VPN vendors have been migrating from legacy VPN framework on iOS favor of the new Network Extension framework that was announced as part of iOS 9. While the legacy framework continued to function on the latest generally available operating systems, there are changes noted in the Fall release beta that indicate impact to existing functionality on the legacy framework.
Many VPN vendors including VMware have deployed new VPN apps that supported the new framework changes.
- Cisco Legacy AnyConnect
- F5 Access Legacy/F5 Access 2.1 and earlier
- Palo Alto Networks GlobalProtect 4.1 and earlier
This document is designed to help admins configure these new apps in the Workspace ONE UEM console since it will differ slightly from how it was done for the legacy apps. Previously, there were pre-configured templates for some of the more prevalent VPN vendors to assist admins in quickly configuring these legacy VPN apps. Now that vendors have will soon release their new VPN clients, admins must configure the new clients to ensure the new apps maintain functionality on devices running the new operating system released in Fall 2018.
How to configure new VPN clients in Workspace ONE UEM
The steps below are for how to configure new VPN clients in Workspace ONE UEM to prepare for iOS 12 deprecation of legacy applications. The VMware Tunnel application that replaced the legacy AirWatch Tunnel app contains its own template and should not be considered as part of this guide.
1. Create a new iOS profile with a VPN payload.
2. Select the “Custom” option from the VPN dropdown.
3. Configure the required fields:
- Connection Name - Description of the VPN connection displayed on the device
- Server - IP address or hostname of the VPN server
4. Configure Identifier – bundle ID of iOS app:
- Cisco AnyConnect - com.cisco.anyconnect
- F5 Access - com.f5.access.ios
- NetMotion - com.netmotionwireless.Mobility
- PaloAlto Global Protect - com.paloaltonetworks.globalprotect.vpn
5. Configure any other settings for per-app-VPN, authentication, and proxy.
6. Configure any vendor specific key/values by adding them to the Custom Data section.
7. Assign, save, and publish the new profile.
For additional information, refer to our Knowledge Base article on Getting Ready for Apple Fall 2018 Releases here.
Other Languages: 日本語