VMware offers a hardened virtual appliance deployment known as Unified Access Gateway that hosts Workspace ONE services like Per-App Tunnel, and is the preferred method for deployment. Deploying Tunnel on Unified Access Gateway can be done from either vSphere or Hyper-V and can be automated using PowerShell.

For more information on Unified Access Gateway, see Deploying and Configuring Unified Access Gateway documentation on https://docs.vmware.com/en/Unified-Access-Gateway/index.html.