Validate AirWatch Tunnel Implementation for Per App VPN
Once enrollment is complete, ensure that the AirWatch Tunnel and AirWatch Browser applications are installed on your device. If not, open the App Catalog to Install these applications on your device.
1. Launch & Enable the AirWatch Tunnel Client
This step is to enable the newly installed Tunnel client to initiate a VPN connection automatically on behalf of the user whenever an enabled application is launched. This is only required the first time that the application is installed.
Press the Home button on the iPad to return to the Launchpad. Swipe right if needed to see the downloaded applications. Select the AirWatch Tunnel client to open it.
Note: If the Tunnel application is missing from your device, open the Catalog and try to install it from there by selecting Install. If this still fails to install on your device, alert a lab proctor. Once you've selected Install in the Catalog return to the launchpad by selecting the home button.
1.1. Accept the VPN Security Warning
Select "YES" to enable the Tunnel application as a VPN client on the device.
2. Launch the AirWatch Browser
Press the Home button on the iPad to return to the Launchpad. Swipe right to see the downloaded applications if needed. Select the AirWatch Browser icon to launch the application. If prompted, select Ok to allow the Browser to send your device push notifications.
3. Access the Internal Website with AirWatch Browser.
- The application will launch and you will see the VPN icon appear indicating the connection is active. The application will now connect to AirWatch and retrieve the settings for your Sandbox Organization Group. These settings include a default homepage that has been preconfigured for this lab. This website is available on an internal web server but not accessible from the public internet.
- The website will load and you'll see the Welcome message.
4. Attempt to Access the Website From Safari
We will now show that although the VPN connection is active, other applications on the device will not be able to access the Tunnel or the internal resources.
4.1. Select the URL from the AirWatch Browser
- Press & hold the Navigation Bar in the AirWatch Browser
- Choose Select All to highlight the URL for the internal site.
4.2. Copy the URL from the AirWatch Browser
Select Copy.
4.3. Open Safari
Return to the launchpad by pressing the Home button on the iPad. Open Safari by selecting the icon form the Launcher.
4.4. Paste the URL Into the Safari Browser
- Open a new tab by selecting the + sign on the navigation bar.
- Select the entry box on the navigation bar.
- Press & hold for a count of two then release on the entry box and select Paste.
- Select Go on the keyboard.
Notice that the website also loads in the Safari browser since the domain was configured in the device profile configured earlier. The website is published to an internal DNS that can only be accessed when the VPN connection is being used. Safari is enabled to initiate Per-App VPN Tunnel only for those domains configured in the VPN payload of the Device Profile.