSA

19 Aug 2026 26 min read

Replacing Traditional VPN Access with Microsoft Entra Private Access

Learn how Microsoft Entra Private Access replaces broad VPN connectivity with identity-driven, application-aware access to private resources.

Microsoft Global Secure Access · Part 2

Cyber Security #Cyber Security #GSA

13 Aug 2026 15 min read Updated 14 Aug 2026

Giving SaaS Applications a Fixed Egress IP with Microsoft Entra Private Access"

Use Microsoft Entra Private Access source IP anchoring to give IP-restricted SaaS applications a controlled and predictable public egress address.

Microsoft Global Secure Access · Part 1

Compliance & Governance #Cloud Security Strategy #Conditional Access

6 Aug 2026 5 min read

Building a Modern Privileged Access Strategy

Learn how to build a modern privileged access strategy by combining Trust Levels, Privileged Access Workstations, phishing-resistant authentication, Conditional Access, PIM and...

Privileged Access Workstations · Part 8

Cyber Security #Cloud Security Strategy #Cyber Security

6 Aug 2026 5 min read

Hardening a Modern Privileged Access Workstation

Learn how to harden a modern Privileged Access Workstation using Microsoft Intune, Microsoft Defender, Conditional Access, PIM and Windows security features to build a trusted a...

Privileged Access Workstations · Part 6

Cyber Security #Cyber Security #Endpoint Security

6 Aug 2026 6 min read

Virtual Privileged Access Workstations

Explore how Virtual Privileged Access Workstations (vPAWs) provide a secure and practical alternative to physical PAWs by balancing administrative assurance with operational fle...

Privileged Access Workstations · Part 4

Cyber Security #Cloud Security Strategy #Cyber Security

6 Aug 2026 5 min read

Physical Privileged Access Workstations

Discover why dedicated physical Privileged Access Workstations remain the highest assurance option for protecting privileged identities and securing administrative environments.

Privileged Access Workstations · Part 3

Cyber Security #Cyber Security #Entra ID

5 Aug 2026 5 min read

When Do You Need a Privileged Access Workstation?

Discover when a Privileged Access Workstation is justified, how to assess administrative risk, and why workstation assurance should reflect the level of trust placed in an ident...

Privileged Access Workstations · Part 2

Cyber Security #Cyber Security #Endpoint Security

4 Aug 2026 7 min read

What is a Privileged Access Workstation

Discover what a Privileged Access Workstation (PAW) is, why it matters, and how it strengthens privileged identity security by protecting the administrative trust boundary.

Privileged Access Workstations · Part 1

Cyber Security #PAW #Privileged Access

4 Aug 2026 4 min read

Privileged Access Workstations: Introduction

An introduction to Privileged Access Workstations (PAWs), why they matter, and how they fit into a modern privileged identity strategy using Microsoft Entra.

Privileged Access Workstations

Cyber Security #Continuous Improvement #Cyber Security

29 Jul 2026 5 min read

From Tier 0 to Trust Levels: Rethinking Privileged Access for the Cloud Era

Traditional administrative tiering was built for an infrastructure-centric world. As organisations move to cloud-native identities, Zero Trust and passwordless authentication, t...

Cyber Security #Cyber Security #Enterprise IT

28 Jul 2026 10 min read

Passkeys: The Hardest Part Nobody Talks About

Passkeys are transforming authentication, but the technology is not the hardest part. Learn why onboarding, bootstrapping, Temporary Access Passes (TAPs), Conditional Access and...

Entra #Authentication Strategy #Conditional Access

20 Jul 2026 5 min read Updated 14 Aug 2026

Microsoft Global Secure Access: More Than Just a VPN Replacement?

Learn what Microsoft Global Secure Access is, how Private Access and Internet Access work, licensing requirements, and where GSA fits within a Zero Trust architecture

Microsoft Global Secure Access

Cyber Security #Cyber Security #Microsoft 365

1 Jun 2026 7 min read

Windows Hello for Business Is More Than a Login Method

Explore Windows Hello for Business as a phishing-resistant authenticator, and why onboarding, recovery and lifecycle management matter as much as passkeys.

