---
title: Juniper SSL
slug: device-management-guide/android/juniper-ssl
createdAt: 2026-10-06T07:48:37.156Z
---
This VPN connection type is supported on iOS, macOS, Android and Windows devices.
:::hint{type="info"}
Ivanti, Inc recommends that you use Pulse Secure SSL instead of Juniper SSL.
:::
Use the following guidelines to configure Juniper SSL VPN.
- [Proxy - None (default)](docId\:YOeOVtZ42-Fp9Q_CnLvIY)
- [Proxy - Manual](docId\:YOeOVtZ42-Fp9Q_CnLvIY)
- [Proxy - Automatic](docId\:YOeOVtZ42-Fp9Q_CnLvIY)
Within these selections, you may make settings for:
- [Windows Configuration](docId\:YOeOVtZ42-Fp9Q_CnLvIY)
- [Custom Data](docId\:YOeOVtZ42-Fp9Q_CnLvIY)
## Proxy - None (default)
Use the following guidelines to configure a Juniper SSL VPN without a proxy.
Table: Proxy - None settings
| Item | Description |
| ---------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name | Enter a short phrase that identifies this VPN setting. |
| Description | Provide a description that clarifies the purpose of these settings. |
| Channel | For macOS only. Select one of the following distribution options:
- Device channel - the configuration is effective for all users on a device. This is the typical option.
- User channel - the configuration is effective only for the currently registered user on a device. |
| Connection Type | Select Juniper SSL. |
| Samsung Knox | This setting applies to Android devices only. |
| Deploy inside Knox Workspace | This setting applies to Android devices only. |
| Server | Enter the IP address, hostname, or URL for the VPN server. |
| Proxy | None is the default setting. To configure a Manual or Automatic proxy, go to [Proxy - Manual ](docId\:YOeOVtZ42-Fp9Q_CnLvIY)or [Proxy - Automatic](docId\:YOeOVtZ42-Fp9Q_CnLvIY). |
| Username | Specify the user name to use (required.) The default value is $USERID$. Use this field to specify an alternate format, such as:
$USERID$, $EMAIL$, $SAM\_ACCOUNT\_NAME$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as the following:
- $USERID$:$EMAIL$
- $USERID$\_$EMAIL$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant username.
Some enterprises have a strong preference concerning which identifier is exposed. |
| User Authentication | Select the user authentication to use:
- Password - see next row for information.
- Certificate - If you select Certificate, select the identity certificate to be used as the account credential. |
| Password | Specify the password to use (required.) The default value is $PASSWORD$. Include at least one of the following variables:
$USERID$, $EMAIL$, $PASSWORD$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as $EMAIL$:$PASSWORD$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant password. |
| Role | Specify the Juniper user role to use as a restriction. |
| Realm | Specify the Juniper realm to use as a restriction. |
| VPN On Demand | This setting does not apply to Windows devices. |
| Per-app VPN | This setting does not apply to Windows devices.
This option is available when you enable the Per - VPN App.
5G Network Slicing allows mobile network operators to customize traffic through a 5G Standalone network with specific Quality of Service (QoS) requirements for network latency, throughput, and packet loss. This allows a 5G network tailored to meet the needs of different types of apps and services, such as high-bandwidth video streaming, low-latency communications, and mission-critical business apps.
When you select **Per-app VPN (License Required)** option, the **Enable 5G network slicing** is displayed.
To configure 5G network slicing:
1. Select the **Enable 5G network slicing** option.
2. Select either **Data Network** or **App Category**and provide the required details..
3. Click **Save**. |
| Provider Type | This setting applies to iOS and macOS devices only. |
Continue to [Windows Configuration](docId\:YOeOVtZ42-Fp9Q_CnLvIY).
Continue to [Custom Data](docId\:YOeOVtZ42-Fp9Q_CnLvIY).
## Proxy - Manual
Use the following guidelines to configure a Juniper SSL VPN with a manual proxy.
