We have a very busy week with lots of announcements!
Today we are announcing that Azure AD Application Proxy now support publishing Windows Server Network Device Enrollment Service (NDES). This is useful for Intune and System Center Configuration Management (SCCM) deployments. Customers that purchase the Enterprise Mobility Suite (EMS) that includes both Intune and Azure AD Premium can deploy Intune now with no DMZ requirements. You can read more about it here: http://blogs.technet.com/b/ems/archive/2015/02/25/part-4-protecting-ndes-with-azure-ad-application-proxy.aspx
NDES protocol have unique networking patterns as it utilizes very long URL parameters. We had to change the service to accommodate this kind of traffic.
There are more news coming in the next weeks - stay (In)tune.