What system requirements are required for per app vpn in iOS devices?
Most of the information about Apple's website and MDM manufacturers, said that the iOS 7.x device supports per app vpn, but does not specify the system environment requirements.
1. iOS 7.x device, of course
2. iOS 7.x devices must be registered and managed on the MDM server (MDM servers, such as SAP Afaria (apple aggregator may also be able to issue specialized MDM commands related to per app vpn)
3. The client where the vpn is to be installed on the iOS 7.x device. What? Is built-in VPN supported? In comparison, this per app vpn requires a specific VPN Client software installed on the iOS device.
4. MDM server: The MDM server, such as SAP Afaria (which may also be supported by apple aggregator), can issue specialized MDM commands related to per app vpn.
5. Not many VPN servers are specified. What? Does the VPN supported by iOS devices fail? Yes, not all are supported.
It looks like Cisco AnyConnect, F5 can.
Refer:
This article introduces how to configure per app VPN using AirWatch and F5 SSL vpn
The iOS Per app VPN uses F5's apm socks Proxy functionality so we'll need TMOS 11.4 or higher installed on the BIG-IP and Edge Client 2.0 or higher installed on the mobile device.
Https://devcentral.f5.com/articles/solving-secure-mobile-access-with-f5-and-ios-7-per-app-vpn-part-2
The post in the SAP Afaria Forum mentions Cisco Anyconnect, F5 supports Per App VPN, and the built-in vpn client of iOS does not support this feature.
"Per App VPN" requires additional VPN software to be installed.
Mocana, Cisco Anyconnect, F5, etc can do Per App VPN. The built-in VPN client doesn' t do per-app.
Http://scn.sap.com/thread/3571739
An unknown MDM manufacturer makes it clear that F5 Edge client and the Aruba VPN client support the per app vpn feature.
I have applied a "Per app VPN" profile for iOS and deployed it. But the app does not use it. Why not?
The "Per app VPN" feature does not support the built-in VPN functionality as provided in iOS. Therefore, you cannot use this one.
What is required so successfully use it?
You must have installed a VPN client on the iOS device which supports the "Per app VPN" feature like the F5 Edge client.
If this is installed, you must deploy a VPN configuration for this client and in addition specify the VPN profile to be used by the app.
Which VPN Client does Sophos Mobile Control currently support?
As of now the only VPN client being supported is Cisco AnyConnect
Which VPN Clients do support the "Per app VPN" feature?
In December 2013 the only VPN clients supporting this feature are the F5 Edge client and the Aruba VPN client.
Http://www.sophos.com/en-us/support/knowledgebase/120242.aspx
Setting Up an iOS 7 On-Demand VPN (it seems openvpn may work)
With IPSec (pserf) openvpn
Http://www.derman.com/blogs/Setting-Up-iOS-OnDemand-VPN