1. Click Add
2. Click Profile

Click Apple iOS

1. Enter Per-App VPN as the Name.
2. Select All Devices ([email protected]) as the Assigned Group.

1. Click the VPN payload tab.
2. Click CONFIGURE

1. Set Connection Type to VMware Tunnel.
2. Set Enable VMware Tunnel to enabled.
3. Click SAVE & PUBLISH

Click PUBLISH

1. Click Groups & Settings
2. Click All Settings

1. Click Apps
2. Expand Settings & Policies
3. Click Security Policies
4. Set Current Setting to Override

1. Scroll down to find the Data Loss Prevention section.
2. Click ENABLED for Data Loss Prevention.
3. Ensure Enable Printing is set to NO
4. Ensure Enable Camera is set to NO
5. Ensure Enable Composing Email is set to NO
6. Ensure Enable Copy and Paste is set to NO

1. Scroll down to the bottom of the Security Policies menu.
2. Click SAVE

Confirm that the Saved Successfully prompt shows.

If you already closed the All Settings menu, reopen it by click Groups & Settings > All Settings.

1. Click Apps
2. Click Browser
3. Set Current Setting to Override

1. Scroll down to find the Mode section.
2. Select Enabled for Kiosk Mode.
3. Select Enabled for Enable Multiple Tabs Support.
4. Enter https://internal.airwlab.com for the Home Page URL.
5. Select Deny for Selection Mode.  This enables Blacklisting for the included site URLs, where selecting Allow would enable Whitelisting for the included site URLs.
6. Enter *.airwatch.com for the Denied Site URLs.  This will allow traffic to all URLs except the *.airwatch.com domain.

NOTE - Normally, Kiosk Mode would restrict Workspace ONE Web to a single page and it's available links.  For the purposes of the lab, we enable Multiple Tabs Support to showcase multiple bookmarks.  In this mode, the navigation bar returns and bookmarks can be selected from the menu, but other items are still restricted in this mode.

1. Scroll down to the bottom of the Browser Settings page.
2. Click SAVE

1. The menu will return to the top, and you should see the Saved Successfully prompt display.
2. Click Bookmarks

1. Select Current Settings as Override
2. Enter name as Internal Splash Page
3. Enter URL as https://internal.airwlab.com
4. Click ADD BOOKMARK
5. Enter name as AirWatch Home
6. Enter URL as https://www.airwatch.com
7. Click Save.

1. Confirm the Saved Successfully prompt shows.
2. Click X to close the pop-up window.

1. Select Apple iOS from the Platform dropdown.
2. Enter Workspace ONE Web in the Name field.
3. Click Next

Click Select on the Workspace ONE Web application.

Click SAVE & ASSIGN

Click + ADD ASSIGNMENT

1. Click in the Selected Assignment Groups field. This will pop-up the list of created Assignment Groups. Start Typing All Devices and select the All Devices ([email protected]) Group.
2. Select AUTO for the App Delivery Method.

1. Scroll down to find the Policies section.
2. Select ENABLED for Remove On Unenroll
3. Select ENABLED for App Tunneling
4. Select the profile named Per-App VPN you created in the earlier section.
5. Click ADD

1. Confirm that the Assignment you just configured is displayed.
2. Click SAVE & PUBLISH

Click PUBLISH

In order to leverage the VPN profile, the VMware Tunnel Client must be installed on your device. We can leverage AirWatch to deploy the client as a managed application to the device This step will walk you through the process of adding the client application to the AirWatch Console to automatically install on enrolled devices. Please note, while it is required that the Tunnel client application is installed on any device using Per App Tunnel, it does not have to be a managed application. Users can download the VMware Tunnel client from the App Store.

1. Click Add
2. Click Public Application

1. Select Apple iOS for the Platform.
2. Enter VMware Tunnel for the Name.
3. Click NEXT

Click SELECT for the VMware Tunnel result.

Click SAVE & ASSIGN

Click + Add Assignment.

1. Click in the Selected Assignment Groups field. This will pop-up the list of created Assignment Groups. Start Typing All Devices and select the All Devices ([email protected]) Group.
2. Select Auto for the App Delivery Method.

1. Scroll down to find the Policies section.
2. Select ENABLED for Remove On Unenroll.
3. Click ADD

1. Ensure the Assignment you created is displayed.
2. Click SAVE & PUBLISH

Click PUBLISH