Global Secure Access's Internet Access Canadian Point of Presentation/Source Egress IP Available?

Question

Hello,

This is regarding Global Secure Access Internet Access (GSA IA) Traffic Forwarding Point of Presence (PoP) through the WWW; it appears that currently there are only Washington USA based egress IP addresses (no Canada IP blocks?)...when traffic that is acquired by the GSA in a Windows 11 agent, for Internet access controlled via Entra ID GSA-IA Traffic Forwarding, the Windows client agent's traffic/access to the WWW, appears to have a Washington USA PoP; i.e. the Canadian computer's "source IP address" through the GSA IA, appears to come from Washington USA (Microsoft's IP block). Even though the GSA agent is in Canada (and Candian Datacenter residency for M365) when the Canadian GSA-IA agent visits a website, the source public IP address of the client is the Washington USA Public IP addresses.

I have not found any options whether in Conditional Access, or the Entra ID Tenant settings or anywhere else that would allow us to choose a Canadian Datacentre source these IP addresses for the GSA IA Traffic Forwarding profiles.

I could be wrong...it appears that at the moment only Washington USA subnets, as shown in the Microsoft link below, are available, such as 128.94.0.0/19, 151.206.0.0/16: https://learn.microsoft.com/en-us/entra/global-secure-access/reference-points-of-presence#global-secure-access-egress-ip-ranges (from https://learn.microsoft.com/en-us/entra/global-secure-access/reference-points-of-presence#global-secure-access-egress-ip-ranges).

Have I missed something or the option that we are looking for does not yet exist?

Thank you.

Answer 1

Hi @CENSS-Ken

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue:

Global Secure Access's Internet Access Canadian Point of Presentation/Source Egress IP Available?

Solution:

You got to know that the current egress IP ranges for GSA IA are indeed based in the USA, Microsoft periodically updates their services and adds new locations.

If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.