VMware offers a hardened virtual appliance deployment known as Unified Access Gateway that hosts Workspace ONE services like Per-App Tunnel, and is the preferred method for deployment. Deploying Tunnel on Unified Access Gateway can be done from either vSphere or Hyper-V and can be automated using PowerShell.

Note: Unified Access Gateway offers a FIPS appliance where only VMware Tunnel is available. Tunnel Proxy is not available on this version of the appliance.

For more information on Unified Access Gateway, see Deploying and Configuring Unified Access Gateway documentation on Unified Access Gateway Documentation.