Workspace ONE® Tunnel enables secure, seamless access to internal corporate resources from mobile and desktop devices. Designed specifically for modern digital workforces, Tunnel provides a per‑app VPN architecture that limits network exposure while delivering a user‑friendly, high‑performance connectivity experience. As part of the Workspace ONE platform, it integrates with unified access controls, identity, compliance, and device management policies to enforce Zero Trust access across applications. Tunnel helps organizations protect sensitive systems, reduce risk, and support secure remote and hybrid work environments.

Features

Continuous authorization

Verify that corporate and user-owned devices enforce device policies and user entitlements prior to granting access, and perform real time enforcement throughout a user’s session.

Access segmentation

Deploy in per-app mode or capture all traffic on a device. Define least-privilege connection paths for internal and public apps explicitly to the sites and services you dictate.

Compliance and privacy

Comply with data sovereignty and privacy laws such as the European Union's GDPR and make use of security standards including TLS 1.3, FIPS 140-2 and SAML 2.0.

Insights and analytics

Inform security decisions with comprehensive visibility powered by Omnissa Intelligence; enable data-driven choices and curate the right policies for your business.

Benefits

Segment access

Enable least-privilege, zero trust policies with device tunneling or move to modern app tunneling for tighter security sculpting, all without joining a network.

Enforce compliance

Continuously verify device, user, and behavioral risk indicators. Interrupt application access in real time without waiting on authentication expiration.

Respect privacy

Balance work and personal space according to a user's device type - whether protecting apps on a corporate-issued or personal device.