iOS 17.4 AppProxyProvider not starting when Apps (associated with PerAppVPN) access network resource

Hi, With iOS-17.4 update, we are seeing AppProxy VPN not getting started when Apps (associated with PerAppVPN) tried to access network resource after MDM PerAppVPN profile install/update.

Looks like PerApp rules associated with applayer vpn profile are broken after profile update/install as we see internet sites working without going through VPN (appProxy network extension), this start working if we toggle WiFi and then access network resource from Apps associated with PerAppVPN.

Created FB13688086 with all the details for this iOS 17.4 and AppLayerVPN, looking for and update here and any feedback/pointers will help. Thanks

Post not yet marked as solved Up vote post of vmku Down vote post of vmku
546 views
Posted by
vmku
Reply

  • Thanks for filing FB13688086.

    —
    eskimo

  • Thanks @eskimo for acknowledging it, any update on the feedback will help as customers constantly asking for updates.

    —
    vmku
Add a Comment

Replies

any update on the feedback

If there were, it’d show up in Feedback Assistant.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Posted by
eskimo
Up vote reply of eskimo Down vote reply of eskimo
Add a Comment

Hi, same here. We can replicate the issue with different per App solutions of different MDM systems. Workaround for us is to restart the device. After restart the per App VPN is triggered correctly for the per App VPN Apps. Safari Domains in VPN Profile seems to work. We just see the problem with Apps using per App VPN.

BR

Posted by
MGiese
Up vote reply of MGiese Down vote reply of MGiese
Add a Comment

@eskimo: Thanks for the reply, and slightly similar issue seen with macOS 14.4.1 update and many customers are facing this. Need help on this.

Posted by
vmku
Up vote reply of vmku Down vote reply of vmku
Add a Comment

I don’t think there’s any code-level workaround for FB13688086, and that’s all DTS can help you with. If this is causing grief for your customers, I recommend that you work with one of them to escalate it to Apple Support.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Posted by
eskimo
Up vote reply of eskimo Down vote reply of eskimo
Add a Comment