Testing Per App VPN
Now that the device is enrolled and has received the settings we configured in the AirWatch Console, we are ready to begin testing the Per-App VPN functionality.
1. Testing Per App VPN on iOS
The applications assigned in the previous steps should push down during enrollment. The VMware Tunnel and VMware Browser applications should be installed on your device.
2. Launch the VMware Browser
Press the Home button on the iPad to return to the Launchpad. Swipe right to see the downloaded applications if needed.
Tap the VMware Browser icon to launch the application. If prompted, select OK to allow the Browser to send your device push notifications.
3. Access the Internal Website with VMware Browser
- The application will launch and you will see the VPN icon appear indicating the connection is active. The application will now connect to AirWatch and retrieve the settings for your Sandbox Organization Group. These settings include a default homepage that has been pre-configured for this lab. This website is available on an internal web server but not accessible from the public internet.
- The website will load and you'll see the Welcome message.
4. Attempt to Access the Website From Safari
We will now show that although the VPN connection is active, other applications on the device will not be able to access the Tunnel or the internal resources.
4.1. Select the URL from the VMware Browser
- Press & hold the Navigation Bar in the AirWatch Browser.
- Choose Select All to highlight the URL for the internal site.
4.2. Copy the URL from the VMware Browser
4.3. Open Safari
Return to the launchpad by pressing the Home button on the iPad. Open Safari by selecting the icon form the Launcher.
4.4. Paste the URL Into the Safari Browser
- Open a new tab by selecting the + sign on the navigation bar.
- Select the entry box on the navigation bar.
- Press & hold for a count of two then release on the entry box and select Paste.
- Select Go on the keyboard.
Notice that the website does not load in the Safari browser due to DNS failure. The website is published to an internal DNS that can only be accessed when the VPN connection is being used. Although the VPN connection may remain active (look for the VPN icon in the status bar), Safari is not designated as an application that is allowed to use the Per-App VPN Tunnel. You may have multiple VPN configurations and multiple apps assigned for each VPN. Most Public applications (apps using Cocoa framework) are compatible with per-app VPN on iOS.