Per App VPN: F5 SSL

The F5 SSL Per App VPN feature allows you to select which apps must communicate over a VPN connection. You can also specify whether the per-app VPN will automatically start when the app initiates network communications.

General

VPN Name The name of the VPN connection
VPN Server / IP Address The server or IP address of the VPN connection
Domain The domain of the VPN connection
Username The username for authenticating the connection. You can use macros to autopopulate the username field.
Auto Start VPN When enabled, the VPN connects immediately
Provider Type Select the provider type for the VPN.
  • App Proxy
  • Packet Tunnel

Proxy

Proxy Configures the proxy used with this configuration. You can select None, Automatic or manual
URL If automatic is selected, then enter the address of the proxy here
Proxy Server If manual is selected, then enter the host name or IP address of proxy server
Username Username for authenticating the connection
Password Password for authenticating the connection

Authentication

Authentication Select the type of authentication used for this VPN connection. You can select Password or Certificate
Password used to authenticate the connection If you selected Password as the authentication method, enter the password used for authentication
Identity Certificate If you selected Certificate as the authentication method, select the certificate used for identity from the dropdown list
Note: For simplicity, you should deploy the certificate to your devices within the same profile as the per-app vpn configuration.
Enable VPN on Demand When enabled, VPN on demand will establish a VPN connection for domains and host names specified in the VPN On Demand Actions section.
Note: This setting is only applicable to Apple devices and if Certificate is selected as the authentication method.

VPN On Demand Actions

Tip: To add multiple VPN On Demand Actions, enter the settings for your first action and a new empty row appears.
Integrated Parameter Name Create a name for the integrated parameter.
Action Set an action for the integrated parameter name:

Always Establish: a VPN connection is always established for this domain or hostname.

Never Establish: a VPN connection is never established for this domain or hostname.

Establish if needed: a VPN connection is established for this domain or hostname if a VPN connection is required.

Managed Applications

Click Search application to enter an app name and search the App Store for the applications you want this VPN to apply to.

If you have several apps that you want to use the VPN, click Import file to upload a .csv file containing the app information. Each row in the .csv file must contain the following information: App ID, App Name.