Do Separated Apps (SA) have access to corporate VPNs?

Environment

• Knox Service Plugin (KSP)
• Knox Manage (KM)
• Android 11
• Samsung devices

Overview

Some customers have reported concerns that apps from the Separated Apps folder (for example, WhatsApp) might be able to access and sniff internal corporate networks that are available to corporate apps.

Resolution

To confirm, apps from the Separated Apps folder can not access VPNs available to corporate apps as long as it is configured correctly according to the VPN setup process.

Note that with special configuration, there exists the ability for Separated Apps to use the same corporate VPNs, if desired. This is only if the IT admin specifically configures the VPN to be Full-Device, Per-App, or Per-user (app is in SA folder).