Azure App Proxy - Accessing application via internal URL in Intune Managed Edge Browser Trouble

Matt Adorjan 6 Reputation points
2020-09-06T21:03:40.813+00:00

I am working on getting some apps published via the Azure Application Proxy so we can begin our PoC of using Intune for our MDM solution. I am having overall success, but am stuck on one part that I'm hoping someone here will be able to help with.

I have an Enterprise App configured to use the App proxy:

Internal URL: http://internalapp/

App Proxy URL: https://internalapp-organization.msappproxy.net/

Etc...

I have Microsoft Edge as an app available via Intune and installed on mobile devices. Edge has an app protection policy assigned to it, as well as an App Configuration Policy which does many customizations, but specifically has the AppProxyRedirection setting set to 'true'.

From within my Edge Browser on iOS, I'm able to access the application at the App Proxy URL (https://internalapp-organization.msappproxy.net/). But whenever I try to access via the internal URL (http://internalapp/), I get a standard "can't reach this page" error.

Any ideas if I'm doing something wrong or other places I should be checking?

Microsoft Edge
Microsoft Edge
A Microsoft cross-platform web browser that provides privacy, learning, and accessibility tools.
2,113 questions
Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
872 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,380 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. VipulSparsh-MSFT 16,231 Reputation points Microsoft Employee
    2020-09-07T08:52:16.94+00:00

    @Matt Adorjan Thanks for reaching out. When you say you are trying to access the app via internal URL : http://internalapp/ I am assuming that you are already connected to your internal corp network either directly or via some VPN.

    As mobile devices which are external to corp network and are not connected to VPN would not be able to access your internal DNS and thus show the app over internal URL. If you are on corp network and still cannot access it, you would have to check for your internal DNS and see if the entries are pointing towards correct server/app.

    Intune would only come to picture if everything is working before implementing the Intune app protection policies and configuration policies and when you apply Intune policies few of the urls does not open. They can help in these scenario.

    For now, just verify that you are on corp network and proper entries are in place. You can match them with any other internal App URL.

    -----------------------------------------------------------------------------------------------------------------

    If the suggested response helped you resolve your issue, do click on "Mark as Answer" and "Up-Vote" for the answer that helped you for benefit of the community.

  2. Jason Sandys 31,151 Reputation points Microsoft Employee
    2020-09-08T00:30:53.587+00:00

    From within my Edge Browser on iOS, I'm able to access the application at the App Proxy URL (https://internalapp-organization.msappproxy.net/). But whenever I try to access via the internal URL (http://internalapp/), I get a standard "can't reach this page" error.

    This is exactly what is supposed to happen. You need to reconfigure the apps to use the new URL.

    0 comments