Configuring Per App VPN

This section describes how Mobile Connect supports the iOS Per App VPN features. Per App VPN is only supported for Mobile Connect VPN connections to SMA 1000 Series appliances that have been configured for Application Access Control.

Per App VPN requires the use of a Mobile Device Management (MDM) solution. In addition, the Per App VPN is only supported with MDM managed apps as well as Safari through a list of MDM managed web domains. Please refer to your MDM solution provider's documentation for how to configure Per App VPN with their solution.

The following are known limitations with using Per App VPN and Mobile Connect:

• Application access control Zone classification could fail if the MDM solution does not successfully install managed applications and configure Per App VPN rules for managed applications.
• Custom VPN connections are not installed for MDM managed VPN connections when connecting to SMA 1000 Series appliances.
• VPN on Demand connections may fail to connect if device authorization is enabled on the SMA 1000 Series appliance. This is due to the fact that user interaction will be required in the application.