You can enable access to internal resources
from your managed mobile endpoints by configuring GlobalProtect
VPN access using Microsoft Intune. In a per-app VPN configuration,
you can specify which managed apps can route traffic through the
VPN tunnel. Unmanaged apps will continue to connect directly to
the internet instead of through the VPN tunnel.
Use the following
steps to configure a per-app VPN configuration for iOS endpoints
using Microsoft Intune: