"Microsoft Teams" app has multiple "Microsoft Teams Helper" sub-processes with the same bundle identifier as main process when it is running, which is "com.microsoft.teams", and one of "helper" process handles most of Teams network traffic.
When assign "com.microsoft.teams" to the per-app packet-tunnel VPN profile, its network traffic are not sent to the VPN client app via the PacketFlow. I guess the VPN profile has been assigned to the main process which is not handling network traffic at all, but the helper sub-process is not assigned to VPN profile, so network traffic do not go through VPN.
Anyone can confirm my guess and guide me how make such kind of apps (main and helper apps together to finish the function) work with per-app VPN? Is the app vendor need modify its helper app to the different bundle identifier, so MDM can assign the helper bundle identifier specifically to the per-app VPN profile to handle the network traffic?
Attached MS Teams app contents below.
Thank you!
Contents
Resources
TeamsUpdaterDaemon.xpc
_CodeSignature
CodeResources
Frameworks
Microsoft Teams Helper.app
Microsoft Teams Helper EH.app
Microsoft Teams Helper NP.app
ADAL.framework
Electron Framework.framework
HockeySDK.framework
Mantle.framework
ReactiveCocoa.framework
Squirrel.framework
Info.plist
MacOS
Teams
PkgInfo