When you implement XenMobile with NetScaler in ENT Mode (MDM+MAM), users can connect to NetScaler Gateway and access the Store.
If you want users to not be able to access the Store and prevent legacy MAM Mode enrollment, you can follow one of those options:
- Modify your enrollment mode from username + password to CBA (Certificate Based Authentication).
In this case, as the NetScaler Gateway will be configured for Certificate as Mandatory, user with Web Browser will not be able to authenticate and access the store and, as CBA is not supported with MAM Legacy Mode, users will not be able to enrollment with this mode.
- Set the server property to true to enforce all devices to be MDM enrolled (using this will block MAM enrollment):
Simpler and doesn’t involve changing the authentication mode.
Note: Those information are provided based on my own experience.