Per app VPN configuration (iOS device policy)
The Per app VPN configuration lets you configure VPN settings for individual apps. When you assign the Per app VPN configuration to an app, it uses the VPN for all its network traffic. See Assign a VPN connection to an iPhone or iPad app.
|The name of the connection shown on the device.
The type of VPN connection:
Select Custom SSL/TLS if your VPN vendor has an app in the App Store that provides the VPN connection.
|Identifier (reverse DNS format)
The identifier of the VPN app in reverse DNS format.
The app must be installed on the device.
|The hostname or IP address of the server.
|The user account for the authentication of the connection.
If your vendor has specified custom connection properties, you can enter them in this field.
To enter a property, click Add and then enter Key and Value of the property in the dialog box.
This setting is available for the Custom SSL/TLS connection type.
|Send all traffic through VPN
|All traffic is sent through VPN.
|Connect automatically on demand
The device turns the VPN on when the app connects to the network.
When you turn this setting off, users must turn the VPN on.
The group required for the authentication of the connection.
This setting is available for the Cisco AnyConnect and Cisco Legacy AnyConnect connection types.
|The type of user authentication for the connection, either Password or Certificate.
|The password for VPN authentication.
|The certificate for VPN authentication.
The proxy settings for the connection:
The VPN connection type.
This setting isn’t available for the Cisco AnyConnect connection type.
|Domains in Safari
|Domains for which iOS uses a VPN connection when opened in Safari or other web browsers.
|Domains in Calendar
|Domains for which iOS uses a VPN connection when opened in Calendar.
|Domains in Contacts
|Domains for which iOS uses a VPN connection when opened in Contacts.
|Domains in Mail
|Domains for which iOS uses a VPN connection when opened in Mail.
How to enter domains
The following rules apply to the Domains in Safari, Domains in Calendar, Domains in Contacts, and Domains in Mail fields:
- Enter one domain, partial domain, or host name per line.
A partial domain matches a domain name when all components match, starting at the right.
mail.example.com, but not
Leading and trailing dots are ignored.
When you enter a string without dots, it matches a host with that name.
com, but not
For security reasons, an additional rule applies to the Domains in Calendar, Domains in Contacts, and Domains in Mail fields:
The second-level domain must match the second-level domain of your VPN server.
For example if your VPN server’s address is
vpn.example.com, the domain can be