Azure AD Application Proxy Service vs. VPNs

%3CLINGO-SUB%20id%3D%22lingo-sub-1364426%22%20slang%3D%22en-US%22%3EAzure%20AD%20Application%20Proxy%20Service%20vs.%20VPNs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1364426%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20there%20any%20advantages%20to%20using%20the%20Azure%20Active%20Directory%20Application%20Proxy%20Service%20over%20virtual%20private%20networks%20(VPNs)%20for%20enabling%20remote%20access%20to%20applications%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1364426%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Active%20Directory%20Application%20Proxy%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Evpn%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1364442%22%20slang%3D%22en-US%22%3ERE%3A%20Azure%20AD%20Application%20Proxy%20Service%20vs.%20VPNs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1364442%22%20slang%3D%22en-US%22%3EHi%20Kurt%2C%20the%20main%20benefit%20of%20using%20App%20Proxy%20over%20VPN%20is%20to%20be%20able%20to%20leverage%20additional%20security%20features%20such%20as%20Conditional%20Access.%20By%20adding%20an%20app%20to%20App%20Proxy%2C%20you%20can%20then%20place%20that%20on-premises%20app%20behind%20Conditional%20Access%20policies%20that%20can%20do%20things%20like%20require%20MFA%20or%20other%20controls.%20You%20might%20find%20this%20blog%20interesting%20as%20well%20for%20Conditional%20Access%20best%20practices%20for%20remote%20work%3A%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-active-directory-identity%2Ffrequent-questions-about-using-conditional-access-to-secure%2Fba-p%2F1276932%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-active-directory-identity%2Ffrequent-questions-about-using-conditional-access-to-secure%2Fba-p%2F1276932%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1364457%22%20slang%3D%22en-US%22%3ERE%3A%20Azure%20AD%20Application%20Proxy%20Service%20vs.%20VPNs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1364457%22%20slang%3D%22en-US%22%3EUsing%20App%20Proxy%20also%20gives%20your%20end%20users%20an%20easier%20way%20to%20access%20applications%20without%20the%20need%20to%20connect%20or%20enable%20a%20VPN.%20They%20can%20just%20go%20to%20the%20application%20without%20taking%20extra%20steps%20first.%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Are there any advantages to using the Azure Active Directory Application Proxy Service over virtual private networks (VPNs) for enabling remote access to applications? 

2 Replies
Highlighted
Hi Kurt, the main benefit of using App Proxy over VPN is to be able to leverage additional security features such as Conditional Access. By adding an app to App Proxy, you can then place that on-premises app behind Conditional Access policies that can do things like require MFA or other controls. You might find this blog interesting as well for Conditional Access best practices for remote work: https://techcommunity.microsoft.com/t5/azure-active-directory-identity/frequent-questions-about-usin...
Highlighted
Using App Proxy also gives your end users an easier way to access applications without the need to connect or enable a VPN. They can just go to the application without taking extra steps first.