Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.19
  3. Managing secure connections
  4. Managing work connections using profiles
  5. Using BlackBerry Secure Connect Plus for connections to work resources
  6. Enterprise connectivity profile settings
  7. iOS: Enterprise connectivity profile settings

iOS
: Enterprise connectivity profile settings

Settings for
iOS
 also apply to
iPadOS
 devices.
Setting
Description
Enable
BlackBerry Secure Connect Plus
This setting specifies whether work apps use
BlackBerry Secure Connect Plus
 for sending work data between devices and your network.
Enable VPN on demand
Select this setting to allow only specific apps to use
BlackBerry Secure Connect Plus
.
If you select this option, users must manually turn on the VPN connection on their device to use
BlackBerry Secure Connect Plus
. As long as the VPN connection is on, the device uses
BlackBerry Secure Connect Plus
 to connect to the work network. The user must turn the VPN connection off to use another connection, such as the work
Wi-Fi
 network. Instruct users when it is appropriate to turn on and turn off the VPN connection (for example, you can instruct users to turn on the VPN connection when they are not in range of the work
Wi-Fi
 network).
VPN on demand rules for
iOS
 9 and later
This setting specifies the connection requirements for VPN on demand using
BlackBerry Secure Connect Plus
. You must use one or more keys from the payload format example.
This setting is valid only if the "Enable VPN on demand" setting is selected.
Enable per-app VPN
This setting specifies whether work apps can automatically start a VPN connection using
BlackBerry Secure Connect Plus
 when it accesses work resources.
Select this setting to specify rules for
BlackBerry Secure Connect Plus
 connections.
Safari
 domains
Specify the domains that are allowed to start a VPN connection in
Safari
.
Calendar domains
Specify the domains that can start the VPN connection in Calendar. 
Contacts domains
Specify the domains that can start the VPN connection in Contacts. 
Mail domains
Specify the domains that can start the VPN connection in Mail. 
Associated domains
Specify the associated domains.
Excluded domains
Specify the excluded domains.
Allow apps to connect automatically
Specify whether apps can start the VPN connection automatically.
Proxy profile
This setting specifies the associated proxy profile if you want to route secure tunnel traffic from devices to the work network through a proxy server.
The proxy profile must use a manual configuration with an IP address. PAC configuration is not supported. For more information, see Setting up proxy profiles for devices.