Forum Discussion
Always on VPN Android
I am trying to enforce the use of a VPN client (have app as a required install). I did the device restriction policy and on my device and it shows up on my device. Problem is, I want all traffic bloc...
SebastiaanSmits ZScaler is the VPN app being used. With lockdown mode enabled, how do I get around opening up the URLs for the app to authenticate? Unlike for iOS, Android doesn't have a URL exclusion list.
The connection to the VPN Gateway (you provide this in your VPN configuration) is reachable in Lockdown. But that's why the question, what kind of authentication do you use, is important here. With CBA to the Gateway (or other direct Gateway authentication) this works without problems but if you use Modern Auth and there is a redirect to Entra this is not going to work as is. There is indeed no exclusion available: https://issuetracker.google.com/issues/238109298?pli=1
- By the way is also possible to check the VPN client logs to see what URL it trying to reach when authentication fails..
- I only have access to the logs the device can export. I've try to read them before and found nothing particulary helpful. It seems to sorta work but not consistently which makes me hesitant to say it's working. I am going to do another round of testing today.