iOS设备中per app vpn，到底需要哪些系统要求？

浏览数：31 / 时间：2015年06月11日

坑爹的Apple网站资料和MDM厂商资料，大多数说iOS 7.x设备支持per app vpn了，但是没有说明需要哪些系统环境要求。

1. iOS 7.x 设备，当然了

2. iOS 7.x 设备需在MDM服务器上注册并接受管理（MDM服务器比如SAP Afaria（apple configurator可能也可以）可以下发专门的和per app vpn相关的MDM指令）

3.iOS 7.x 设备要安装vpn的客户端。啥？不是内置VPN支持了吗？对比起，这个per app vpn需要iOS设备上面安装特定VPN Client软件啊

4. MDM服务器：MDM服务器比如SAP Afaria（apple configurator可能也可以）可以下发专门的和per app vpn相关的MDM指令

5.指定的VPN服务器，不多。啥？iOS设备支持的VPN不行？是滴，不是所有的都支持。

貌似Cisco AnyConnect, F5可以。

参考：

该文章介绍用AirWatch结合F5 SSL VPN配置per app vpn
The iOS Per app VPN uses F5’s APM SOCKS Proxy functionality so we‘ll need TMOS 11.4 or higher installed on the BIG-IP and Edge Client 2.0 or higher installed on the mobile device.
https://devcentral.f5.com/articles/solving-secure-mobile-access-with-f5-and-ios-7-per-app-vpn-part-2

SAP Afaria论坛中的帖子提到Cisco Anyconnect, F5支持Per App VPN，然后iOS设备内置的vpn client不支持这个特性
"Per App VPN" requires additional VPN software to be installed.
Mocana, Cisco Anyconnect, F5, etc can do Per App VPN. The built-in VPN client doesn‘t do per-app.
http://scn.sap.com/thread/3571739

某不知名的MDM厂商倒是明确说F5 Edge client and the Aruba VPN client支持per app vpn特性
I have applied a "Per app VPN" profile for iOS and deployed it. But the app does not use it. Why not?
The "Per app VPN" feature does not support the built-in VPN functionality as provided in iOS. Therefore, you cannot use this one.
What is required so successfully use it?
You must have installed a VPN client on the iOS device which supports the "Per app VPN" feature like the F5 Edge client.
If this is installed, you must deploy a VPN configuration for this client and in addition specify the VPN profile to be used by the app.
Which VPN Client does Sophos Mobile Control currently support?
As of now the only VPN client being supported is Cisco AnyConnect
Which VPN Clients do support the "Per app VPN" feature?
In december 2013 the only VPN clients supporting this feature are the F5 Edge client and the Aruba VPN client.
http://www.sophos.com/en-us/support/knowledgebase/120242.aspx