Now that the VMware Tunnel client is assigned to the appropriate group, this section walks through adding an application that is enabled to use Per App Tunnel.  After enabling the setting that allows an application to use VPN, you must select the VPN profile that the app should use. This requires that any application you would like to leverage Per App VPN is pushed to the device from the Workspace ONE UEM Console as a managed app. There is one exception to this, which is the Safari application on iOS.  This is covered in detail in a later section of this lab.

This step will walk you through the process of adding an application from the Public App store that will be associated to the VPN profile you created.