For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Henrik_S's avatar
Henrik_S
Icon for Nimbostratus rankNimbostratus
Aug 26, 2016

APM - IOS 9.3 per-app-VPN - no traffic through tunnel?

Hello,   We are trying to configure mobile phones with Airwatch to use per-app-VPN. First of all, everything works great with a manual VPN connection through the edge client, or a global on-demand...
application delivery
BIG-IP Access Policy Manager (APM)
Henrik_S's avatar
Henrik_S
Icon for Nimbostratus rankNimbostratus
Aug 29, 2016

We have performed some more troubleshooting. All in all, we have been able to successfully connect a per-app-vpn session, but there are is a big lack of documenation on how the SOCKS Proxy is implemented and what limitations that are in place.

 

For instance: It seems that we are unable to leverage route domains on per-app-vpn, while on-demand-vpn works? It seems that we are unable to leverage lease pool with proxy arp on per-app-vpn, while on-demand-vpn works? It seems that if we select AutoMap, then the BIG-IP will use it's non-floating SelfIPs as SNAT addresses..