While this has been announced that the Global Secure Access client for Windows devices will be automatically updated through Windows Update (see Entra ID – A new version of the Global Secure Access is available) which will be available starting November 2026, there has been a new GSA client version (2.34.222) for Windows.
This means you must manually deploy this new version:
- x64 bits download link GSA Client for Windows x64
- ARM64 download link GSA Client for Windows ARM64
This new version introduces the below changes:
- Add support for Web sign-ins for Windows (know more about web sign-ins here Use Web Sign-In To Enable Passwordless Sign-In In Windows | Microsoft Learn)
- Support for conditional access sign-in frequency for private access application; support for it is currently being rolled out which means it will work only when your tenant will have the updated capability for conditional access
- Windows Firewall does not automatically activate for domain profile when private access is enabled and the device is not directly connected to the corporate network
- When using Forwarding Profile, the traffic forwarding profile name is showing up the same way as from the Entra ID admin portal in the Advanced diagnostics
In addition, the usual bug fixes and improvements.
So when deploying this new version, the below detection rule must be used – unless you have opt-out for the update through Windows Updates;
- Rule type: File
- Path: C:\Program Files\Global Secure Access Client
- File or folder: GlobalSecureAccessClientManagerService.exe
- Detection method: String (version)
- Operator: Greater than or equal
- Value: 2.34.222.0
Until next month when Global Secure Access client will be updated with Windows Updates.