Merill Fernando 
Most VPN migrations fail before they even start.
Not because of technology.
Because of approach.
In our latest podcast, remote access expert Richard Hicks shares something interesting:
1/5
He’s helped organizations transition away from legacy VPNs multiple times and the successful migrations all follow a similar pattern.
One of the biggest secrets?
👉 Don’t rip out the VPN first.
Instead:
🔹 Deploy Microsoft Entra Private Access alongside the existing VPN
2/5
🔹 Let the new client intercept traffic before the tunnel
🔹 Gradually move apps over
🔹 Then retire the VPN
This reduces risk dramatically and gives teams time to understand how identity-based access changes the model.
The shift is bigger than most teams expect:
3/5
🔰 Legacy VPN → network access
🔰 Modern Zero Trust → application access
If you're considering moving to Microsoft Entra Private Access, this episode is full of practical lessons from someone who has already done it several times.
4/5
🎧 Watch the full conversation at https://entra.news/p/how-to-migrate-from-legacy-vpns-to
5/5
5/5
How to Migrate from Legacy VPNs to Entra Private Access (Real Strategies from a Veteran)
VPN → Entra