Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.17
  3. Administration
  4. Securing network connections
  5. Setting up work VPNs for devices

Setting up work VPNs for devices

You can use a VPN profile to specify how
iOS
,
iPadOS
,
macOS
,
Samsung Knox
, and
Windows 10
 devices connect to a work VPN. You can assign a VPN profile to user accounts, user groups, or device groups.
To connect to a work VPN for
Android
 devices other than
Samsung Knox
, you can configure VPN settings using app configuration settings for a VPN app, or users can manually configure the VPN settings on their devices.
Device
Apps and network connections
iOS
 and
iPadOS
Work and personal apps can use the VPN profiles stored on the device to connect to your organization's network. You can enable per-app VPN for a VPN profile to limit the profile to the work apps that you specify.
You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand. 
macOS
You can configure VPN profiles to allow apps to connect to your organization's network. You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand. 
Samsung Knox
On
Samsung Knox
 devices with
Android Enterprise
 or
Samsung Knox Workspace
 activations, work apps can use the VPN profiles stored on the device to connect to your organization's network.
You can enable per-app VPN to limit the profile to the work apps that you specify.
You must install a supported VPN client app that uses KNOX SDK on the device.
Windows 10
You can configure VPN profiles to allow apps to connect to your organization's network. In the VPN profile, you can specify a list of apps that must use the VPN.