Prerequisites and Licensing for Configuring Per App VPN Tunnels

Install and configure a third-party Mobile Device Manager (MDM).

You must configure the applications that will be allowed in the VPN in the MDM itself, not on the threat defense headend device.

Download the Cisco AnyConnect Enterprise Application Selector from Cisco Software Download Center.

You need this tool to define the Per App VPN policy.

Secure Client Premier, or Secure Client Advantage.

Essentials license must allow export-controlled functionality.

To verify this functionality in the management center, choose System > Licenses > Smart Licenses.