Tunnel - Workspace ONE



The un-official subreddit for VMware Workspace One. I recently started learning/managing Workspace One for the company I work for, I came to reddit to find others and saw that there wasn’t a community, so I started one. Customers who have purchased VMware Workspace ONE can download their relevant installation package from the product download tab below. VMware Desktop Clients - Windows, and Mac Visit the Horizon Clients download page to get your clients. VMware Workspace ONE Tunnel securely connects both internally built and public App Store applications to corporate resources within your network.

VMware Workspace ONE Tunnel for Windows Release Notes provide information on the new features and improvements in each release. This page includes a summary of the new features introduced, a list of our resolved issues, and known issues.

Download Tunnel - Workspace ONE for Android to vMware Workspace ONE Tunnel securely connects both internally built and public Google Play applications to corporate resources within your. Workspace ONE Tunnel – The app used on the device to securely connect to the Unified Access Gateway to provide Per-App Tunnel functionality, also referred to as Tunnel Client. Unified Access Gateway – The virtual appliance where the VMware Tunnel edge service is installed, and to which the tunnel client connects.

  • New Features

Workspace One Tunnel Windows 10

New Features

In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

In this release, we’ve made a few updates containing general quality and performance improvements with no new features.

Minimum Requirements

  • Windows 10 17.04 or later
  • Workspace ONE UEM 1902 or later

Download Instructions

  • You can download the new client from My Workspace ONE here.

Resolved Issues

The resolved issues are grouped as follows.

Resolved Issues for Workspace ONE Tunnel 2.0.4 for WindowsTunnel

Vmware Tunnel Workspace One

Workspace one tunnel proxy
  • PPAT-7895: Fixed application connectivity issue which uses Dual-Stack socket (IPv6-mapped IPv4 address).

Resolved Issues for Workspace ONE Tunnel 2.0.3 for Windows
  • PPAT:7762: Ul shows 'Authentication certificate not present' if old or multiple matching certificates are found.

  • PPAT-7714: Improved connectivity on slow networks by adding a timeout value. The flag <TcpConnectTimeOut> can be added to the Custom Configuration payload with a value in seconds to specify the duration after which to timeout.

Resolved Issues for Workspace ONE Tunnel 2.0.2 for Windows
  • PPAT-7369: Fixed issue with applications utilizing loopback calls. ​

Known Issues

The known issues are grouped as follows.

Known Issues for Workspace ONE Tunnel 2.0.4 for Windows

We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Known Issues for Workspace ONE Tunnel 2.0.3 for Windows

We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Known Issues for Workspace ONE Tunnel 2.0.2 for Windows

We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Deploying VMware Tunnel using the Unified Access Gateway appliance provides a secure and effective method for individual applications to access corporate resources. Unified Access Gateway supports deployment on either ESXi or Microsoft Hyper-V environments.

VMware Tunnel is composed of two independent components: Tunnel Proxy and Per-App Tunnel. You deploy VMware Tunnel using either single or multi-tier network architecture models.

Both Tunnel Proxy and Per-App Tunnel deployment models can be used for a multi-tier network on the Unified Access Gateway appliance. The deployment consists of a front-end Unified Access Gateway server deployed in the DMZ and a back-end server deployed in the internal network.

The Tunnel Proxy component secures the network traffic between an end user device and a website through the VMware Browser or any VMware AirWatch SDK-enabled application deployed from VMware AirWatch. The mobile application creates a secure HTTPS connection with the Tunnel Proxy server and protects the sensitive data. Devices are authenticated to the Tunnel Proxy with a certificate issued via the SDK as configured in the Workspace ONE UEM console. Typically, this component should be used when there are unmanaged devices that need secured access to internal resources.

For fully enrolled devices, the Per-App Tunnel component enables devices to connect to internal resources without needing the VMware AirWatch SDK. This component uses the native Per-App VPN capabilities of the iOS, Android, Windows 10, and macOS operating systems.

For more information on these platforms and VMware Tunnel component capabilities, refer to the latest Tunnel documentation from the WorkSpace ONE UEM documentation page.

Deploying the VMware Tunnel for your VMware AirWatch environment involves the following:
  1. Set up the initial hardware.
  2. Configure the VMware Tunnel hostname and port information in the Workspace ONE UEM console. See Firewall Rules for DMZ-Based Unified Access Gateway Appliances.
  3. Download and deploy the Unified Access Gateway OVF template.
  4. Manually configure the VMware Tunnel.

AirWatch v9.1 and above supports Cascade Mode as the Multi-Tier deployment model for VMware Tunnel. Cascade Mode requires a dedicated inbound port for each Tunnel component from the internet to the front-end Tunnel server. Both the front-end and back-end servers must be able to communicate with the AirWatch API and AWCM servers. VMware TunnelCascade mode supports the multi-tier architecture for the Per-App Tunnel component.

For load balancing considerations for Content Gateway and Tunnel Proxy, see Unified Access Gateway Load Balancing Topologies.

Go to the VMware AirWatch documentation page for a complete list of VMware AirWatch guides and release notes.