Configure Per-App Tunnel for macOS to allow macOS devices to connect to internal sites you define through the VMware Tunnel. This functionality requires you to configure and install the Per-App Tunnel component as part of your VMware Tunnel installation.


  1. Cofigure VMware Tunnel. For more information, see Configure Per-App Tunnel.
  2. Configure Network Traffic Rules for Safari Split Tunneling. For more information, see Configure Network Traffic Rules for the Per-App Tunnel.
  3. Deploy VMware Tunnel.


  1. Navigate to Devices > Profiles > List View > Add and select macOS. Then select User.
  2. Configure the General settings.
  3. Select the VPN payload from the list.
  4. Enter a Connection Name and select Workspace ONE Tunnel as the Connection Type.
    The Server text box populates automatically with your VMware Tunnel component server URL. If this component is not configured, you see a message and hyperlink to the system settings page where you can configure it.
  5. Enable App Mapping.
  6. Add the Bundle ID for each application you want to use with Per-App Tunnel.
    To find the Bundle ID for a macOS application, see Extract macOS Bundle ID for Per-App Tunnel.
  7. Select Save & Publish.