AirWatch Tunnel (Per App VPN and Proxy) Install Overview

AirWatch Tunnel Install Overview


The following article is intended to assist AirWatch Customers and Agents install, validate and troubleshoot the AirWatch Tunnel for Per App VPN and Proxy.

CLICK HERE
for more information on an
assisted install. Reach out to
your Account Executive to
purchase.

Tunnel Install Guide

The install guide is intended to walk users through the preparation, installation and configuration of the AirWatch Tunnel.

Pre-Install Requirements Worksheet

Provides a detailed explanation of all general, hardware, software and network requirements for a successful installation of the AirWatch Tunnel. Please only reference the tab for the component you wish to install.

Tunnel Install Video

This instructional install video shows the step by step process for installing and validating the AirWatch Tunnel.

Install Validation

Provides tests and checks to perform in order to validate that the component has been successfully installed and configured. These should always be performed after a new install or upgrade to confirm functionality.

Tunnel Logs

How to guide for gathering Tunnel logs. These logs will be needed if you run into any issues with the Tunnel during or after an install or upgrade. It will also help our support team assist you more quickly if these are provided up front.

Install Troubleshooting

This forum provides resolutions to common issues and error messages that are encountered during a Tunnel install. Please be sure to gather logs prior to beginning troubleshooting.



Install Validation


The following steps should be performed after an AirWatch Tunnnel install or On Premise upgrade to confirm Proxy and Per App VPN functionality. These steps assume that you have pushed the AirWatch Tunnel applicaton and Per-App VPN profile to your device. If you encounter issues at any point during validation, please proceed to the Tunnel Logs and Install Troubleshooting sections.

Validation Step Actions Expected Results
Step 1 - Tunnel Test Connection Navigate to Groups & Settings > All Settings > System > Enterprise Integration > AirWatch Tunnel Connection Succeeded
Tunnel_Step_1.jpg
Step 2.1 - Check Tunnel App Connection on iOS Device On your device, open the Tunnel Application and select "Connect" Tunnel connection should be established.
Step 2.2 - Check Tunnel App Connection on Android Device On your device, open a Tunnel enabled application Tunnel connection should be established in the app.
Step 3 - Tunnel to Internal Sites In a tunnel enabled web browser(Safari on iOS, Dolphin on Android), navigate to an internal website. Device should successfully access the internal site.

Tunnel Logs


The following article provides information on how and when to collect and verbose logs related to the Linux Tunnel. Collecting logs from the Linux Tunnel is an effective way of finding the source of an issue with your Per App Tunnel or Proxy. There are many troubleshooting steps you can try before collecting logs but if you are submitting a support ticket the time to resolve the ticket will be much quicker if you include the logs.

Per-App Tunnel


Gathering Logs

Per App Tunnel logs are stored in the native syslog system of Linux. Logs are stored in /var/log/airwatch/tunnel/vpnd and can be sorted by the following command (as root):
tail -f /var/log/airwatch/tunnel/vpnd/tunnel.log

To Change the log level:

  • Navigate to /opt/airwatch/tunnel/vpnd/server.conf
  • Change log_level to log_level 4 and Save
  • Stop and Start the service
  • Revert changes and restart both services when finished


Commands

CentOS/RHEL 6.x:

  • start vpnd – Starts the service
  • stop vpnd – Stop the service
  • restart vpnd – Restarts the service.


CentOS/RHEL 7.x:

  • systemctl start vpnd – Starts the service
  • systemctl stop vpnd – Stop the service
  • systemctl restart vpnd – Restarts the service



Proxy


Gathering Logs

Proxy logs are stored in the native syslog system of Linux. Logs are stored in /var/log/airwatch/proxy and can be sorted by the following command (as root):
tail -f /var/log/airwatch/proxy/mag.log

To Change the log level:

  • Navigate to /opt/airwatch/tunnel/proxy/conf/logback.xml
  • Look for the root level=“*” tag to update the level as needed (warn to debug)
  • Stop and Start the service
  • Revert changes and restart both services when finished


Commands

Any CentOS/RHEL version:

  • sudo service proxy start – Starts the service
  • sudo service proxy stop – Stops the service
  • sudo service proxy restart – Restarts the service
  • sudo service proxy status – Shows the status of the service
Have more questions? Submit a request

0 Comments

Article is closed for comments.