Skip to main content
Solved

Intune VPN support for Hybrid Azure AD join

  • November 3, 2021
  • 2 replies
  • 152 views
R
Forum|alt.badge.img+3

Good afternoon all,

 

I've got a slight issue and I'm wondering if anyone here can help me with this, I'm looking to set up a VPN connection so I can create an online hybrid azure AD join from Microsoft Endpoint. I need direct visibility of our on-prem domain controllers

 

Now I guess the first question is, is this actually possible with the options Netskope has available? I can see the following options available within Endpoint IKEv2, PPTP and L2TP

 

All I'm looking for is a VPN tunnel which will only provide access to domain controllers over the internet during the build process. Can NetSkope facilitate this?

 

Thanks very much

RGE_Master

Best answer by mkoyfman

@RGE_Master Yes, you can define access to Active Directory using Private Access according to this guide: https://docs.netskope.com/en/netskope-private-access-for-microsoft-active-directory-domain-services.html

 

You will need to setup client installation/distribution as an app - while I don't have we have Intune-specific instructions, you can look at SCCM-based instructions for reference: https://docs.netskope.com/en/deploy-netskope-client-with-sccm.html

 

But in short, Netskope does not use traditional VPN frameworks built into Windows, you have to deploy Netskope client using Intune.  Also, depending on your circumstances, it will require usage of Windows Pre-Login NPA tunnel which is currently under development. 

    This topic has been closed for replies.

    2 replies

    M
    Netskope Employee
    Forum|alt.badge.img+15
    • mkoyfman
    • Netskope Employee
    • Answer
    • November 3, 2021

    @RGE_Master Yes, you can define access to Active Directory using Private Access according to this guide: https://docs.netskope.com/en/netskope-private-access-for-microsoft-active-directory-domain-services.html

     

    You will need to setup client installation/distribution as an app - while I don't have we have Intune-specific instructions, you can look at SCCM-based instructions for reference: https://docs.netskope.com/en/deploy-netskope-client-with-sccm.html

     

    But in short, Netskope does not use traditional VPN frameworks built into Windows, you have to deploy Netskope client using Intune.  Also, depending on your circumstances, it will require usage of Windows Pre-Login NPA tunnel which is currently under development. 

    R
    R
    Forum|alt.badge.img+3
    • RGE_Master
    • Author
    • New Member III
    • November 4, 2021

    Good morning mkoyfman,

     

    That's fantastic thank you for the documentation, I'll have a read of that today coupled with the SCCM configuration and see if I can make it work with our configuration. 

     

    This is a great start to something I had no idea where to begin so thanks very much.

     

    Be safe

     

    Badges Winner

    Show all badges

    Not finding what you're looking for?

    Don't be shy and let us know about your challenge.

    Ask your question here!
    Terms & ConditionsCookie settingsAccessibility statement