September 27, 2019

Knox Deep Dive: Advanced Virtual Private Networks (VPN) - Part 2 of 2

Daljot Singh

In the previous article we discussed the differentiating features of Knox VPN, and in this blog we will be shedding light on key requirements for setup compliance. In addition, we present certain key-points to help you resolve any issues while setting up and where can you look for help.


What do target devices require to successfully run the Knox VPN framework?

The target device must have the following:

  • A VPN client integrated with the Knox VPN framework installed on the device.
  • The vendor-specific parameters for third-party VPN clients that help define the VPN profile.
  • A valid Knox license with VPNpermission: ""
  • If you want to control basic VPN configuration through the Android O Settings screen, you must download the add-on APK from Samsung and install it in the main user.


Should you install the VPN client inside or outside the Work Profile?

You can go for either option, depending upon your requirements. For example, if you have two Work Profiles created on your device, you can install the VPN client outside the Work Profile so that it is available to both Work Profiles. Conversely, if you install the VPN client inside one Work Profile, the VPN client is not available to the other Work Profile.


How do I troubleshoot VPN configuration issues?

  1. After pushing the Knox VPN client using an MDM solution to your devices, verify that it appears on both the personal space and on the Work Profile on the device.
  2. Verify that your VPN credentials are correct by manually setting up VPN in the personal space.
  3. Verify that you can connect to the Knox VPN gateway.
  4. If you can't connect to the Knox VPN gateway and:
    • you are connected to a firewall, change your access point and try again.
    • you aren't connected to a firewall, try to connect to any website using the device browser. If you can't access any websites, contact Samsung Knox Support.
  1. If the issue persists, capture log files and contact Samsung Knox Support.


VPN Clients That Work in the Knox VPN Framework

  1. Cisco
  2. F5
  3. Pulse Secure
  4. BlackBerry
  5. StrongSwan
  6. OpenVPN
  7. Mobile Iron
  8. Air Watch
  9. Aruba
  10. Spectra
  11. Net Motion


Next steps

We hope you enjoyed this article. We are bringing many more articles to help you make the most out of Knox features. Keep on learning, and stay informed. To learn more about:

[Icon] close

Get the right solution for your business

Join 25,000+ organizations around the world.

[Icon] suitcase
Are you a reseller or solution partner?

Get access to the Knox Partner Program for helpful partner tools, such as the Knox Deployment Program portal, Knox MSP portal, partner SDKs, and more.

[Icon] info
Unified Endpoint Management
Knox Suite
Rebranding and customization
Knox Configure
Fraud and theft protection
Knox Guard
Device protection plan
Samsung Care + for Business
Other products & services

Get started with

[Image] Knox Suite

All-in-one solution bundle for enterprise mobility.

[Icon] Check mark

Join us and get a 90-day free trial for Knox Suite and other Knox products. *Approval required

[Icon] Check mark

A complete set of tools to secure, deploy, manage, and analyze your enterprise's corporate mobile devices.

[Icon] Check mark

Try powerful features bundled with Knox Suite, such as Knox Remote Support.

Knox Suite include:

[Icon] Knox Platform for Enterprise Knox Platform for Enterprise
[Icon] Knox E-FOTA Knox E-FOTA
[Icon] Knox Mobile Enrollment Knox Mobile Enrollment
[Icon] Knox Asset Intelligence Knox Asset Intelligence
[Icon] knox manage Knox Manage
[Icon] knox capture Knox Capture

Get started with

[Image] Knox Configure Logo

Remotely configure Samsung devices in bulk and tailor them to specific needs, right out of the box.

[Icon] Check mark

After approval, you can try both the:

  • Setup edition — designed for a one-time deployment
  • Dynamic edition — deploy and update policies as many times without a factory reset.
[Icon] Check mark

Try either the Setup edition or Dynamic edition of Knox Configure on up to 30 devices.

[Icon] Check mark

Get a free Knox Suite trial upon approval to try our UEM.

Get started with

[Icon] Knox Guard Logo

Remotely control Samsung devices to reduce financial risks and protect assets.

[Icon] Check mark

After you get approved, generate your free trial license for 90 days.


Try all the features of Knox Guard on up to 30 devices, including SIM control and device locking.

[Icon] Check mark

Get a free Knox Suite trial upon approval to try our UEM.

Get started with

[Image] Samsung Care Plus For Business Logo

Protect your business devices against accidental damage and mechanical breakdowns.

[Icon] Check mark

Are you already a Samsung Care+ for Business customer? Create an account and access the Samsung Care+ for Business console.

[Icon] Check mark

Contact the Samsung sales team and get peace of mind for your devices.

Other products & services

[Image] Others logo
[Icon] Check mark

Samsung offers additional solutions to serve the unique needs of your business. Talk to a Samsung expert today.

Back to top