Consulting #Authentication Strategy #Entra ID

10 Apr 2026 2 min read

Microsoft 365 Tenant Audit – Sample Enterprise Report

Most Microsoft 365 tenants don’t lack tools, they lack visibility. This sample enterprise audit report shows how to uncover risk, simplify access, and gain a clear, structured v...

Consulting #Consulting #Identity and Access Management

8 Dec 2025 12 min read Updated 6 Jan 2026

Data – The Fourth Pillar of Zero Trust

Introduction In this Zero Trust blog series, we’ve already explored how Identity, Devices, and Applications form the foundation of a modern security strategy. Each pillar plays...

Compliance & Governance #Compliance #Continuous Improvement

21 Nov 2025 15 min read Updated 6 Jan 2026

Applications – The Third Pillar of Zero Trust

Introduction In the first two posts of this Zero Trust series, we established that identity is the new perimeter and devices are the frontline of defence. By verifying every user…

Cyber Security #Conditional Access #Entra ID

12 Nov 2025 20 min read Updated 6 Jan 2026

Devices – The Second Pillar of Zero Trust

Introduction In the first post of this series, we explored how identity has become the new perimeter in a world where users, apps, and data are no longer confined to…

Cyber Security #App Protection Policies #BYOD

31 Oct 2025 12 min read Updated 6 Jan 2026

Identity: The New Perimeter in Zero Trust

Welcome to the first deep dive in my Zero Trust blog series. If you’ve read the series introduction, you’ll know that Zero Trust isn’t a single product or a quick…

Azure #Entra ID #Microsoft

21 Oct 2025 14 min read Updated 6 Jan 2026

Zero Trust Blog Series: A Microsoft-Centric Approach

Introduction Over the past few years, I’ve seen a growing interest in Zero Trust but also a lot of confusion. Many still view it as a product you can buy…

Azure #Cloud Security Strategy #Cyber Security

11 Aug 2025 6 min read

Automate Your Elgato Key Light Air with Microsoft Teams Presence

Introduction If you’re anything like me, you’ve probably joined a video call only to realise your lighting isn’t quite right. I use an Elgato Key Light Air, and I wanted…

Automation #Azure #Elgato Keylight Air

8 Jun 2025 9 min read

Deploying Azure Virtual Desktop – A Modular, Automated Approach

Introduction Azure Virtual Desktop (AVD) is Microsoft’s comprehensive Desktop-as-a-Service platform, enabling secure remote access to Windows desktops and apps from virtually an...

Automation #Azure Virtual Desktop #Azure

6 May 2025 4 min read

Always On VPN Entra Join – Part 1 Whats needed

This is part 1 of my Always On VPN series You can review the pervious posts if required: Introduction Always on VPN is a technology thats been around for some…

Entra #Microsoft

23 Mar 2025 6 min read

Virtual PAW – Part 4 – Completing the basic setup

So this is part 4 of my multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction In this part I’ll go…

Azure #Azure #Entra ID

27 Feb 2025 7 min read

Virtual PAW – Part 3 – Deploying the session hosts

So this is the 3rd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction Welcome to the 3rd…

Azure #Azure #Entra ID

14 Feb 2025 7 min read Updated 18 Feb 2025

Virtual PAW – Part 1 – A high level overview

I have decided to create this as a multi part post to hopefully make it easier to understand. Introduction So Following on from my last post I thought I’d share…

Azure #Azure #Azure Virtual Desktop

5 Feb 2025 6 min read

Why use a PAW?

Introduction Following on from my previous post I have been asked why I use a PAW for my own tenant, and or why not just use a conditional access policy…

Azure #Entra ID #Microsoft

15 Jan 2025 3 min read

Securing my privileged access with AVD

I’m trying to “lead by example” (I use that term loosely), when it comes to privileged access. A bit of background For a long time my regular Microsoft 365 account…

Azure #Azure Virtual Desktop #Azure

2 Jul 2024 7 min read

Privileged Identity Management and Access Tiers

Introduction I’ve been working with a customer recently assisting with sorting out their privileged access and assisting them with their adoption of PIM (Privileged Identity Man...

Entra #Microsoft #Microsoft Entra