Version 2.26.108$$$Released for download on February 9; 2026.$$$$$$Functional changes$$$Support for Private Access for Microsoft Entra-registered devices (preview). For more information; see Bring Your Own Device.$$$Removes Device is Microsoft Entra Joined and Entra user signed in to Windows from health check tests since these checks are no longer prerequisites. The client supports Microsoft Entra-registered devices.$$$Optimizes Intelligent Local Access (ILA) detection by reevaluating the status on each network change.$$$The client interface adds Join type to indicate whether the device is registered or joined to the users Microsoft Entra ID tenant.$$$The Global Secure Access tracert includes a 50-MB speed test between the client and the edge.$$$Support for Windows in Turkish.$$$Other changes$$$The Global Secure Access client certificate is removed if the certificate is no longer needed.$$$Improves management of stale internal Global Secure Access connections going on the network.$$$Adds power configuration and logs; Windows services list; and drivers list to the collected logs.$$$Enhances the logs for the log collection process.$$$Enhances the health check tests.$$$Accessibility improvements.$$$New telemetries are available.$$$Miscellaneous bug fixes and improvements.

Version 2.22.90$$$Released for download on November 5; 2025.$$$$$$Functional changes$$$A new Windows service; Global Secure Access Forwarding Profile Service; replaces the previous Global Secure Access Policy Retriever Service.$$$Support for interactive sign-in to get the forwarding profile; for example; if MFA or Terms of Use are required.$$$The Get policy button lets you poll the Global Secure Access cloud service for the latest forwarding profile.$$$Bug fix: the client uses Private DNS only when the Private Access channel is active.$$$Other changes$$$New telemetries are now available.$$$Miscellaneous bug fixes and improvements.

Version 2.22.90$$$Released for download on November 5; 2025.$$$$$$Functional changes$$$A new Windows service; Global Secure Access Forwarding Profile Service; replaces the previous Global Secure Access Policy Retriever Service.$$$Support for interactive sign-in to get the forwarding profile; for example; if MFA or Terms of Use are required.$$$The Get policy button lets you poll the Global Secure Access cloud service for the latest forwarding profile.$$$Bug fix: the client uses Private DNS only when the Private Access channel is active.$$$Other changes$$$New telemetries are now available.$$$Miscellaneous bug fixes and improvements.

Version 2.20.56$$$Released for download on June 24; 2025.$$$$$$Functional changes$$$New Global Secure Access client installer for Windows on Arm is available for download in the portal.$$$A new client user interface with channel status; a troubleshooting section; and settings. To open the interface; double-click the Global Secure Access icon in the system tray.$$$Telemetry collection is enabled.$$$The new UI includes a link to Microsofts privacy policy to comply with the telemetry collection policy.$$$The client supports non-ASCII characters in the OS name.$$$The Advanced Diagnostics tool has accessibility improvements.$$$The Global Secure Access client cleans up Name Resolution Policy Table (NRPT) rules when it starts in Private Access disabled mode.$$$The client supports DNS records that point to an IP in the 127.0.0.0/8 address range.$$$Other changes$$$.NET Runtime is upgraded to version 8.0.14.$$$OneAuth is upgraded to version 5.6.0.$$$Improvements and bug fixes for Advanced diagnostics.$$$Miscellaneous bug fixes and improvements.

Version 2.20.56$$$Released for download on June 24; 2025.$$$$$$Functional changes$$$New Global Secure Access client installer for Windows on Arm is available for download in the portal.$$$A new client user interface with channel status; a troubleshooting section; and settings. To open the interface; double-click the Global Secure Access icon in the system tray.$$$Telemetry collection is enabled.$$$The new UI includes a link to Microsofts privacy policy to comply with the telemetry collection policy.$$$The client supports non-ASCII characters in the OS name.$$$The Advanced Diagnostics tool has accessibility improvements.$$$The Global Secure Access client cleans up Name Resolution Policy Table (NRPT) rules when it starts in Private Access disabled mode.$$$The client supports DNS records that point to an IP in the 127.0.0.0/8 address range.$$$Other changes$$$.NET Runtime is upgraded to version 8.0.14.$$$OneAuth is upgraded to version 5.6.0.$$$Improvements and bug fixes for Advanced diagnostics.$$$Miscellaneous bug fixes and improvements.