Search This Blog

Thursday, August 14, 2025

Understanding Microsoft Entra Application Proxy and Connectors

 Microsoft Entra Application Proxy allows you to publish on-premises web applications securely to external users without opening inbound firewall ports. A connector is a lightweight agent that you install on an on-premises Windows Server. The connector creates an outbound connection to the Microsoft Entra Application Proxy service, which then securely forwards requests from external users to the internal web apps.


The number of connectors required is determined by the network segments the web servers are on, not the number of applications or servers.


Servers on the same network segment: All servers on the same network segment (e.g., in the same address space) can be served by a single connector. The connector can reach all applications on that segment.


Servers on different network segments: If servers are on different network segments that a single connector cannot reach, you must install a separate connector for each unreachable segment.

No comments:

Post a Comment