When configuring Global Secure Access - Internet Access for on-premises or non-Azure servers/devices (including Linux), the devices must first be onboarded into Microsoft Entra through Azure Arc. To onboard Linux servers or machines, the Azure Connected Machine agent must be installed. This agent connects the on- premises device to Azure Arc, enabling visibility, policy application, and integration with Global Secure Access.
Options such as deploying a Private Network Connector (A) or creating a Remote Network (D) apply to routing network traffic for Private Access, not onboarding non-Azure devices. Adaptive Access settings (B) are policy-level controls, not onboarding prerequisites.