Skip Navigation

Setting up work VPNs for devices

You can use a VPN profile to specify how
iOS
,
macOS
,
Samsung Knox
,
Windows 10
, and
BlackBerry 10
devices connect to a work VPN. You can assign a VPN profile to user accounts, user groups, or device groups. For
BlackBerry 10
devices, you can also associate a VPN profile with a
Wi-Fi
profile.
To connect to a work VPN for
Android
devices other than
Samsung Knox
, you can configure VPN settings using app configuration settings for a VPN app, or users can manually configure the VPN settings on their devices.
Device
Apps and network connections
BlackBerry 10
By default, both work and personal apps can use the VPN profiles stored on the device to connect to your organization's network. Work apps can also use the
BlackBerry Infrastructure
to connect to your organization's network. If your organization's security standards do not allow personal apps to access your organization's network, or you want to limit connectivity options for work apps, you can restrict connection options.
iOS
Work and personal apps can use the VPN profiles stored on the device to connect to your organization's network. You can enable per-app VPN for a VPN profile to limit the profile to the work apps that you specify.
You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand. 
macOS
You can configure VPN profiles to allow apps to connect to your organization's network. You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand. 
Samsung Knox
On
Samsung Knox
devices with
Android Enterprise
or
Samsung Knox Workspace
activations, work apps can use the VPN profiles stored on the device to connect to your organization's network.
You can enable per-app VPN to limit the profile to the work apps that you specify.
A supported VPN client app must be installed on the device.
Cisco AnyConnect
and
Juniper
are supported.
The
Juniper
app supports only SSL VPN.
Windows 10
You can configure VPN profiles to allow apps to connect to your organization's network. In the VPN profile, you can specify a list of apps that must use the VPN.