'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Troubleshoot Global Secure Access Client Tunneling on macOS
Question details
The user needs to resolve tunneling and edge listening failures in the Global Secure Access Client on macOS.
- Product
- Microsoft Global Secure Access Client
- Device & OS
- macOS
- Scenario
- Connecting to corporate networks securely using the Global Secure Access Client on a Mac device.
- Observed behavior
- The client checklist displays 'Tunnelling succeeded: No' and 'Edge Listening: No', preventing secure network access.
Ensure your Mac is connected to a stable internet connection and that you have local administrator credentials, as modifying network and client configurations will require them.
Verify Entra ID Licensing and Admin Configuration
Ensure your organization has the correct Microsoft Entra ID P1 licenses and that your macOS client is fully authorized.
Global Secure Access requires specific Microsoft Entra ID licenses and proper backend configurations to function. Without these, the macOS client will fail to establish a tunnel.
Log in to the Microsoft Entra admin center as an administrator and navigate to 'Licenses' to verify that Microsoft Entra ID P1 or P2 is active for your users.
Go to 'Global Secure Access (preview)' > 'Connect' > 'Client download' to ensure the macOS client is supported and enabled in your tenant.
On your Mac, open the Global Secure Access Client, check for updates, and verify you are running the latest version compatible with your macOS release.
Collect Client Logs for Advanced Troubleshooting
Gather macOS system and client logs to pinpoint connectivity or permissions errors preventing edge listening.
Boost Your Productivity with WPS Office on Mac
While resolving complex Microsoft Entra network access issues, consider streamlining your daily tasks with WPS Office. It provides a lightweight, highly compatible, and free alternative to Microsoft Office, ensuring your document workflows remain uninterrupted on your Mac.
- 1. Download the installer: Visit the official WPS Office website and download the macOS version.
- 2. Install the application: Open the downloaded .dmg file and drag the WPS Office icon to your Applications folder.
- 3. Start creating: Launch WPS Office and open your existing Microsoft Office files instantly without format loss.
Frequently Asked Questions
Why does the client say 'Edge Listening: No' on my Mac?
This typically occurs when the client lacks the necessary system permissions to intercept network traffic, or if another VPN/security software is already bound to the required network ports on your Mac.
Does the Global Secure Access Client work on all macOS versions?
No, you must ensure your Mac is running a supported macOS version as specified in the Microsoft Entra admin center. Outdated OS versions may cause tunneling failures.
Can I fix licensing issues locally on my Mac?
Licensing issues must be resolved by your IT administrator in the Microsoft Entra admin center. You cannot fix Entra ID P1/P2 license assignments directly from the macOS client.
How do I know if a firewall is blocking the tunneling?
You can review the exported client logs for connection timeout errors or check your Mac's 'Network' settings and 'Privacy & Security' settings to see if local firewall rules are restricting the Global Secure Access Client.
