Skip to main content

Workspace ONE Tunnel

Workspace ONE Tunnel helps customers support zero trust architectures with streamlined risk-based secure access to apps and resources, from virtually anywhere.

What is Workspace ONE Tunnel?

Workspace ONE Tunnel is a secure access solution that helps organizations simplify and enhance their VPN architecture. Built on zero trust principles, Tunnel helps enforce granular, least privilege access control with per-app and per-user policies. 

Secure remote access

Enable least-privilege, zero trust access to apps and resources. Choose device tunneling or move to modern app tunneling for additional segmentation and control.

EXPLORE ZERO TRUST ACCESS

Mitigate mobile threats

Expand your security with protection against phishing attacks and malware sources with streamlined integration into Tunnel.

Explore mobile threat defense

Behavior analytics

Integrate Omnissa Intelligence to visualize user and app activity, create custom dashboards, and set alerts for identifying anomalies.

Explore Omnissa Intelligence
Features

Why replace your legacy VPN?

Workspace ONE Tunnel makes zero trust enforcement easy for admins and easier for users. 

Continuous authorization

Verify that corporate and user-owned devices enforce device policies and user entitlements prior to granting access and perform real-time enforcement throughout a user’s session.

Access segmentation

Deploy in per-app mode or capture all traffic on a device. Define least-privilege connection paths for internal and public apps explicitly to the sites and services you dictate. 

Compliance and privacy

Comply with data sovereignty and privacy laws such as the European Union's GDPR and make use of security standards including TLS 1.3, FIPS 140-2 and SAML 2.0. 

Insights and analytics

Inform security decisions with comprehensive visibility powered by Omnissa Intelligence; enable data-driven choices and curate the right policies for your business.

Ready to get started

Replace your legacy VPN with cost-effective secure access. 

Customer spotlight

Organizations rely on Workspace ONE Tunnel to deliver secure, reliable access for field teams and critical operations—helping enable productivity and supporting compliance.

edu-hat

“A significant benefit of Workspace ONE Tunnel is when we’re using Google Maps for GPS. The last thing you need in an emergency is an app that’s slow or hasn’t updated with recent road closures. Per-app VPN removes local dependencies for services which we can assure for operation directly over the internet.”

Gregg Hudson
Mobility and Automation Manager, IT and Digital Team, West Midlands Police
Two colleagues, professional business people working together at workspace

Finance

Omnissa enables secure, seamless access to apps and data, helps reduce risk for financial services and optimizes cost through efficient operations.

indigo-uem-graphic

Education

Deliver seamless access to educational apps, devices, and resources, so you can focus on students and learning.

Cyber security professional in a modern office using a laptop, wearing ID badge with blue lanyard, with blurred office equipment in the background.

Federal government

Help federal agencies support protected app access and centralized control—while safeguarding mission-critical information.

Healthcare

Transform healthcare delivery with streamlined healthcare workflows and improved experiences -- driving operational efficiency across your organization.

Retail

Boost workforce productivity, deliver seamless, consistent customer experiences, and beat the competition with Omnissa products & solutions.

Core components and architecture

Workspace ONE Tunnel leverages a modular, scalable architecture to deliver enterprise VPN, per-app tunneling, and continuous compliance for diverse device fleets. 

Tunnel client

A simple experience for end-users to understand their current status and the organization's policies.

LEARN MORE

Tunnel gateway

Connector to your enterprise network, with flexible options for deploying on your favorite hypervisor.

LEARN MORE
Navy magenta icon devices

Workspace ONE UEM

Administer everything Tunnel-related from a single location, for all of your networks and devices.

LEARN MORE

Omnissa Intelligence

Gain advanced telemetry and insights by hooking Tunnel data into Omnissa' data platform.

Learn more

Tunnel client

A simple experience for end-users to understand their current status and the organization's policies.

LEARN MORE

Tunnel gateway

Connector to your enterprise network, with flexible options for deploying on your favorite hypervisor.

LEARN MORE
Navy magenta icon devices

Workspace ONE UEM

Administer everything Tunnel-related from a single location, for all of your networks and devices.

LEARN MORE

Omnissa Intelligence

Gain advanced telemetry and insights by hooking Tunnel data into Omnissa' data platform.

Learn more

Tunnel client

A simple experience for end-users to understand their current status and the organization's policies.

LEARN MORE

Tunnel gateway

Connector to your enterprise network, with flexible options for deploying on your favorite hypervisor.

