About Application Access Control

Application Access Control allows remote access administrators to control exactly which resources on the corporate network each application (app) can access. Meanwhile, the device owner can still use their personal Android device for their own activities such as personal email, financial data, pictures, music, accessing third party web sites, etc.

If the SMA 1000 Series administrator has configured this feature, you will log in to a Login Group that allows a list of trusted apps to access corporate resources. The specific version of each app is included in the configuration.

The Application Access Control rule list controls the following:

• Which applications can send data through the VPN tunnel
• Which destinations on the corporate network those applications are allowed to access

When connected to a SonicWall SMA 1000 Series Appliance running SonicWall Secure Mobile Access 11.0 or higher with Application Access Control configured, device traffic is handled in four ways:

1. For applications listed and selected in the application list, traffic destined for the corporate network from those applications is allowed to enter the VPN tunnel. The application ID and signature are used by the server to identify the application.
2. For applications that are on that list and are not selected (or any other application on the device), traffic destined for the corporate network is blocked and/or dropped by Mobile Connect and does NOT enter the tunnel.
3. All applications (regardless of whether or not they are on the application list) send traffic out the default interface of the device if the traffic is NOT destined for the corporate network.
4. The information status symbol ‘i’ displays on applications that are learned by the appliance but still have at least one version pending approval.