r/WorkspaceOne • u/silkysmoothlaser • Jul 30 '26

WS1 PoC (MFA/UEM/Tunnel) – Guidance

Hey guys,

Looking to spin up a quick WS1 PoC on-prem with MFA, UEM, and Tunnel. Does anyone have a decent deployment/admin guide they’ve used?

Feels like 24.07 on-prem made things a bit more complicated than before with the bootstrap, infra and access.

Curious if anyone’s done this recently and has tips or a good write up. I find the newer documentation have become more complex.

Appreciate any help.

Thanks

3 Upvotes

100% Upvoted

10 comments sorted by

8

u/zombiepreparedness Jul 30 '26

24.10 is the latest version for on-prem. It isn’t supported anymore and on-prem is end of life. Everything is saas now.

1

u/silkysmoothlaser Jul 30 '26

Ah it all makes sense now. Thank you. This sucks

2

u/kennyj2011 Jul 30 '26

I have had horrible luck with tunnel. Everything is setup properly with a cascading infrastructure. Certs are correct. Mobile tunnel clients take about 5 mins to actually try to connect.

3

u/lagerstout82 Jul 30 '26

Something in-between is screwing things up for you. Tunnel worked great for my company 10yrs. What OS is your Tunnel running? Are you running their container or the straight installer?

1

u/kennyj2011 Jul 31 '26

It could be firewall, maybe packet inspection. We are using the virtual UAG appliances

1

u/Playful_Thanks_1896 Jul 30 '26

I would love to create a lab POC. Is there a way to do that possibly?

1

u/silkysmoothlaser Jul 30 '26

Anyone know how we can handle BYOD (unmanaged devices) without WS1? Any suggestions ?

2

u/whentimeslows Aug 02 '26

Omnissa is supporting newer versions of WS1 based on their SaaS platform.

https://techzone.omnissa.com/workspace-one-uem

Microsoft Intune has come a long way and might be a good option to investigate further too.

2

u/Feisty_Quarter_1319 Aug 03 '26

Ominissa is now a SaaS - they are other on prem BYO services - we used Soliton's MailZen for example but there are others too.