James_124437
Nimbostratus
Oct 23, 2013iOS 7 - Per App VPN
Does F5 support the per app VPN available now on iOS 7?
If so, can each app authenticate as different "users"?
Apple Documentation: Profile Configurations
Does F5 support the per app VPN available now on iOS 7?
If so, can each app authenticate as different "users"?
Apple Documentation: Profile Configurations
@Michael Koyfman, Our own MDM solution :)
@Michael Koyfman,
I tried adding the key you've speicifed to the payload, it didn't seem to have any effect - i can see in the console that the App VPN rule matched, but when i dont connect to VPn manually, i get the 'Requires app layer VPN' error and if i do connect manually, i get the same pair of 'no local address specified' - 'no remote address specified' errors.
I am using the latest EDGE client from App Store.
Is this thread monitored ? I have the same problem. keep on getting App-Layer VPN required. Any solutions ?
MDM vendors need to specify the proper configuration in their software to enable F5 EDGE client Per-App VPN functionality.
Specifically, to specify that Per-App VPN is going to be used, they should specify the PerAppVpn key PerAppVpntrue in the configuration profile's VendorConfig section of the Per-app VPN profile.
If you are having difficulties with Per-App VPN functionality, please open a case with your MDM vendor and ask them to verify that they are sending this key as part of the F5 EDGE client per-App VPN configuration.
MDM vendors need to specify the proper configuration in their software to enable F5 EDGE client Per-App VPN functionality.
Specifically, to specify that Per-App VPN is going to be used, they should specify the PerAppVpn key PerAppVpntrue in the configuration profile's VendorConfig section of the Per-app VPN profile.
If you are having difficulties with Per-App VPN functionality, please open a case with your MDM vendor and ask them to verify that they are sending this key as part of the F5 EDGE client per-App VPN configuration.
Is it means that from APM side, we just need to configure the normal Network Access and let the MDM Vendor configure the Per-app VPN profile only?
You don't need the Network Access Object on APM in order to use Per-App VPN - you just need to check "VDI & Java Support" on the Virtual server. Per-App VPN and Full Network Tunnel VPN are mutually exclusive - you currently can't have both on the same virtual server.
You don't need the Network Access Object on APM in order to use Per-App VPN - you just need to check "VDI & Java Support" on the Virtual server. Per-App VPN and Full Network Tunnel VPN are mutually exclusive - you currently can't have both on the same virtual server.
Thanks Michael. For Per-App VPN, my understanding is this feature required the mobile app support. Is it a list of supported app? If the app is not supported, is it using Mobile SDK to make it work with APM?
Thanks and good to know that Safari is enabled by default. I'm going to setup the Per-App VPN using MobileIron. Any experience and tips to config. both APM & MobileIron?