Azure App Proxy - Accessing application via internal URL in Intune Managed Edge Browser Trouble

Matt Adorjan 11 Reputation points
2020-09-06T21:03:40.813+00:00

I am working on getting some apps published via the Azure Application Proxy so we can begin our PoC of using Intune for our MDM solution. I am having overall success, but am stuck on one part that I'm hoping someone here will be able to help with.

I have an Enterprise App configured to use the App proxy:

Internal URL: http://internalapp/

App Proxy URL: https://internalapp-organization.msappproxy.net/

Etc...

I have Microsoft Edge as an app available via Intune and installed on mobile devices. Edge has an app protection policy assigned to it, as well as an App Configuration Policy which does many customizations, but specifically has the AppProxyRedirection setting set to 'true'.

From within my Edge Browser on iOS, I'm able to access the application at the App Proxy URL (https://internalapp-organization.msappproxy.net/). But whenever I try to access via the internal URL (http://internalapp/), I get a standard "can't reach this page" error.

Any ideas if I'm doing something wrong or other places I should be checking?

Microsoft Security | Intune | Application management
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Edge | Microsoft Edge development
{count} votes

2 answers

Sort by: Most helpful
  1. Vipul Sparsh 16,331 Reputation points Microsoft Employee Moderator
    2020-09-07T08:52:16.94+00:00

    @Matt Adorjan Thanks for reaching out. When you say you are trying to access the app via internal URL : http://internalapp/ I am assuming that you are already connected to your internal corp network either directly or via some VPN.

    As mobile devices which are external to corp network and are not connected to VPN would not be able to access your internal DNS and thus show the app over internal URL. If you are on corp network and still cannot access it, you would have to check for your internal DNS and see if the entries are pointing towards correct server/app.

    Intune would only come to picture if everything is working before implementing the Intune app protection policies and configuration policies and when you apply Intune policies few of the urls does not open. They can help in these scenario.

    For now, just verify that you are on corp network and proper entries are in place. You can match them with any other internal App URL.

    -----------------------------------------------------------------------------------------------------------------

    If the suggested response helped you resolve your issue, do click on "Mark as Answer" and "Up-Vote" for the answer that helped you for benefit of the community.


  2. Jason Sandys 31,421 Reputation points Microsoft Employee Moderator
    2020-09-08T00:30:53.587+00:00

    From within my Edge Browser on iOS, I'm able to access the application at the App Proxy URL (https://internalapp-organization.msappproxy.net/). But whenever I try to access via the internal URL (http://internalapp/), I get a standard "can't reach this page" error.

    This is exactly what is supposed to happen. You need to reconfigure the apps to use the new URL.

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.