Entra private access country choice

Matheus 20 Reputation points
2025-08-19T09:21:30.4066667+00:00

Hello,

I have been considering Entra Private Access for a customer that needs to access some on-premises servers.

However, when creating the connector, I can only choose Europe as the routing:Screenshot 2025-08-19 111634

The customer in question requires traffic to be restricted to Switzerland.

According to this list of countries https://learn.microsoft.com/en-us/entra/global-secure-access/reference-points-of-presence, Switzerland has Global Secure Access deployed.

Is there any way I can restrict to Switzerland only?

Thank you very much.

Matheus

Microsoft Security | Microsoft Entra | Microsoft Entra Private Access
0 comments No comments
{count} votes

Answer accepted by question author
  1. Swaroop Kolli 5,170 Reputation points Microsoft External Staff Moderator
    2025-08-19T12:19:51.57+00:00

    Hello @Matheus,

    Currently, when setting up an Entra Private Access connector, the routing region selection is limited to broader regions like "Europe" rather than specific countries such as Switzerland.

    Unfortunately, requiring traffic to be restricted to Switzerland is not possible at a tenant level.

    Switzerland is indeed listed as a Global Secure Access point of presence, which means Microsoft has infrastructure there to support secure access routing. However, the connector UI does not yet expose country-level granularity for routing selection.

    You can use Conditional Access policies and segmentation features to control access at a more granular level. You can use Named Locations in Conditional Access to define geographic boundaries and link it to the application object.

    However, these do not guarantee that traffic will be routed exclusively through Swiss infrastructure, but you can control who can access it from which location/country based on IP address, not how traffic is routed.

    Unfortunately, we had hit the limitation, we always look to improve and would love to hear your thoughts. If you have any ideas or feedback on the feature in the question, please let us know your idea in the below given portal and our development team would be constantly monitoring them. https://feedbackportal.microsoft.com/feedback


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.