Main tasks for configuring Ivanti Tunnel for macOS (Ivanti Neurons for MDM)

Following are the main steps for configuring Ivanti Tunnel for macOS:

1. Adding Ivanti Tunnel configuration in Ivanti Neurons for MDM
2. Applying the Ivanti Tunnel VPN setting to managed apps (Ivanti Neurons for MDM)
3. Distribute Ivanti Tunnel for macOS as a VPP app (Ivanti Neurons for MDM)

Adding Ivanti Tunnel configuration in Ivanti Neurons for MDM

You create the configuration for Tunnel in Configurations. Ivanti Tunnel supports per-app as well as device-level VPN. Choose the appropriate Tunnel configuration depending on whether you are creating a per-app VPN or a device-level VPN.

Before you begin 

• If you are configuring per app VPN, create Ivanti Tunnel service for macOS in Standalone Sentry. For information on setting up Standalone Sentry with an Ivanti Tunnel service, see “Working with Standalone Sentry for AppTunnel” in the Standalone Sentry Guide for Ivanti Neurons for MDM.
• If you are configuring Ivanti Tunnel for securing authentication traffic with Access see the Access Guide.

Ivanti recommends creating separate Tunnel VPN configurations for iOS and macOS. Using the same Tunnel VPN configuration for iOS and macOS may cause issues with how Tunnel operates and how traffic through Tunnel is handled.

Procedure 

1. In Ivanti Neurons for MDM, go to Configurations > +Add.
2. Search for Ivanti Tunnel.
3. Click one of the following:
   • Ivanti Tunnel: Use this configuration to create a per-app VPN configuration for Ivanti Tunnel.
   • Ivanti Tunnel (On Demand): Use this configuration to create a per-device VPN configuration for Ivanti Tunnel.

   The Ivanti Tunnel configuration page displays.

4. If you selected the Ivanti Tunnel configuration, click iOS/macOS.
   The configuration options display.
5. Add the necessary configurations and click Next.
6. Choose a distribution option for the configuration and click Done.
   The configuration is distributed to the subset of the devices to which the app is distributed. Select the same distribution option that you selected for the Ivanti Tunnel for macOS app.

Next steps 

Go to Applying the Ivanti Tunnel VPN setting to managed apps (Ivanti Neurons for MDM).

Related topics 

• For a description of the configuration fields for Ivanti Tunnel VPN, see Ivanti Tunnel VPN configuration field description.
• For a description of the key-value pairs, see Key-value pairs for Ivanti Tunnel for macOS.

Applying the Ivanti Tunnel VPN setting to managed apps (Ivanti Neurons for MDM)

When you Add or Edit an app in the App Catalog, you have the option to select the per app VPN setting to apply to the app. For this workflow, select the Ivanti Tunnel VPN setting you created for macOS. This procedure is not needed if you configured per-device VPN using Ivanti Tunnel (On Demand).

Procedure

1. In Apps > App Catalog, add or edit an app.
2. In App Configuration for the app, for Per App VPN click +.
3. Enter a name for the configuration.
4. Check Enable Per-App VPN for this app.
5. Select the Ivanti Tunnel for macOS configuration to apply to the app.
6. Select a distribution option and click Next.
7. Click Done

Related topics 

For more information about adding and editing apps for distribution, see the following sections in the Ivanti Neurons for MDM Guide:

•“Adding an app from a public store.”

•“Adding an In-house app.”

Distribute Ivanti Tunnel for macOS as a VPP app (Ivanti Neurons for MDM)

Ivanti Tunnel is available in the Mac App Store. Device users can download the app directly from the Mac App Store.

Ivanti Tunnel can also be distributed as a Volume Purchase Program (VPP) app from Ivanti Neurons for MDM. Apple provides VPP to facilitate app purchase and distribution within an organization. The App Store Volume Purchase Program (VPP) allows participating organizations to purchase iOS and macOS apps in volume and distribute the apps to their users.

While Apple supports user-based licensing for macOS VPP apps, currently there is an Apple issue with the installation of user-based licensed VPP apps through MDM. As a result, Ivanti does not recommend applying user-based licenses to macOS VPP apps.

For information on how to distribute Ivanti Tunnel for macOS as a VPP app, see “Licenses” in the Ivanti Neurons for MDM Guide or by clicking Help in Ivanti Neurons for MDM.

For countries for which a VPP program is not available, device users can download and install Ivanti Tunnel directly from the Mac App Store.