You can enable access to internal resources
from your managed mobile endpoints by configuring GlobalProtect
VPN access using MobileIron. In a per-app VPN configuration, you
can specify which managed apps can route traffic through the VPN
tunnel. Unmanaged apps will continue to connect directly to the
internet instead of through the VPN tunnel.
Use the following
steps to configure a per-app VPN configuration for iOS endpoints
using MobileIron: