Version 2.28.96$$$Released for download on April 27; 2026.$$$$$$Functional changes$$$The Sign Out button shows by default only on Microsoft Entra-registered devices. For Microsoft Entra-joined devices; the option is hidden and you can show it by setting a registry key. For details; see Hide or unhide system tray menu buttons.$$$The Sign Out button is now in the user interface in the account control in the main Global Secure Access client window. Its no longer available in the system tray menu.$$$A user can sign out from the Global Secure Access client and sign in as a different user in a different tenant onboarded to Global Secure Access.$$$When the client is signed out; the Sign In button replaces Sign Out in the account control in the main Global Secure Access client window.$$$Traffic logs in the Microsoft Entra admin center include the device join type; cross-tenant access type; and home tenant ID.$$$Enhancement to Intelligent Local Access: supports the ability to assign (in the portal) a private application to multiple private networks.$$$Enhancement to Intelligent Local Access: adds Private Networks section to the Forwarding profile tab in the Advanced diagnostics tool.$$$Other changes$$$Internal internet connection test no longer requires access to msn.com (this change removes a dependency on an external website introduced in version 2.26.108). Note: the connection test still requires access to www.msftconnecttest.com.$$$Advanced log collection includes Kerberos logs and the output of gpresult.$$$Log collection includes the list of the devices root Certificate Authorities (CAs).$$$New telemetries are available.$$$Miscellaneous bug fixes and improvements.

Version 2.26.108$$$Released for download on February 9; 2026.$$$$$$Functional changes$$$Support for Private Access for Microsoft Entra-registered devices (preview). For more information; see Bring Your Own Device.$$$Removes Device is Microsoft Entra Joined and Entra user signed in to Windows from health check tests since these checks are no longer prerequisites. The client supports Microsoft Entra-registered devices.$$$Optimizes Intelligent Local Access (ILA) detection by reevaluating the status on each network change.$$$The client interface adds Join type to indicate whether the device is registered or joined to the users Microsoft Entra ID tenant.$$$The Global Secure Access tracert includes a 50-MB speed test between the client and the edge.$$$Support for Windows in Turkish.$$$Other changes$$$The Global Secure Access client certificate is removed if the certificate is no longer needed.$$$Improves management of stale internal Global Secure Access connections going on the network.$$$Adds power configuration and logs; Windows services list; and drivers list to the collected logs.$$$Enhances the logs for the log collection process.$$$Enhances the health check tests.$$$Accessibility improvements.$$$New telemetries are available.$$$Miscellaneous bug fixes and improvements.

Version 2.26.108$$$Released for download on February 9; 2026.$$$$$$Functional changes$$$Support for Private Access for Microsoft Entra-registered devices (preview). For more information; see Bring Your Own Device.$$$Removes Device is Microsoft Entra Joined and Entra user signed in to Windows from health check tests since these checks are no longer prerequisites. The client supports Microsoft Entra-registered devices.$$$Optimizes Intelligent Local Access (ILA) detection by reevaluating the status on each network change.$$$The client interface adds Join type to indicate whether the device is registered or joined to the users Microsoft Entra ID tenant.$$$The Global Secure Access tracert includes a 50-MB speed test between the client and the edge.$$$Support for Windows in Turkish.$$$Other changes$$$The Global Secure Access client certificate is removed if the certificate is no longer needed.$$$Improves management of stale internal Global Secure Access connections going on the network.$$$Adds power configuration and logs; Windows services list; and drivers list to the collected logs.$$$Enhances the logs for the log collection process.$$$Enhances the health check tests.$$$Accessibility improvements.$$$New telemetries are available.$$$Miscellaneous bug fixes and improvements.

Version 2.22.90$$$Released for download on November 5; 2025.$$$$$$Functional changes$$$A new Windows service; Global Secure Access Forwarding Profile Service; replaces the previous Global Secure Access Policy Retriever Service.$$$Support for interactive sign-in to get the forwarding profile; for example; if MFA or Terms of Use are required.$$$The Get policy button lets you poll the Global Secure Access cloud service for the latest forwarding profile.$$$Bug fix: the client uses Private DNS only when the Private Access channel is active.$$$Other changes$$$New telemetries are now available.$$$Miscellaneous bug fixes and improvements.

Version 2.22.90$$$Released for download on November 5; 2025.$$$$$$Functional changes$$$A new Windows service; Global Secure Access Forwarding Profile Service; replaces the previous Global Secure Access Policy Retriever Service.$$$Support for interactive sign-in to get the forwarding profile; for example; if MFA or Terms of Use are required.$$$The Get policy button lets you poll the Global Secure Access cloud service for the latest forwarding profile.$$$Bug fix: the client uses Private DNS only when the Private Access channel is active.$$$Other changes$$$New telemetries are now available.$$$Miscellaneous bug fixes and improvements.

Version 2.20.56$$$Released for download on June 24; 2025.$$$$$$Functional changes$$$New Global Secure Access client installer for Windows on Arm is available for download in the portal.$$$A new client user interface with channel status; a troubleshooting section; and settings. To open the interface; double-click the Global Secure Access icon in the system tray.$$$Telemetry collection is enabled.$$$The new UI includes a link to Microsofts privacy policy to comply with the telemetry collection policy.$$$The client supports non-ASCII characters in the OS name.$$$The Advanced Diagnostics tool has accessibility improvements.$$$The Global Secure Access client cleans up Name Resolution Policy Table (NRPT) rules when it starts in Private Access disabled mode.$$$The client supports DNS records that point to an IP in the 127.0.0.0/8 address range.$$$Other changes$$$.NET Runtime is upgraded to version 8.0.14.$$$OneAuth is upgraded to version 5.6.0.$$$Improvements and bug fixes for Advanced diagnostics.$$$Miscellaneous bug fixes and improvements.

Version 2.20.56$$$Released for download on June 24; 2025.$$$$$$Functional changes$$$New Global Secure Access client installer for Windows on Arm is available for download in the portal.$$$A new client user interface with channel status; a troubleshooting section; and settings. To open the interface; double-click the Global Secure Access icon in the system tray.$$$Telemetry collection is enabled.$$$The new UI includes a link to Microsofts privacy policy to comply with the telemetry collection policy.$$$The client supports non-ASCII characters in the OS name.$$$The Advanced Diagnostics tool has accessibility improvements.$$$The Global Secure Access client cleans up Name Resolution Policy Table (NRPT) rules when it starts in Private Access disabled mode.$$$The client supports DNS records that point to an IP in the 127.0.0.0/8 address range.$$$Other changes$$$.NET Runtime is upgraded to version 8.0.14.$$$OneAuth is upgraded to version 5.6.0.$$$Improvements and bug fixes for Advanced diagnostics.$$$Miscellaneous bug fixes and improvements.