If you migrate from VMware Tunnel - Proxy to VMware Tunnel (Per-App Tunnel) and want to keep the domains that use the tunnel, enter the App Tunnel URLs from the Proxy to the Device Traffic Rules settings for Per-App Tunnel.

The Per-App Tunnel provides Device Traffic Rules. Device Traffic Rules allow you to set individual traffic policies for tunneling, blocking, and bypassing traffic for each of your apps.

For information on Device Traffic Rules, access Create Device Traffic Rules.

Prerequisites

Review Requirements to Use VMware Tunnel.

Go to Groups & Settings > All Settings > Apps > Settings and Policies > Security Policies > App Tunnel Mode > VMware Tunnel - Proxy and record the entries in the App Tunnel URLs field.

Procedure

  1. Navigate to Groups & Settings > All Settings > System > Enterprise Integration > VMware Tunnel > Network Traffic Rules > Device Traffic Rules.
  2. Select the applicable SDK application (like Workspace ONE Web).
    This configuration differs from the default SDK setting because you need to enter the domains to tunnel by the app rather than as a blanket entry for all SDK-built apps. Use Add to enter multiple applications.
  3. Select Tunnel for the Action.
  4. Enter the app tunnel URLs from the VMware Tunnel - Proxy option in Destination Hostname.
    Define a default policy for domains that do not match patterns with your destination host names.
  5. Navigate to Groups & Settings > All Settings > Apps > Settings and Policies > Security Policies. select App Tunnel Mode and change from VMware Tunnel - Proxy to VMware Tunnel.