What is Workspace ONE Tunnel?
Workspace ONE Tunnel is a secure access solution that helps organizations simplify and enhance their VPN architecture. Built on zero trust principles, Tunnel helps enforce granular, least privilege access control with per-app and per-user policies.
Secure remote access
Enable least-privilege, zero trust access to apps and resources. Choose device tunneling or move to modern app tunneling for additional segmentation and control.
Mitigate mobile threats
Expand your security with protection against phishing attacks and malware sources with streamlined integration into Tunnel.
Behavior analytics
Integrate Omnissa Intelligence to visualize user and app activity, create custom dashboards, and set alerts for identifying anomalies.
Why replace your legacy VPN?
Workspace ONE Tunnel makes zero trust enforcement easy for admins and easier for users.
Continuous authorization
Access segmentation
Compliance and privacy
Insights and analytics
Customer spotlight
Organizations rely on Workspace ONE Tunnel to deliver secure, reliable access for field teams and critical operations—helping enable productivity and supporting compliance.
Core components and architecture
Workspace ONE Tunnel leverages a modular, scalable architecture to deliver enterprise VPN, per-app tunneling, and continuous compliance for diverse device fleets.
Tunnel client
A simple experience for end-users to understand their current status and the organization's policies.
LEARN MORETunnel gateway
Connector to your enterprise network, with flexible options for deploying on your favorite hypervisor.
LEARN MORE
Workspace ONE UEM
Administer everything Tunnel-related from a single location, for all of your networks and devices.
LEARN MOREOmnissa Intelligence
Gain advanced telemetry and insights by hooking Tunnel data into Omnissa' data platform.
Learn moreTunnel client
A simple experience for end-users to understand their current status and the organization's policies.
LEARN MORETunnel gateway
Connector to your enterprise network, with flexible options for deploying on your favorite hypervisor.
LEARN MORE
Workspace ONE UEM
Administer everything Tunnel-related from a single location, for all of your networks and devices.
LEARN MOREOmnissa Intelligence
Gain advanced telemetry and insights by hooking Tunnel data into Omnissa' data platform.
Learn moreTunnel client
A simple experience for end-users to understand their current status and the organization's policies.
LEARN MORETunnel gateway
Connector to your enterprise network, with flexible options for deploying on your favorite hypervisor.
LEARN MORE
Workspace ONE UEM
Administer everything Tunnel-related from a single location, for all of your networks and devices.
LEARN MOREOmnissa Intelligence
Gain advanced telemetry and insights by hooking Tunnel data into Omnissa' data platform.
Learn moreSecurity and compliance
Workspace ONE Tunnel provides a key link between endpoint security, organizational compliance, and enterprise access to apps and resources.
Least privilege access
Grant access based on user roles and device types, which can help minimize threat vectors to your apps.
Compliance enforcement
Revoke access immediately or progressively if users violate endpoint security policies.
Application profiling
Identify anomalous activity and enforce applications access only the resources they need.
Connect with your existing tools and platforms
Workspace ONE Tunnel leverages a modular, scalable architecture to deliver enterprise VPN, per-app tunneling, and continuous compliance for diverse device fleets.
Flexible deployment options
Workspace ONE Tunnel works with your existing infrastructure and firewalls.
-
On-premises or private cloud
Deploy on your preferred compute platform, either in your own data center or favorite cloud.
-
Simple networking
Deploy in environments with strict DNS rules and restrictive DMZs.
Explore Tunnel App
Advanced network controls
Leverage Tunnel’s simple edge security capabilities and integrate with others.
-
Local blocking
Minimize backhauling and latency with Tunnel’s local security capabilities.
-
Mobile Threat Defense
Integrate with Workspace ONE MTD for phishing and malware protections.
-
SSE integration
Connect Tunnel with 3rd party SSE’s for additional controls.
Explore infrastructure
Complete visibility
Harness Tunnel’s advanced insights to empower decision making.
-
Workspace ONE Intelligence
Get out-of-box reporting for analyzing user and application behaviors.
-
SIEM Integrations
Hook into your preferred SIEM platform for anything more.
Explore UEM
Next steps
Pricing and packaging
Workspace ONE Tunnel is included in Essentials editions, providing enterprise VPN and Zero Trust capabilities at no additional cost.
Deployment and onboarding
Get started with Workspace ONE Tunnel using guided setup and deployment resources.
-
Getting started
Get step-by-step instructions for setting up and using Workspace ONE Tunnel.
VIEW DOCUMENTATION -
Tech Zone resources
Access best practices, tutorials, and architecture diagrams.
SEE ON TECH ZONE
Support and training
Access help resources and learning paths to accelerate adoption.
-
24x7 support
Global support team available via portal and phone.
CONTACT SUPPORT -
Training modules
Self-paced courses, live webinars, and certification paths.
Learn more -
Community forums
Connect with peers and experts to share insights and solutions.
JOIN THE DISCUSSION
FAQ
Workspace ONE Tunnel provides traditional full-device tunneling, as well as per-app tunneling options, enabling organizations to easily replace their existing VPN and optionally move towards Zero Trust, with granular app-based policies and continuous compliance enforcement.
Workspace ONE Tunnel is supported on Windows, macOS, iOS, Android, Chrome OS, and Linux devices. Tunnel may be deployed on both managed and BYOD endpoints, offering flexibility for diverse userbases.
Workspace ONE Tunnel serves as an enforcement of compliance, helping IT teams reduce non-compliant devices from accessing corporate resources. Tunnel also helps meet privacy requirements by respecting personal and work boundaries that are critical to GDPR and other data sovereignty policies.
The Tunnel gateway can be deployed in your data center or favorite connected cloud hypesrcaler or compute provider. The gateway software can run on your preferred Linux distribution or as part of Omnissa’s Unified Access Gateway.
Yes, Workspace ONE Tunnel can layer in MFA provided through Omnissa Access, Okta, Ping, Entra, or Google. Tunnel can also help provide secure access to authentication systems that support network restrictions.
Yes, Workspace ONE Tunnel is included in Essentials editions, providing core enterprise VPN and Zero Trust capabilities at no additional cost.