Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.13
  3. Administration
  4. Securing network connections
  5. Setting up work VPNs for devices

Setting up work VPNs for devices

You can use a VPN profile to specify how 
iOS
, 
macOS
, 
Samsung Knox
, 
Windows 10
, and 
BlackBerry 10
 devices connect to a work VPN. You can assign a VPN profile to user accounts, user groups, or device groups. For 
BlackBerry 10
 devices, you can also associate a VPN profile with a 
Wi-Fi
 profile.
To connect to a work VPN for 
Android
 devices other than 
Samsung Knox
, you can configure VPN settings using app configuration settings for a VPN app, or users can manually configure the VPN settings on their devices.
Device
Apps and network connections
BlackBerry 10
By default, both work and personal apps can use the VPN profiles stored on the device to connect to your organization's network. Work apps can also use the 
BlackBerry Infrastructure
 to connect to your organization's network. If your organization's security standards do not allow personal apps to access your organization's network, or you want to limit connectivity options for work apps, you can restrict connection options.
iOS
Work and personal apps can use the VPN profiles stored on the device to connect to your organization's network. You can enable per-app VPN for a VPN profile to limit the profile to the work apps that you specify.
You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand.  
macOS
You can configure VPN profiles to allow apps to connect to your organization's network. You can enable VPN on demand to have devices connect automatically to a VPN in a particular domain. For example, you can specify your organization's domain to allow users access to your intranet content using VPN on demand.  
Samsung Knox
On 
Samsung Knox
 devices with 
Android Enterprise
 or 
Samsung Knox Workspace
 activations, work apps can use the VPN profiles stored on the device to connect to your organization's network.
You can enable per-app VPN to limit the profile to the work apps that you specify.
A supported VPN client app must be installed on the device. 
Cisco AnyConnect
 and 
Juniper
 are supported.
The 
Juniper
 app supports only SSL VPN. 
Windows 10
You can configure VPN profiles to allow apps to connect to your organization's network. In the VPN profile, you can specify a list of apps that must use the VPN.