

You can follow this guide to reset your Root credentials via console: It is very fast and painless to do. It may give you a clearer indication on where connectivity is failing. Enable the diagnostic logging in your Tunnel app, restart the iPad and try it again. Within the UAG admin panels, I would also suggest making sure you have good DNS and NTP settings on both appliances. If your front-end cannot "see" your back-end, this can happen.

If the DTR wasn't functioning correctly for your rule, the VPN app would not have attempted to tunnel it, which is why you received the error message in the OP.

I've seen this when exporting a sample profile within WS1. So, adding it to the profile itself won't matter if its already a DTR. In order for the DTR to update, you do need to publish the associated VPN profiles again - either through the prompt in WS1 after editing the default rule, or by manually adding a version to the profile itself. That is not technically encouraged for production usage, and you may run into issues with older UAG appliances where the trusted root authorities are out of date unless manually added.Īdding a Device Traffic Rules in the iOS Context presents to the defined VPN profile the same way as defining a SafariDomain in the VPN profile. I also noticed you are using self-signed certificates.

I would love to understand how to do this.ĭo your Android endpoints still function with your SSL certificates in that condition? That needs to be remedied and keep in mind Android 11 and later also enforce the same validity length periods for certificates as Apple does now. In the end my goal is to be able to force the VPN on when an app opens, be it safari, or any other app I put on the device. So I believe it is just some configuration I have wrong. I have tried the Per App VPN Profile with this app and it did not work either.Ĭlearly the device connects to the internet, and clearly the VPN works since the test connection works. The VPP app is not on the Device Traffic Rules list. If I open my VPP App, the VPN also does not start. When I open Safari I see this error and the VPN does not start:Īs a test, I removed the VPN profile and it changed the error to this: With all that setup the device shows up as online in Airwatch, can get commands I send and check in, etc. I will post a screenshot of this menu option below: Device Traffic Rules have been created for Safari. A VPN Profile has been created and deployed to the iPad AirWatch UAG is all setup, if I go to "Groups and Settings > Configurations > Tunnel" and use the "Test Connection" button, it all comes back green and connected. I need Safari and a Purchased VPP app to both connect to VPN when opened and in use. I have been trying to get VPN to work on some LTE iPads we have.
