Associate Security Groups to Public Apps

In this section, we are going to configure Dolphin and Firefox to use the security groups configured within NSX.

1. Publish the Per-App VPN Profile

First, we will publish the Per-App Tunnel profile we created during the AirWatch Tunnel Configuration.

Navigate to NSX Per-App VPN profile

Back to the AirWatch console,

  1. Click on "Devices" from the left pane.
  2. Click on "Profiles".
  3. Click on "List View".
  4. Edit the profile "NSX Per-App VPN".

1.2. Change the Assignment Type

Change the Assignment Type
  1. Change the Assignment Type to "Auto".
  2. Click on "Add Version".

1.3. Publish the Profile

Publish the Profile
  1. Click on "Save & Publish".
  2. Click on "Publish" in the Device Assignment Summary Page.

(Note: It usually takes around 45 seconds - 1 minute to install the profile after compliance check)

2. Configure Dolphin Browser to use SG_IP1

In this section, we will configure Dolphin Browser to use Security Group SG_IP1.

2.1. Add Dolphin Browser as Public App

Add Dolphin Browser as Public App
  1. From the top right corner, click on "Add".
  2. Select "Public Application".

2.2. Search Dolphin Browser in the App Store

Search Dolphin Browser in the App Store
  1. Select platform as "Apple iOS".
  2. Select Source as "Search App Store".
  3. Type in name as "Dolphin".
  4. Click "Next".

2.3. Select Dolphin Browser for iPad.

Select Dolphin Browser for iPad.
  1. Select "iPad version of Dolphin Browser".

2.4. Select Device Assignment

Select Device Assignment
  1. Click on the "Assignment" tab.
  2. Select Assigned Group as "All Devices (Your organization group name)".

2.5. Select Push Mode as Auto

Select Push Mode as Auto
  1. Click on the "Deployment" tab.
  2. Select Push mode as "Auto".

2.6. Select the VPN Configuration

Select the VPN Configuration
  1. Use the scroll bar to scroll down until you see the option "Use VPN".
  2. Check the box for "Use VPN".
  3. Select the Per-App VPN Profile as "NSX Per-App VPN".
  4. Select NSX Security group as "SG_IP1".
  5. Click on "Save & Publish".
  6. Click on "Publish" in the device assignment page.

3. Configure Firefox Browser to use SG_IP2

In this section, we will configure Firefox Browser to use Security Group SG_IP2.

3.1. Add Firefox Browser as Public App

Add Firefox Browser as Public App
  1. From the top right corner, click on "Add".
  2. Select "Public Application".

3.2. Search Firefox Browser in the App Store

Search Firefox Browser in the App Store
  1. Select platform as "Apple iOS".
  2. Select Source as "Search App Store".
  3. Type in name as "Firefox".
  4. Click "Next".

3.3. Select Firefox Browser

Select Firefox Browser

Select "Firefox web browser".

3.4. Select Device Assignment

Select Device Assignment
  1. Click on the "Assignment" tab.
  2. Select Assigned Group as "All Devices (Your organization group name)".

3.5. Select Push Mode as Auto

Select Push Mode as Auto
  1. Click on the "Deployment" tab.
  2. Select Push mode as "Auto".

3.6. Select the VPN Configuration

Select the VPN Configuration
  1. Use the scroll bar to scroll down until you see the option "Use VPN".
  2. Check the box for "Use VPN".
  3. Select the Per-App VPN Profile as "NSX Per-App VPN".
  4. Select NSX Security group as "SG_IP2".
  5. Click on Save & Publish.
  6. Click on "Publish" in the device assignment page.