Forum Discussion
James_124437
Nimbostratus
NimbostratusiOS 7 - Per App VPN
Does F5 support the per app VPN available now on iOS 7?
If so, can each app authenticate as different "users"?
Apple Documentation: Profile Configurations
- Matt_Dierick
Employee
I would say YES. A VPN SSL tunnel is a VPN SSL tunnel. All the job is done by iOS. The rest is a normal tunnel.
http://apple.stackexchange.com/questions/99988/how-to-configure-vpn-per-app-in-ios-7
Michael_KoyfmanCirrocumulus
There is a forthcoming update to the F5 iOS EDGE client that will support per-app VPN. It should be available on the App Store within 2-3 weeks.
James_124437Will this "support" multiple connections of different authenticated users from one device as my example in the comments below asks?
Michael_Koyfma1Cirrus
There is a forthcoming update to the F5 iOS EDGE client that will support per-app VPN. It should be available on the App Store within 2-3 weeks.
- James_124437Will this "support" multiple connections of different authenticated users from one device as my example in the comments below asks?
- Michael_Koyfman
No, the user credentials would have to be the same for all tunnels.
- James_124437So really it is still a device/single user context VPN just on-demand by app.
- Michael_Koyfma1
No, the user credentials would have to be the same for all tunnels.
- James_124437So really it is still a device/single user context VPN just on-demand by app.
Alex_Zaytsev_13With the updated 2.0 client, did you manage to get this working?
- Michael_Koyfma1
Yes, it certainly works, but provisioning/configuring it requires an MDM device that is updated to the version that is compatible with Per-App VPN settings specifically for iOS7. If you are not using MDM product, you won't be able to provision this - this limitation is from Apple and not F5.
If you are using MDM and having issues provisioning Per-App VPN, please post more details here.
- Ralf_Schubert_1We have the same problem as Alex. We are using: F5 BIG-IP 11.4.0 MobileIron 5.8.3 as MDM and the latest iOS version and Edge Client The Edge Client is able to connect when initiating manually, but Per-App-VPN doesn't work. Console says 'App layer vpn required', when tunnel is not established manually. When we start the tunnel manually and try to use the app again, console says 'no local address specified' and 'no remote address specified'. Does the specific app need to support this or what could be the problem here? Thanks in advance
Dan_Kieta_11582I am seeing similar issues. We are using Airwatch as our MDM solution and have configured a single app as "managed" with Per-App VPN support. When I launch this app (Google Chrome), it does not appear to attempt to launch the VPN connection, but appears to have no connectivity. Any help would be appreciated.
- Michael_Koyfman
Yes, it certainly works, but provisioning/configuring it requires an MDM device that is updated to the version that is compatible with Per-App VPN settings specifically for iOS7. If you are not using MDM product, you won't be able to provision this - this limitation is from Apple and not F5.
If you are using MDM and having issues provisioning Per-App VPN, please post more details here.
- Ralf_Schubert_1We have the same problem as Alex. We are using: F5 BIG-IP 11.4.0 MobileIron 5.8.3 as MDM and the latest iOS version and Edge Client The Edge Client is able to connect when initiating manually, but Per-App-VPN doesn't work. Console says 'App layer vpn required', when tunnel is not established manually. When we start the tunnel manually and try to use the app again, console says 'no local address specified' and 'no remote address specified'. Does the specific app need to support this or what could be the problem here? Thanks in advance
- Dan_Kieta_11582I am seeing similar issues. We are using Airwatch as our MDM solution and have configured a single app as "managed" with Per-App VPN support. When I launch this app (Google Chrome), it does not appear to attempt to launch the VPN connection, but appears to have no connectivity. Any help would be appreciated.
- Alex_Zaytsev_13
@Michael Koyfman,
Yes i am using the MDM. I configure the payload as per the Apple MDM reference, and then specify the UUID of the connection for the apps in the settings payload. Once i start the app, i get a 'App layer vpn required' error in console logs; if i start the connection BEFORE i start the app, i get the 'no local address specified' and 'no remote address specified' errors when the app tries to access the internet.
- Michael_Koyfma1
Which MDM are you using, Alex?
