Edit

Share via

Global Secure Access client for Windows release notes

  • Article

This article lists the released versions of the Global Secure Access client for Windows and the changes in each version.

Download the latest version

The current version of the Global Secure Access client is available to download from the Microsoft Entra admin center.

  1. Sign in to the Microsoft Entra admin center as a Global Secure Access Administrator.
  2. Browse to Global Secure Access > Connect > Client download.
  3. Select Download Client. Screenshot of the client download screen with the Download Client button highlighted.

Version 2.18.62

Released for download on April 29, 2025.

Functional changes

  • Bug fix: Canonical name (CNAME) records resolve as A records to fix a Kerberos browser authentication issue.
  • The default client authentication is Web Account Manager (WAM).

Other changes

  • Bug fix: the client retries connecting to traffic profiles after they're removed from the portal.
  • Bug fix: adds support for operating system names with non-ASCII characters, relevant for some non-English Windows versions.
  • Added and improved health check tests.
  • Improvements and bug fixes for Advanced diagnostics.
  • Miscellaneous bug fixes and improvements.

Version 2.14.80

Released for download on February 26, 2025.

Functional changes

  • Adds support for long-lived User Datagram Protocol (UDP) connections.
  • Adds support for routing connections directly to the network when there's no successful tunnel established to the Global Secure Access cloud service.
  • Adds performance counters to Performance Monitor:
    • Flow count
    • Tunnel count
  • Adds support for Microsoft Cloud for Sovereignty environments.
  • Bug fix: Global Secure Access doesn't preserve the Disable Private Access status after a restart.

Other changes

  • Sends device name to the Global Secure Access cloud service.
  • Bug fix: time sync fails when Internet Access is enabled.
  • Adds telemetry for connections that fail to tunnel and fall back to hardening action.
  • Verifies client certificate validity before using the certificate to establish a mutual Transport Layer Security (mTLS) connection.
  • Improvements and bug fixes for Advanced diagnostics.
  • Miscellaneous bug fixes and improvements.

Version 2.8.45

Released for download on November 26, 2024.

Functional changes

  • Adds support for mTLS connections to Global Secure Access.

Note

The mTLS connection rolls out gradually to customers through the cloud service. Customers continue to use the Transport Layer Security (TLS) connection until they receive mTLS.

  • Adds support for restricting nonprivileged users from disabling and enabling the Global Secure Access client on their device.
  • Show health check tests when loading a log zip file to Advanced diagnostics.
  • Adds support for the Hyper-V internal switch: the Global Secure Access client installed on the host bypasses network traffic from Hyper-V guest machines. If needed, the Global Secure Access client can be installed on the guest machine, on the host machine, or both.

Note

The Global Secure Access client doesn't support host machines with a Hyper-V external virtual switch.

  • The forwarding profile update is triggered when a user signs in to Windows.
  • Global Secure Access client's driver events are written to the Event Viewer under:
    Applications and Services Logs > Microsoft > Windows > Global Secure Access > Kernel
  • Performance improvements for tunneled network traffic.
  • Notifications for entering and exiting captive portals are off by default.
  • On the Advanced diagnostics Traffic tab, status information appears in two columns: Connection status and Status Details. If the Global Secure Access service stops a connection (for example, due to a filtering policy set to block), the Connection status column shows "Terminated" and the Status Details column shows the reason for the termination.
  • To accommodate when sign-in is required, the sign-in window is shown even if Windows notifications are disabled.

Other changes

  • Renamed services:
    • "Global Secure Access Management Service" is now "Global Secure Access Engine Service."
    • "Global Secure Access Auto Upgrade Service" is now "Global Secure Access Client Manager Service."
  • The client's stale registry keys are deleted during uninstall.
  • Bug fix: the policy retriever service stops polling for new policies when it encounters an error.
  • The collected logs zip file name now contains the Global Secure Access client version number.
  • Recovery after failures of the tunneling service.
  • Enables telemetry for test tenants.
  • Enhancements to log collection.
  • Improvements and bug fixes for Advanced diagnostics.
  • Miscellaneous bug fixes and improvements.

Version 2.1.149

Released for download on August 27, 2024.

Functional changes

  • Adds support for coexistence with Azure VPN.
  • Loading the health check results in advanced diagnostics from a zip file (created by collect logs).
  • The Pause and Resume buttons are renamed to Disable and Enable.

Other changes

  • Miscellaneous bug fixes and improvements.

Version 2.1.102

Released for download on July 30, 2024.

Functional changes

  • Adds support for coexistence with Netskope.
  • Adds support for installing the client on Azure virtual machines (VMs).
  • Adds support for signing out.
  • The client updates the status icon and event logs when the user disables Private Access.

Other changes

  • Improves stabilization and reliability of the system tray icon status.
  • Improves captive portal detection.
  • Bug fix: system tray icon crashes when registry keys are manually misconfigured.
  • Miscellaneous bug fixes and improvements.

Versions 2.0.0 and 1.8.239

Released for download on July 11, 2024.

Functional changes

  • First GA version.

Related content