Citrix SSO Per app vpn split tunneling not working

William Hanna 1 Reputation point
2021-01-13T21:23:26.85+00:00

Hello,

We are using Citrix SSO /netscaler to push per app vpn applied on Microsoft Edge.
We have enabled split tunneling to allow access both internal network and external.

Somehow only internal safari domains is working from edge and you cannot google to ex google.com.

Anyone know why?
We are using iOS

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,569 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Crystal-MSFT 51,981 Reputation points Microsoft Vendor
    2021-01-14T02:53:51.817+00:00

    anonymous user, For our issue, we can firstly check if the Intune policy we configured for Citrix SSO is applied successfully. If it is successful, we suggest to contact Citrix support to check on the VPN issue.

    56275-image.png
    Meanwhile, here is an article about setting up per-app VPN for iOS devices in Intune for the reference:
    https://learn.microsoft.com/en-us/mem/intune/configuration/vpn-setting-configure-per-app

    Hope it can help.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  2. Vinay Kothiyal 0 Reputation points
    2023-02-08T22:01:32.43+00:00

    Setting up per-app Split Tunneling for iOS Citrix SSO client requires passing the information in vendor specific configuration section (in the Citrix VPN attributes) as mentioned in following Citrix documentation:

    https://docs.citrix.com/en-us/citrix-gateway/citrix-gateway-clients/set-up-sso-for-ios-users.html#configuring-split-tunnel-in-per-app-vpn

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.