Configuring Per App VPN for third-party iOS apps

Expand all | Collapse all

These settings apply to supervised devices and devices operating in basic control mode.

The Per App VPN functionality lets a device establish a VPN connection when supported system apps or third-party apps are launched. This functionality is available for IKEv2 and IPSec connections.

For the Per App VPN functionality to work correctly, the iOS MDM Server version must not be earlier than 15.4.0.2019.

To configure Per App VPN for a third-party app:

1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Policies & profiles. In the list of group policies that opens, click the name of the policy that you want to configure.
2. In the policy properties window, select Application settings.
3. Select iOS and go to the Device configuration section.
4. On the VPN card, click Settings.

   The VPN window opens.

5. Set up a VPN connection with the IKEv2 or IPSec protocol.
6. On the Advanced tab, in the Per App VPN section, select the Enable Per App VPN check box.
7. Select the Per App VPN configuration alias that you want to apply to this VPN configuration.

   The alias lets you use the corresponding VPN configuration for an installation package of a third-party app.

   If a Per App VPN configuration alias is not selected, Per App VPN is still available for system apps.

   If you change the previously selected Per App VPN configuration alias, VPN will be disabled for all third-party apps using this configuration after they are reinstalled or updated.

8. Click Add.

   The new VPN configuration that supports Per App VPN functionality is displayed in the list.

9. Click Save to save the changes you have made.
10. To set up Per App VPN for the required third-party app, do one of the following:
    • Specify a Per App VPN configuration alias for a new third-party app
      1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Mobile → Apps & files → iOS.
      2. Click Add.

         The Add app window opens.

      3. Configure an app.
      4. In the Per App VPN section, click Enable Per App VPN and select the alias of the VPN configuration that you want to enable while using this app.

         The configured settings will be applied after the app is installed.

      5. Click Add.

      The new managed app for which Per App VPN has been configured appears in the list.

    • Specify a Per App VPN configuration alias for an already installed third-party app
      1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Mobile → Apps & files → iOS.
      2. Click the name of the app in the list for which you want to configure Per App VPN.

         The App details window opens.

      3. In the Per App VPN section, click Enable Per App VPN and select the alias of the VPN configuration that you want to enable while using this app.

         The configured settings will be applied after the app is reinstalled or updated.

      4. Click OK.

      The specified Per App VPN configuration alias for this managed app appears in the corresponding table column.

Mobile device settings are changed after the next device synchronization with the iOS MDM Server.

After the required third-party app is installed, the Per App VPN will be configured for this app.

See also: Configuring Per App VPN for iOS system apps Configuring managed apps Configuring VPN on iOS MDM devices

Page top