Setting per app VPN priority for iOS and macOS apps

The per app VPN settings the app uses depends upon:

• The label to which the per app VPN setting is applied (if the per app VPN is applied to a label).
• The assigned priority of the per app VPN setting in the Per App VPN field of the app.
• The first per app VPN listed in the right-hand column of the Per App VPN Settings has the highest priority; the last per app VPN has the lowest priority.

To rearrange the per app VPN settings’ priorities in the right-hand column (set of selected VPN settings), drag the setting names to the correct positions in the list. You can also use the up and down arrows.

The priority of per app VPN settings applied to labels is higher than per app VPN settings that are not applied to labels. For example, suppose the app lists VPN1, VPN2 and VPN3 as the possible per app VPN settings in the right-hand column (set of selected VPN settings).

• If VPN1 and VPN2 are applied to labels and VPN3 is not, then VPN1 is assigned to the app when the per app VPN list order is:
  • VPN1 (applied to label)
  • VPN2 (applied to label)
  • VPN3
• If VPN1 and VPN2 are applied to labels and VPN3 is not, then VPN1 is assigned to the app if the per app VPN list is:
  • VPN3
  • VPN1 (applied to label)
  • VPN2 (applied to label)

The Apps tab in device details (go to Devices & Users > Devices and click the caret to see the device details) lists the activated per app VPN for the device so that users and administrators can easily view which VPN the app is using on that device.

Per app VPN is not supported for iOS apps when Ivanti EPMM is configured for MAM-only iOS devices.