Global Secure Access vs AVD client

Question

Does the global secure access (GSA) client in Entra replace the AVD client? I'm trying to decide the best secure way to setup remote employee access to apps and services and I'm a little unsure if I need both the GSA/AVD or just one. I know I can configure AVD private link to workspace apps or desktop, but the new GSA is supposed to provide greater security and do the same in conjunction with the Company portal.

Answer 1

Hi Tyro Beatty, I want to help you with this question.

The Global Secure Access (GSA) client in Microsoft Entra serves a distinct purpose and does not directly replace the Azure Virtual Desktop (AVD) client. The AVD client is essential for seamless interaction with Azure Virtual Desktop environments. GSA client enhances security within the Microsoft Entra ecosystem.

There are also some limitations of GSA at the moment:

• No support for multiple user sessions on the same device (e.g., Remote Desktop Server).
• Potential issues with networks using captive portals.
• Not yet supported on ARM64 architecture (though it’s on the roadmap).
• Specific limitations based on the traffic forwarding profile used.

I hope this will answer your questions.

---

If the reply was helpful, please don’t forget to upvote or accept it as an answer, thank you!