Share via

GSA macOS Client -

Alex 5 Reputation points
2026-03-19T04:06:29.21+00:00

GSA macOS Client — Support Ticket

Two issues: DNS resolution failures + tunnel provider crashes

Environment

GSA Client1.1.25111702PlatformmacOS 26.3.1 (Sequoia) — Intune-managed MacBook fleetEdgeAustralia EastProfilesPrivate Access + Microsoft 365 (Internet Access not licensed)ScopeMultiple users, multiple networks, random sites---

Issue 1: Intermittent DNS Resolution Failures

Users randomly get ERR_NAME_NOT_RESOLVED in the browser. Affects multiple users, networks, and unrelated domains. Restarting GSA temporarily fixes it.

Cause

GSA's DNS resolver uses a single thread (dns_config ThreadsToUse: 1). When the resolver is under any load, legitimate DNS queries for bypass-destined domains fail instantly with error -65554 in under 30ms — far too fast for a real timeout. GSA returns 0.0.0.0 to the OS and the browser shows ERR_NAME_NOT_RESOLVED.

Evidence

Example domain — query to failure in 29ms:

[11:49:39.128] DNS_FILTER using dns service for qname
Azure DNS
Azure DNS

An Azure service that enables hosting Domain Name System (DNS) domains in Azure.

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alex 5 Reputation points
    2026-03-30T22:28:36.5066667+00:00

    I ended up resolving the issue with the affected user by doing the following:

    1. Uninstalling GSA
    2. Running the following commands:

    sudo rm -rf "/var/root/Library/Application Support/com.microsoft.globalsecureaccess.tunnel/"  sudo rm -f /etc/resolver/private.edgediagnostic.globalsecureaccess.microsoft.com sudo rm -f /etc/resolver/auth.edgediagnostic.globalsecureaccess.microsoft.com sudo rm -rf "/Library/Logs/Microsoft/globalsecureaccessclient/" sudo systemextensionsctl reset

    1. Re-installed GSA
    2. I then had to get a naas_policy from a working pc using:

    sudo cat "/var/root/Library/Application Support/com.microsoft.globalsecureaccess.tunnel/naas_policy"

    1. I then sent to the affected user and they copied it from their downloads to the following location:

    sudo mkdir -p "/var/root/Library/Application Support/com.microsoft.globalsecureaccess.tunnel/" sudo cp ~/Downloads/naas_policy "/var/root/Library/Application Support/com.microsoft.globalsecureaccess.tunnel/naas_policy" sudo chmod 600 "/var/root/Library/Application Support/com.microsoft.globalsecureaccess.tunnel/naas_policy"

    After restarting GSA/getting latest policy on user machine it worked.

    I suspect there was some stale config in one of these files that was causing the issue even after re-installing GSA. Clearing all this seemed to fix it.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.