The TMWS Agent app is used for the virtual gateway. The on-premises gateway does not support the app.
Deploy the TMWS Agent app onto individual Android devices. Once deployed, when your users use any of the following browsers, the app forwards the HTTP/HTTPS traffic to TMWS:
  • Chrome
  • Samsung Internet
  • Microsoft Edge
  • Brave
When your users use apps and browsers other than those listed above, the TMWS Agent app does not forward their HTTP/HTTPS traffic to TMWS.


  1. Go to AdministrationSERVICE DEPLOYMENTEnforcement Agent.
  2. On the Enforcement Agent page, configure the following settings:
    • Agent platform: Select Android.
    • Hosted PAC file: Select a PAC file from the drop-down list.
      TMWS provides a default PAC file for use on Android. The PAC files available on the PAC Files screen are also listed. For more information on adding a PAC file, see PAC Files.
      Once selected, the PAC file will apply to the TMWS Agent app.
      If you modify the content of the selected PAC file or choose another PAC file, it will take a few minutes for the update to take effect. If any users encounter network connection issues because of the PAC file update, instruct them to disconnect and re-connect from the TMWS Agent app.
    • Company token: Click Generate Company Token to generate a token if you plan to deploy the TMWS Agent app through Microsoft Intune.
      This action generates a new token for the TMWS Agent app on both iOS/iPadOS and Android. You need to update the token in Microsoft Intune for the app on both platforms.
  3. Choose one of the following ways to deploy the TMWS Agent app to the required Android devices.