September 27, 2019

Knox Deep Dive: Advanced Virtual Private Networks (VPN) - Part 2 of 2

Daljot Singh

In the previous article we discussed the differentiating features of Knox VPN, and in this blog we will be shedding light on key requirements for setup compliance. In addition, we present certain key-points to help you resolve any issues while setting up and where can you look for help.


What do target devices require to successfully run the Knox VPN framework?

The target device must have the following:

  • A VPN client integrated with the Knox VPN framework installed on the device.
  • The vendor-specific parameters for third-party VPN clients that help define the VPN profile.
  • A valid Knox license with VPNpermission: ""
  • If you want to control basic VPN configuration through the Android O Settings screen, you must download the add-on APK from Samsung and install it in the main user.


Should you install the VPN client inside or outside the Work Profile?

You can go for either option, depending upon your requirements. For example, if you have two Work Profiles created on your device, you can install the VPN client outside the Work Profile so that it is available to both Work Profiles. Conversely, if you install the VPN client inside one Work Profile, the VPN client is not available to the other Work Profile.


How do I troubleshoot VPN configuration issues?

  1. After pushing the Knox VPN client using an MDM solution to your devices, verify that it appears on both the personal space and on the Work Profile on the device.
  2. Verify that your VPN credentials are correct by manually setting up VPN in the personal space.
  3. Verify that you can connect to the Knox VPN gateway.
  4. If you can't connect to the Knox VPN gateway and:
    • you are connected to a firewall, change your access point and try again.
    • you aren't connected to a firewall, try to connect to any website using the device browser. If you can't access any websites, contact Samsung Knox Support.
  1. If the issue persists, capture log files and contact Samsung Knox Support.


VPN Clients That Work in the Knox VPN Framework

  1. Cisco
  2. F5
  3. Pulse Secure
  4. BlackBerry
  5. StrongSwan
  6. OpenVPN
  7. Mobile Iron
  8. Air Watch
  9. Aruba
  10. Spectra
  11. Net Motion


Next steps

We hope you enjoyed this article. We are bringing many more articles to help you make the most out of Knox features. Keep on learning, and stay informed. To learn more about:

[Icon] close

Get started with Samsung Knox

[Icon] suitcase
Are you a reseller, solution provider, or service provider?

Become a Knox Partner and grow your business today.

[Icon] info

Select a Knox product to start with:

All-in-one Bundle
Knox Suite
Rebranding and Customization
Knox Configure
Fraud and Theft Protection
Knox Guard
Device Protection Plan
Samsung Care+ for Business
Other products & services

Get started with

[Image] Knox Suite

All-in-one solution bundle for enterprise mobility.

  • Get a free 90-day trial for up to 30 devices.
  • A complete set of tools to secure, deploy, manage, and analyze your corporate devices.
  • Try powerful features bundled with Knox Suite.

Knox Suite includes:

Knox Mobile Enrollment Free
Knox Manage
Knox Asset Intelligence
Knox Platform for Enterprise Free
Knox Remote Support
Knox Capture
Knox Authentication Manager

Get started with

[Image] Knox Configure Logo

Rebrand and customize your Samsung devices.

  • Get a free 90-day trial for up to 30 devices.
  • Remotely configure Samsung devices in bulk and tailor them to specific needs, right out of the box.
  • Set up your devices for a one-time deployment, or update them as much as you want.

Get started with

[Icon] Knox Guard Logo

Fraud and theft protection for Samsung devices.

  • Get a free 90-day trial for up to 30 devices.
  • Reduce financial risks and protect assets by remotely controlling Samsung devices.
  • Try all the features of Knox Guard, including SIM control and device locking.

Get started with

[Image] Samsung Care Plus For Business Logo

Device protection plans for your Samsung devices.

  • Limit business interruptions with quick device repairs and replacements. Contact the Samsung sales team to get started.
  • See all your device coverage and claim information in one place.
  • Already purchased Samsung Care+ for Business? Create an account and activate your plan on the Samsung Care+ for Business console.

Other products & services

[Image] Others logo

Modern solutions to address your unique needs.