Setting up work VPNs for devices

You can use a VPN profile to specify how

iOS

iPadOS

macOS

Samsung Knox

, and

Windows 10

devices connect to a work VPN. You can assign a VPN profile to user accounts, user groups, or device groups.

To connect to a work VPN for

Android

devices other than

Samsung Knox

, you can configure VPN settings using app configuration settings for a VPN app, or users can manually configure the VPN settings on their devices.

Device	Apps and network connections
iOS and iPadOS	Work and personal apps can use the VPN profiles stored on the device to connect to your organization's network. You can enable per-app VPN for a VPN profile to limit the profile to the work apps that you specify. You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand.
macOS	You can configure VPN profiles to allow apps to connect to your organization's network. You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand.
Samsung Knox	On Samsung Knox devices with Android Enterprise or Samsung Knox Workspace activations, work apps can use the VPN profiles stored on the device to connect to your organization's network. You can enable per-app VPN to limit the profile to the work apps that you specify. You must install a supported VPN client app that uses KNOX SDK on the device.
Windows 10	You can configure VPN profiles to allow apps to connect to your organization's network. In the VPN profile, you can specify a list of apps that must use the VPN.

An alternative to creating a VPN profile, you can choose to use

CylanceGATEWAY

to create a zero-trust network access (ZTNA) profile that is recognized by devices as a VPN provider.

CylanceGATEWAY