On Horizon Cloud Service on Microsoft Azure, Unified Access Gateway appliances can be deployed as part of the Horizon Cloud pod’s gateway configuration. This strategy provides external access for Workspace ONE users to internal resources, such as web applications, file repositories, and virtual desktops and applications. Multiple Unified Access Gateway appliances were deployed on vSphere to support the whole Workspace ONE environment. Table 1: Implementation Strategy for External Access for the Entire Workspace ONE Environment For Microsoft Hyper-V, only VMware Tunnel ®, Content Gateway, and Secure Email Gateway edge services are supported. Unified Access Gateway, and all its edge services, support being deployed across VMware vSphere ®, Microsoft Azure, and Amazon Web Services. It also can perform the authentication itself, leveraging additional authentication methods when enabled.įigure 1: Unified Access Gateway Logical Architecture Unified Access Gateway directs authenticated requests to the appropriate resource and discards any unauthenticated requests. When providing access to internal resources, Unified Access Gateway can be deployed within the corporate DMZ or internal network, and acts as a proxy host for connections to your company’s resources.

Secure external access to desktops and applications on VMware Horizon ® Cloud Service ™ on Microsoft Azure, and VMware Horizon ® on vSphere.

Identity bridging for authentication to on-premises legacy applications that use Kerberos or header-based authentication.

Access from VMware Workspace ONE ® Content to internal file shares or SharePoint repositories by running the Content Gateway service.

This capability leverages the Secure Email Gateway service integrated with VMware Workspace ONE ® Unified Endpoint Management (UEM).

Secure on-premises email infrastructure that grants access only to authorized devices, users, and email applications based on managed policies.

Per-app tunneling of native and web apps on mobile and desktop platforms to secure access to internal resources through the VMware Tunnel service.

Unified Access Gateway supports multiple use cases:

VMware Unified Access Gateway ™ is an extremely useful component within a VMware Workspace ONE ® and VMware Horizon ® deployment because it enables secure remote access from an external network to a variety of internal resources.

Airwatch uag