Setting up work VPNs for devices Skip Navigation

Setting up work VPNs for devices

You can use a VPN profile to specify how
iOS
,
iPadOS
,
macOS
,
Samsung Knox
, and
Windows 10
devices connect to a work VPN. You can assign a VPN profile to user accounts, user groups, or device groups.
To connect to a work VPN for
Android
devices other than
Samsung Knox
, you can configure VPN settings using app configuration settings for a VPN app, or users can manually configure the VPN settings on their devices.
Device
Apps and network connections
iOS
and
iPadOS
Work and personal apps can use the VPN profiles stored on the device to connect to your organization's network. You can enable per-app VPN for a VPN profile to limit the profile to the work apps that you specify.
You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand. 
macOS
You can configure VPN profiles to allow apps to connect to your organization's network. You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand. 
Samsung Knox
On
Samsung Knox
devices with
Android Enterprise
or
Samsung Knox Workspace
activations, work apps can use the VPN profiles stored on the device to connect to your organization's network.
You can enable per-app VPN to limit the profile to the work apps that you specify.
You must install a supported VPN client app that uses KNOX SDK on the device.
Windows 10
You can configure VPN profiles to allow apps to connect to your organization's network. In the VPN profile, you can specify a list of apps that must use the VPN.
An alternative to creating a VPN profile, you can choose to use
CylanceGATEWAY
to create a zero-trust network access (ZTNA) profile that is recognized by devices as a VPN provider.
CylanceGATEWAY
trusts nothing and no one by default. For more information, see Integrating BlackBerry UEM with CylanceGATEWAY to create a ZTNA profile.