Connecting to an on-premises Connections server

Connections for iOS communicates with its Connection server over a secured TLS channel using the HTTPS protocol. Depending on your network topology and the placement of your Connections server (or a reverse proxy in front of it), the server may or may not be directly accessible from the Mobile Server application without deploying a network tunnel.

If connecting to an externally accessible server or edge proxy, then to set up Connections for iOS, just provide the Server URL to the Proxy or the Connections server using custom configuration. However, if these topologies do not match your needs, some MDM providers offer an application tunnel to allow an app to connect to on-premises servers via an MDM server deployed between their company firewalls. This feature in AppConfig is known as a Per App Virtual Private Network (Per App VPN). A Per App VPN can be defined as a device policy and access to the tunnel can be restricted to only managed apps on the device, or even to just a subset of those managed apps. The tunnel is activated on demand and will close when no longer required.