Deploy WARP Using Intune: Enterprise Deployment Guide

In this post, I will show you how to deploy WARP using Intune. You can create a line-of-business app in Intune and automate the deployment of the WARP client to Windows devices in your enterprise.

The Cloudflare WARP client allows individuals and organizations to have a faster, more secure, and more private experience online. The WARP client sits between your device and the Internet, and has several connection modes to better suit different needs.

The Cloudflare WARP client is easy to set up with Microsoft Intune, and you can also use silent install commands. The silent installation is helpful for businesses that want to set up the Cloudflare WARP without making a lot of noise. The WARP Client for Windows allows for an automated install via tools like Intune, AD, or any script or management tool that can execute a .msi file.

Before you perform the Cloudflare WARP deployment using Intune, ensure you create have a test group created. This group can contain few users or devices on which you can test the WARP deployment. Once you find it working, you can expand the deployments to a larger set of users and devices.

In my previous post, I covered the steps to deploy CloudFlare WARP using Configuration Manager. Similarly, you can use Intune to deploy WARP to all your Windows devices. Before we look into that, we will first understand the deployment options for the WARP client.

Ways to Deploy WARP Client

According to Cloudflare, there are two ways to deploy the WARP client broadly:

Manual Deployment: Involves manually installing the WARP client on your devices. It can be Windows devices, macOS, Linux etc. With manual deployment, you have to run the WARP client installer on devices and follow the wizard to install it.
Managed Deployment: For enterprises, you can use tools such as Intune to deploy the WARP client to bigger fleets of devices. The following is a list of Technology Partners Cloudflare Zero Trust works with:
- Hexnode
- Intune
- Jamf
- JumpCloud
- Kandji

Download WARP Client for Intune

You can download the WARP client from the Zero Trust dashboard. To achieve that, navigate to Settings > Devices and scroll down to Download the WARP client. Cloudflare WARP is available for iOS, Android, Chrome OS, Mac, Linux, and Windows. To get the latest version of the WARP installer, visit the Cloudflare WARP download page.

Download the Cloudflare WARP installer and save it on your PC. We will use this installer and upload it into Intune during the deployment. Additionally, you can download the WARP icon or logo that will be used with the application. Users will be able to see the WARP application and the logo in the company portal.

Steps to Deploy WARP using Intune

Let’s look at the steps to deploy WARP using Intune. The first step involves selecting the app type and then uploading the WARP installer. Sign-in to the Intune Portal. Select Apps > All Apps and click +Add.

On Select app type page, click the drop-down and select Line-of-business app. For Windows, the line-of-business apps supported includes: .msi, .appx, .appxbundle, .msix, and .msixbundle. Click Select to continue to next step.

On the App information tab, click Select app package. On the App package file window, click on upload icon and select the Cloudflare_WARP_Release-x64.msi installer. The following details are populated from the WARP installer by Intune.

Name: Cloudflare WARP
Platform: Windows
Size: 100.28 MiB
MAM Enabled: No
Execution Context: Per-Machine

Click OK to continue to the next step.

After you add or upload the WARP client app in Intune, you can specify the application details similar to what you do for applications in Configuration Manager. Enter the name of the app, a brief description, and publisher information. Intune detects the app install context for specific installers; in this case, it’s devices. Select the line-of-business app’s appropriate category if you wish.

Optionally, you can choose to display WARP application as a featured app in the company portal. Refer to the guide to learn how to display featured apps in Intune company portal.

You can specify a logo for the WARP application. Intune allows you to specify logo for every application that you create. Click Change Image and select the logo. Click Next.

After you have specified the application details for WARP client, you can now assign the application to either users or devices. On the Assignments tab, select either Required or Available for enrolled devices based on your requirements. Click Next to display the Review + create page.

Review the values and settings you entered for the WARP deployment in Intune console. When you are done, click Create to finish creating the WARP app in Intune. The Overview blade for the line-of-business app is displayed.

Monitor WARP Deployment in Intune

After you deploy WARP using Intune, you must wait for the deployment to apply to the targeted groups, and once the devices check in with the Intune service, they will receive the application. You can also force sync Intune policies on your computers in case you don’t find the WARP application listed in the company portal. See also how to resolve Intune Company Portal issues if you don’t see it working.

When you deploy apps with Intune, it is important to ensure the deployments are successful. From the list of apps, select the WARP app and on the Overview blade, you can monitor how many users or devices have successfully installed the WARP client.