Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Unable to connect to connect to Microsoft Global Secure Access

Khutulu

Hello,

Anyone able to connect to Microsoft Global Secure Access via their Sunrise Fibre connection?

I am using a Connect Box 3

When I connect to my mobile phone hotspot via Sunrise Mobile, the Global Secure Access client connects perfectly. It only fails to connect via Sunrise Fibre.

Thanks in advance.

Daniele_Sunrise

Khutulu Welcome to the community!

I suspect that the service may be blocked by Surf Protect.

If you don’t need this service, you can disable it in MySunrise under “Options” for your Internet plan. Does the error still occur after that?

Greetings
Daniele

Khutulu

Hi Daniele,

Thanks for the quick reply. I disabled Surf Protection on my account, unfortunately this did not resolve the issue, and GSA still fails to connect.

From the GSA client logs, I can see it fails to resolve some of the URLs. Please see screenshot.

Thanks,
JB

maxell182

Khutulu

This looks like a DNS issue, have you tried to manually set another DNS on your Computers network connection?
eg. 8.8.8.8, the you aren’t dependent on the sunrise one 🙂

br maxell182

edit: typos

Daniele_Sunrise

Khutulu I can’t resolve the domain auth.edgediagnostic.globalsecureaccess.microsoft.com here at Sunrise in the company network. Nor can I resolve this part: edgediagnostic.globalsecureaccess.microsoft.com.

maxell182 , What were your results?

Greetings
Daniele

Khutulu

Thanks @maxell182 for the tip on DNS. Unfortunately still have the same issue (also confirmed my clients are using the new DNS config). Nonetheless, it was a good tip to change the DNS 🙂 Ty

maxell182

Khutulu

I will check at home in the evening, I’m at work via VPN right now and cant check.

br maxell182

maxell182

Hi Daniele_Sunrise

I sadly didn’t find time to do some checks at home yesterday evening.

maxell182

Khutulu

Hi @Daniele_Sunrise and @maxell182,

Thanks for checking. I am digging further into the logs. I now believe that auth.edgediagnostic.globalsecureaccess.microsoft.com is only be accessible after the tunnel is established. When I previously tested, the GSA client actually established a connection the moment I connected to my mobile hotspot (without me realising this), hence why I could reach the URL.

I will check if I can find additional URLs/IPs/Ports required for the GSA client in order to see what could possibly be blocking it via Fibre.

Thanks