Per App VPN: F5 SSL

The F5 SSL Per App VPN feature allows you to select which apps must communicate over a VPN connection. You can also specify whether the per-app VPN will automatically start when the app initiates network communications.

General

VPN Name Enter the name of the VPN connection.
VPN Server Hostname / IP Address Enter the server hostname or IP address of the VPN connection.
Domain Enter the domain of the VPN connection.
Username Enter the username for authenticating the connection. Supports macros.
Auto Start VPN Select this option to automatically start the VPN.
Provider Type Select the provider type for the VPN.
  • App Proxy
  • Packet Tunnel

Proxy

Proxy Configures the proxy used with this configuration. You can select None, Automatic or Manual.
URL If Automatic is selected, enter the address of the proxy here.
Proxy Server If Manual is selected, enter the hostname or IP address of proxy server.
Username Enter the username for authenticating the connection.
Password Enter the password for authenticating the connection.

Authentication

Authentication Select the type of authentication used for this VPN connection. You can select Password or Certificate.
Password If Password is selected as the authentication type, enter the password used for authentication.
Identity Certificate If Certificate is selected as the authentication type, select the certificate used for identity.
Note: For simplicity, you should deploy the certificate to your devices within the same profile as the per-app vpn configuration.
Enable VPN on Demand When enabled, VPN on demand will establish a VPN connection for domains and hostnames specified in the VPN On Demand Actions section.
VPN On Demand Actions Click the Add button to enter VPN On Demand actions.
Parameter Name Enter a name for the integrated parameter.
Action Set an action for the integrated parameter name:

Always establish: a VPN connection is always established for this domain or hostname.

Never establish: a VPN connection is never established for this domain or hostname.

Establish if needed: a VPN connection is established for this domain or hostname if a VPN connection is required.

Managed Applications

Click the Add button to enter an app name and search the App Store for the applications you want this VPN to apply to. If you have several apps for which you would like to use the VPN, you can upload a .csv or .txt file by clicking the Import button. Each row in the .csv or .txt file must contain the following information: app ID, app name.