With Android 5.0, Google enhanced its VPN framework to
support application-level layer-3 tunneling. Users must first connect with F5 Access manually,
then start the app on the device with traffic that is required to go through the VPN tunnel.
For a seamless experience, use the always-on VPN functionality for users where the manual
start of the tunnel is not required.
Admin users can configure a list of allowed apps or
disallowed apps; traffic from the "allowed apps" list is able to pass through the VPN tunnel
while traffic from the "disallowed apps" list is unable to pass through. Use the allowed apps or
disallowed apps URL scheme parameters if the device is not a managed device using a Mobile Device
Manager (MDM) solution.