You can enable access to internal resources from your managed mobile endpoints by configuring
GlobalProtect VPN access using Workspace ONE. In a per-app VPN configuration, you
can specify which managed apps can send traffic through the GlobalProtect VPN
tunnel. Unmanaged apps will continue to connect directly to the internet instead of
through the GlobalProtect VPN tunnel.
Use the following steps to configure a per-app VPN configuration for Android endpoints using
Workspace ONE: