Tag: Identity | Andy Kemp Consulting

15 Oct 2026 15 min read

Understanding Traffic Forwarding and Advanced Diagnostics

Understand Global Secure Access forwarding profiles, investigate Tunnel and Bypass decisions, and test SharePoint and internet traffic with Windows Advanced Diagnostics.

GSA in Practice: The How, Not the Why · Part 2

Identity #Identity and Access Management #Identity

13 Oct 2026 23 min read

Deploying the Global Secure Access Client with Intune

Learn how to deploy the Microsoft Global Secure Access Windows client using Intune, configure a controlled pilot and verify traffic forwarding.

GSA in Practice: The How, Not the Why · Part 1

Identity #Identity and Access Management #Identity

22 Sept 2026 17 min read

What I Learned Deploying Global Secure Access for Real

After ten posts exploring Microsoft Global Secure Access, it is time to step back from the configuration guides and architecture diagrams. These are the lessons I learned from d...

Microsoft Global Secure Access · Part 10

Cyber Security #Cyber Security #GSA

22 Sept 2026 19 min read

Global Secure Access and Privileged Access: An Architecture I Want to Test

What could Microsoft Global Secure Access add to a privileged-access architecture? This article explores a conceptual design combining Entra Private Access, application segmenta...

Microsoft Global Secure Access · Part 9

Cyber Security #Cyber Security #GSA

21 Sept 2026 17 min read

Designing Entra Private Access Properly: Don't Rebuild Your VPN in the Cloud

Microsoft Entra Private Access can replace traditional VPN access, but simply publishing broad private networks through Quick Access risks recreating the same access model in a...

Microsoft Global Secure Access · Part 8

Cyber Security #Cyber Security #GSA

16 Sept 2026 14 min read

Global Secure Access Alongside Your Existing Security Stack

Where Global Secure Access fits alongside Intune, Defender, Conditional Access and network controls, and how to separate useful overlap from policy duplication.

Microsoft Global Secure Access · Part 7

Cyber Security #Cyber Security #GSA

31 Aug 2026 23 min read

Migrating from a Traditional Secure Web Gateway to Global Secure Access

Migrating from a traditional Secure Web Gateway to Microsoft Global Secure Access is more than replacing one endpoint client with another. This article explores policy rationali...

Microsoft Global Secure Access · Part 6

Entra #Cyber Security #GSA

26 Aug 2026 15 min read

Entra Internet Access: Moving Web Security to the Identity Layer

Explore how Microsoft Entra Internet Access moves traditional Secure Web Gateway controls towards an identity-aware security model, combining web filtering, user and group polic...

Microsoft Global Secure Access · Part 5

Cyber Security #Cyber Security #GSA

25 Aug 2026 12 min read

Global Secure Access on Mobile Devices

Explore how Microsoft Global Secure Access extends identity-aware access to managed iOS, iPadOS and Android devices using Entra Internet Access and Entra Private Access.

Microsoft Global Secure Access · Part 4

Cyber Security #Cyber Security #GSA

24 Aug 2026 26 min read

Microsoft Global Secure Access on macOS: Extending Identity-Driven Access Beyond Windows

Explore how Microsoft Global Secure Access brings identity-driven Private Access, Internet Access and Microsoft traffic controls to managed macOS devices.

Microsoft Global Secure Access · Part 3

Cyber Security #Cyber Security #GSA

19 Aug 2026 26 min read

Replacing Traditional VPN Access with Microsoft Entra Private Access

Learn how Microsoft Entra Private Access replaces broad VPN connectivity with identity-driven, application-aware access to private resources.

Microsoft Global Secure Access · Part 2

Cyber Security #Cyber Security #GSA

13 Aug 2026 15 min read Updated 14 Aug 2026

Giving SaaS Applications a Fixed Egress IP with Microsoft Entra Private Access"

Use Microsoft Entra Private Access source IP anchoring to give IP-restricted SaaS applications a controlled and predictable public egress address.

Microsoft Global Secure Access · Part 1

Compliance & Governance #Cloud Security Strategy #Conditional Access

28 Jul 2026 7 min read

From a Blog Series to a Book – The Unexpected Journey of The Privileged Path

What started as a handful of blog posts became one of the biggest professional challenges I've ever undertaken. This is the story behind The Privileged Path—why I wrote it, what...

Privileged Identity #Identity #Identity and Access Management

28 Jul 2026 10 min read

Passkeys: The Hardest Part Nobody Talks About

Passkeys are transforming authentication, but the technology is not the hardest part. Learn why onboarding, bootstrapping, Temporary Access Passes (TAPs), Conditional Access and...

Entra #Authentication Strategy #Conditional Access

20 Jul 2026 5 min read Updated 14 Aug 2026

Microsoft Global Secure Access: More Than Just a VPN Replacement?

Learn what Microsoft Global Secure Access is, how Private Access and Internet Access work, licensing requirements, and where GSA fits within a Zero Trust architecture

Microsoft Global Secure Access

Cyber Security #Cyber Security #Microsoft 365

9 Apr 2026 2 min read

Welcome to Andy Kemp Consulting

Why I Started Andy Kemp Consulting After many years working across Microsoft 365, security, identity, and large‑scale change programmes, I reached a clear conclusion. The work I...

Consulting #Cloud Architecture #Consulting

8 Jun 2025 9 min read

Deploying Azure Virtual Desktop – A Modular, Automated Approach

Introduction Azure Virtual Desktop (AVD) is Microsoft’s comprehensive Desktop-as-a-Service platform, enabling secure remote access to Windows desktops and apps from virtually an...

Automation #Azure Virtual Desktop #Azure