Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.13
  3. Administration
  4. Securing network connections
  5. Using BlackBerry Secure Connect Plus for connections to work resources
  6. Enable BlackBerry Secure Connect Plus
  7. Enterprise connectivity profile settings
  8. iOS: Enterprise connectivity profile settings

iOS
: Enterprise connectivity profile settings

Setting
Description
Enable 
BlackBerry Secure Connect Plus
This setting specifies whether work apps use 
BlackBerry Secure Connect Plus
 for sending work data between devices and your network.
Enable VPN on demand
This setting specifies whether a work apps can automatically start a VPN connection using 
BlackBerry Secure Connect Plus
 when it accesses work resources.
Select this setting to specify rules for 
BlackBerry Secure Connect Plus
 connections
VPN on demand rules for 
iOS
 9 and later
This setting specifies the connection requirements for VPN on demand using 
BlackBerry Secure Connect Plus
. You must use one or more keys from the payload format example.
This setting is valid only if the "Enable VPN on demand" setting is selected.
Enable per-app VPN
Select this setting to allow only specific apps to use 
BlackBerry Secure Connect Plus
.
If you select this option, users must manually turn on the VPN connection on their device to use 
BlackBerry Secure Connect Plus
. As long as the VPN connection is on, the device uses 
BlackBerry Secure Connect Plus
 to connect to the work network. The user must turn the VPN connection off to use another connection, such as the work 
Wi-Fi
 network. Instruct users when it is appropriate to turn on and turn off the VPN connection (for example, you can instruct users to turn on the VPN connection when they are not in range of the work 
Wi-Fi
 network).
Safari
 domains
Click The Add icon to specify the domains that are allowed to start a VPN connection in 
Safari
.
Allow apps to connect automatically
Specify whether apps can start the VPN connection automatically.
Proxy profile
This setting specifies the associated proxy profile if you want to route secure tunnel traffic from devices to the work network through a proxy server.
The proxy profile must use a manual configuration with an IP address. PAC configuration is not supported. For more information, see Setting up proxy profiles for devices.