Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.18
  3. Administration
  4. Securing network connections
  5. Setting up work VPNs for devices
  6. Enabling per-app VPN
  7. How BlackBerry UEM chooses which per-app VPN settings to assign to iOS devices

How
BlackBerry UEM
 chooses which per-app VPN settings to assign to
iOS
 devices

Only one VPN profile can be assigned to an app or app group.
BlackBerry UEM
 uses the following rules to determine which per-app VPN settings to assign to an app on
iOS
 and
iPadOS
 devices:
  • Per-app VPN settings that are associated with an app directly take precedence over per-app VPN settings associated indirectly by an app group.
  • Per-app VPN settings that are associated with a user directly take precedence over per-app VPN settings associated indirectly by a user group.
  • Per-app VPN settings that are assigned to a required app take precedence over per-app VPN settings assigned to an optional instance of the same app.
  • Per-app VPN settings that are associated with the user group name that appears earlier in the alphabetical list takes precedence if the following conditions are met:
    • An app is assigned to multiple user groups
    • The same app appears in the user groups
    • The app is assigned in the same way, either as a single app or an app group
    • The app has the same disposition in all assignments, either required or optional
    For example, you assign
    Cisco WebEx Meetings
     as an optional app to the user groups Development and Marketing. When a user is in both groups, the per-app VPN settings for the Development group is applied to the
    WebEx Meetings
     app for that user.
If a per-app VPN profile is assigned to a device group, it takes precedence over the per-app VPN profile that is assigned to the user account for any devices that belong to the device group.