Accessing Fileserver with Smartphone using Intune

Question

In my current environment we are using Airwatch for all Smartphones, and Intune for Windows 10 Devices. The Rollout for all Windows Devices is almost finished and so we are thinking about using Intune for all the Smartphone Devices as well.

The biggest use case with Airwatch is the Add-On "Content Locker" which allows our Users to gain access (with a Content Gateway) to our On Premise Ressources just like the Fileserver. I already read the whole day about two Intune / Azure alternatives which would be "Microsoft Tunnel Gateway" and "Azure AD Application Proxy". I think the first one is to establish a VPN Tunnel for all the smartphones, but thats not exactly what the Content Locker is doing I guess. With Content Locker only the App itself creates some kind of tunnel to the On Premise infrastructure, so the App Proxy seems to be more the solution im searching for. Is there someone who can help me and give me a few hinds on how to proceed ?

Best regards

Answer 1

@Halogeen Thanks for posting in our Q&A.

For Azure AD Application Proxy, it is related to Azure AD. It is suggest to post a new one and only add Azure AD tag.

For Microsoft Tunnel, it allows access to on-premises resources from mobile devices using modern authentication and Conditional Access. We can watch the video to learn some information about Microsoft Tunnel.
https://www.youtube.com/watch?v=fOnbNRb4i30

Or we can read the following article as a reference.
https://learn.microsoft.com/en-us/mem/intune/protect/microsoft-tunnel-configure

Hope the above information will help.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Microsoft tunnel is a per-app VPN no different than how you've described this alternate third-party solution. How exactly that is implemented is specific to iOS and Android and these VPN facilities (in all cases to my knowledge) are provided by the underlying OS.