I'm currently testing app tunnels but I struggle with DNS. I'd like the user to keep the original application URL. I read in the documentation:
"Because app tunnels do not require administrative rights, some features of Network Access [...] are not available with app tunnels. For example, the application tunnel cannot easily resolve domain names in applications without a client-side DNS redirector, or modification of the system hosts file."