Enabling per-app VPN

You can set up per-app VPN for 

iOS

, 

Samsung Knox

, 

and 

Windows 10

 devices to specify which apps on devices must use a VPN for their data in transit. Per-app VPN helps decrease the load on your organization’s VPN by enabling only certain work traffic to use the VPN (for example, accessing application servers or webpages behind the firewall). In on-premises environments, this feature also supports user privacy and increases connection speed for personal apps by not sending the personal traffic through the VPN.

For 

iOS

 devices, apps are associated with a VPN profile when you assign the app or app group to a user, user group, or device group.

For 

Samsung Knox

devices with 

Android Enterprise

and 

Samsung Knox Workspace

 activations, apps are added to the "Apps allowed to use the VPN connection" setting in the VPN profile.

For 

Windows 10

 devices, apps are added to the "App trigger list" setting in the VPN profile.