Configure Per-App Tunnel for Android to allow those devices to connect to internal sites you define through the VMware Tunnel. Using this functionality requires you to configure and install the Per-App Tunnel component as part of your VMware Tunnel installation.


If you are adding an internal application, Per-App VPN Profile tunneling currently supports only the Android (Legacy) devices. However, Android Work Profile and the Work Managed devices do not support Per-App VPN Profile tunneling for all the internal applications.


To configure a VPN profile for Per-App Tunnel:

  1. Navigate to Devices > Profiles > List View > Add and select Android or Android for Work. For a Samsung Knox deployment, select Android and then select Container.

  2. Configure the profile's General settings.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  3. Select the VPN payload from the list.
  4. Enter a Connection Name and select VMware Tunnel as the Connection Type.

    The Server text box populates automatically with your VMware Tunnel component server URL. If this component is not configured, you see a message and hyperlink to the system settings page where you can configure it.

  5. Select Save & Publish.

What to do next

Configure an internal or public app to use the profile when making connections.