Deploying Applications Using Ivanti NMDM on Apple iOS

To deploy Ivanti managed applications:

  1. From the Ivanti NMDM console, select Apps > App Catalog, and then click Add.

  2. From the application store drop-down list, select iOS Store.

  3. In the Apple App Store window, search for Ivanti Secure Access Client app, select the application, and then click Next.

  4. In the App Information page, specify Launch URL, add a brief Description (optional), and then click Next.

  5. In the App Delegation page, select the Do not delegate this app option and click Next.

  6. Choose a distribution level for this configuration of the app and click Next.

    • Every One- The app is added to all the user compatible devices.
    • No One - The app is staged for distribution at a later date.
    • Custom - Select one of the options from "User/User Groups" or "Device/Device Groups".

  7. In the App Configuration page, select Apple Application Management Configuration Settings and click Done.

  8. The app is listed in the Apps/App Catalog.

Configuring Per-app VPN, Always On VPN / On Demand VPN for iOS Endpoints Using Ivanti NMDM

Per-app VPN allows iOS devices to establish VPN connections only for specific apps, while other traffic goes through the normal network.

In an Always On VPN configuration, the connection is always on. The traffic that matches specific filters is always routed through the ICS tunnel.

To configure Per-app VPN and enable VPN On Demand:

  1. From the Ivanti NMDM console, select Configurations and then click Add.

  2. In the Add Configuration page, select the Certificate configuration.

  3. Enter a name for the configuration, and then browse and select the certificate file.

  4. Click Next and Distribute.

  5. In the Add Configuration page, select the Per-App VPN configuration.

  6. In the Per-App VPN Configuration page that is displayed:

    1. Enter the Connection Name that the endpoint displays.
    2. Select Pulse Secure from the Connection Type list.
    3. Enter the Server host name.
    4. Specify the Realm name and user Role.
    5. Select Certificate as User Authentication.
    6. Enable VPN On Demand.
  7. Click Next.

  8. Choose a distribution level for this configuration of the app and click Done.

    • All Devices - The app is added to all the user compatible devices.
    • No Devices - The app is staged for distribution at a later date.
    • Custom - Select one of the options from "User/User Groups" or "Device/Device Groups".
  9. To configure Always On VPN:

    1. From the Ivanti NMDM console, select Configurations and then click Add.

    2. In the Add Configuration page, select the Always On VPN configuration.

    3. In the Create Always On VPN Configuration page, enter the required details and click Next.

    4. Choose a distribution level for this configuration of the app and click Done.

      • All Devices - The app is added to all the user compatible devices.
      • No Devices - The app is staged for distribution at a later date.
      • Custom - Select one of the options from "User/User Groups" or "Device/Device Groups".