LEARN MORE
Navy magenta icon devices

Workspace ONE UEM

Administer everything Tunnel-related from a single location, for all of your networks and devices.

LEARN MORE

Omnissa Intelligence

Gain advanced telemetry and insights by hooking Tunnel data into Omnissa' data platform.

Learn more

Security and compliance

Workspace ONE Tunnel provides a key link between endpoint security, organizational compliance, and enterprise access to apps and resources.

Least privilege access

Grant access based on user roles and device types, which can help minimize threat vectors to your apps.

Compliance enforcement

Revoke access immediately or progressively if users violate endpoint security policies.

Application profiling

Identify anomalous activity and enforce applications access only the resources they need.

Connect with your existing tools and platforms

Workspace ONE Tunnel leverages a modular, scalable architecture to deliver enterprise VPN, per-app tunneling, and continuous compliance for diverse device fleets.

Flexible deployment options

Workspace ONE Tunnel works with your existing infrastructure and firewalls.

  • On-premises or private cloud

    Deploy on your preferred compute platform, either in your own data center or favorite cloud.

  • Simple networking

    Deploy in environments with strict DNS rules and restrictive DMZs.

    Explore Tunnel App

Advanced network controls

Leverage Tunnel’s simple edge security capabilities and integrate with others.

  • Local blocking

    Minimize backhauling and latency with Tunnel’s local security capabilities.

  • Mobile Threat Defense

    Integrate with Workspace ONE MTD for phishing and malware protections.

  • SSE integration

    Connect Tunnel with 3rd party SSE’s for additional controls.

    Explore infrastructure

Complete visibility

Harness Tunnel’s advanced insights to empower decision making.

  • Workspace ONE Intelligence

    Get out-of-box reporting for analyzing user and application behaviors.

  • SIEM Integrations

    Hook into your preferred SIEM platform for anything more.

    Explore UEM

Modernize your VPN strategy

Discover how Workspace ONE Tunnel fits into the Omnissa Platform to help your organization support Zero Trust access and hybrid work across devices, apps, and locations.

Next steps

Pricing and packaging

Workspace ONE Tunnel is included in Essentials editions, providing enterprise VPN and Zero Trust capabilities at no additional cost. 

Deployment and onboarding

Get started with Workspace ONE Tunnel using guided setup and deployment resources. 

  • Getting started

    Get step-by-step instructions for setting up and using Workspace ONE Tunnel.

    VIEW DOCUMENTATION
  • Tech Zone resources

    Access best practices, tutorials, and architecture diagrams.

    SEE ON TECH ZONE

Support and training

Access help resources and learning paths to accelerate adoption. 

  • 24x7 support

    Global support team available via portal and phone.

    CONTACT SUPPORT
  • Training modules

    Self-paced courses, live webinars, and certification paths.

    Learn more
  • Community forums

    Connect with peers and experts to share insights and solutions.

    JOIN THE DISCUSSION

Ready to get started?

Discover how Workspace ONE Tunnel can help your organization achieve Zero Trust and support hybrid work securely.  

FAQ

Workspace ONE Tunnel provides traditional full-device tunneling, as well as per-app tunneling options, enabling organizations to easily replace their existing VPN and optionally move towards Zero Trust, with granular app-based policies and continuous compliance enforcement. 

Workspace ONE Tunnel is supported on Windows, macOS, iOS, Android, Chrome OS, and Linux devices. Tunnel may be deployed on both managed and BYOD endpoints, offering flexibility for diverse userbases.  

Workspace ONE Tunnel serves as an enforcement of compliance, helping IT teams reduce non-compliant devices from accessing corporate resources. Tunnel also helps meet privacy requirements by respecting personal and work boundaries that are critical to GDPR and other data sovereignty policies. 

The Tunnel gateway can be deployed in your data center or favorite connected cloud hypesrcaler or compute provider. The gateway software can run on your preferred Linux distribution or as part of Omnissa’s Unified Access Gateway. 

Yes, Workspace ONE Tunnel can layer in MFA provided through Omnissa Access, Okta, Ping, Entra, or Google. Tunnel can also help provide secure access to authentication systems that support network restrictions.  

Yes, Workspace ONE Tunnel is included in Essentials editions, providing core enterprise VPN and Zero Trust capabilities at no additional cost. 

You are now being redirected to an external domain. This is a temporary redirect while we build our new infrastructure and rebrand our legacy content.

This message will disappear in 10 seconds

CONTINUE