Ivanti Tunnel installation on macOS

Ivanti Tunnel is distributed to macOS devices from Ivanti EPMM using Apple Volume Purchase Plan (VPP). For information on distributing Ivanti Tunnel for macOS, see

• Ivanti EPMM deployments: Distribute Ivanti Tunnel for macOS as a VPP app (Ivanti EPMM).
• Ivanti Neurons for MDM deployments: Distribute Ivanti Tunnel for macOS as a VPP app (Ivanti Neurons for MDM)

No user action is required for installing Ivanti Tunnel on macOS. The app is automatically installed on macOS devices when the administrator applies the VPP label to the app in the app catalog in Ivanti EPMM. Users see the Tunnel icon on the top menu bar. The Tunnel icon is also seen on the Launchpad. However, Tunnel cannot be launched from the Launchpad.

Allow keychain

When users access enterprise resources from a Safari browser or a managed app to which the Tunnel VPN configuration is applied, Ivanti Tunnel is automatically used to secure access to the enterprise resource. The experience is seamless to the end user. However, when the Tunnel is first pushed to the device or when the Tunnel configuration is re-pushed to the device, macOS prompts users to authorize the key. When prompted to authorize, click Allow.

If users either click Deny or ignore the prompt, the dialog is presented the next time Tunnel tries to connect.

 

• If Tunnel is in use, the app cannot be removed from the device. Users will see the following message: The item can’t be moved to the Trash because some of its extensions are in use.
• Per app VPN connection status is not provided on macOS.
• For countries for which a VPP program is not available, device users can download and install Ivanti Tunnel directly from the Mac App Store.
• Users cannot launch Ivanti Tunnel from the Launchpad.