VMware offers a hardened virtual appliance platform known as Unified Access Gateway that hosts Workspace ONE services like Per-App Tunnel, and is the preferred method for deployment. Deploying VMware Tunnel on Unified Access Gateway can be done on ESXi, Hyper-V, AWS or Azure and can be automated using PowerShell.

From an architecture and networking perspective, Unified Access Gateway and the stand-alone Linux installer are the same. The Tunnel service on Unified Access Gateway is same as what the Linux installer provides.

Note: Unified Access Gateway can be deployed with the FIPS version of the appliance. In such cases, only the Per-App Tunnel Component is available.