Table: Proxy - Manual settings
| Item | Description |
| ---------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name | Enter a short phrase that identifies this VPN setting. |
| Description | Provide a description that clarifies the purpose of these settings. |
| Channel | For macOS only. Select one of the following distribution options:
- Device channel - the configuration is effective for all users on a device. This is the typical option.
- User channel - the configuration is effective only for the currently registered user on a device. |
| Connection Type | Select Juniper SSL. |
| Samsung Knox | This setting applies to Android devices only. |
| Deploy inside Knox Workspace | This setting applies to Android devices only. |
| Server | Enter the IP address, hostname, or URL for the VPN server. |
| Proxy | Select Manual. To configure an Automatic proxy, go to [Proxy - Automatic](docId\:YOeOVtZ42-Fp9Q_CnLvIY). |
| Proxy Server | Enter the name for the proxy server. |
| Proxy Server Port | Enter the port number for the proxy server. |
| Type | Select Static or Variable for the type of authentication to be used for the proxy server. |
| Proxy Server User Name | If the authentication type is Static, enter the username for the proxy server.
If the authentication type is Variable, the default variable selected is $USERID$. |
| Proxy Server Password | If the authentication type is Static, enter the password for the proxy server. Confirm the password in the field below.
If the authentication type is Variable, the default variable selected is $PASSWORD$. |
| Proxy Domains (iOS only) | This setting applies to iOS and macOS devices only. |
| Username | Specify the user name to use (required.) The default value is $USERID$. Use this field to specify an alternate format, such as:
$USERID$, $EMAIL$, $SAM\_ACCOUNT\_NAME$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as the following:
- $USERID$:$EMAIL$
- $USERID$\_$EMAIL$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant username.
Some enterprises have a strong preference concerning which identifier is exposed. |
| User Authentication | Select the user authentication to use:
- Password - see next row for information.
- Certificate - If you select Certificate, select the identity certificate to be used as the account credential. |
| Password | Specify the password to use (required.) The default value is $PASSWORD$. Include at least one of the following variables:
$USERID$, $EMAIL$, $PASSWORD$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as $EMAIL$:$PASSWORD$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant password. |
| Role | Specify the Juniper user role to use as a restriction. |
| Realm | Specify the Juniper realm to use as a restriction. |
| VPN On Demand | This setting does not apply to Windows devices. |
| Per-app VPN | This setting does not apply to Windows devices. |
| Provider Type | This setting applies to iOS and macOS devices only. |
Continue to [Windows Configuration](docId\:YOeOVtZ42-Fp9Q_CnLvIY)
Continue to [Custom Data](docId\:YOeOVtZ42-Fp9Q_CnLvIY).
## Proxy - Automatic
Use the following guidelines to configure a Juniper SSL VPN with an automatic proxy.
Table: Proxy - Automatic settings
| Item | Description |
| ---------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name | Enter a short phrase that identifies this VPN setting. |
| Description | Provide a description that clarifies the purpose of these settings. |
| Channel | For macOS only. Select one of the following distribution options:
- Device channel - the configuration is effective for all users on a device. This is the typical option.
- User channel - the configuration is effective only for the currently registered user on a device. |
| Connection Type | Select Juniper SSL. |
| Samsung Knox | This setting applies to Android devices only. |
| Deploy inside Knox Workspace | This setting applies to Android devices only. |
| Server | Enter the IP address, hostname, or URL for the VPN server. |
| Proxy | Select Automatic. To configure a manual proxy, go to [Proxy - Manual ](docId\:YOeOVtZ42-Fp9Q_CnLvIY). |
| Proxy Server URL | Enter the URL for the proxy server.
Enter the URL of the location of the proxy auto-configuration file. |
| Proxy Domains (iOS only) | This setting applies to iOS and macOS devices only. |
| Username | Specify the user name to use (required.) The default value is $USERID$. Use this field to specify an alternate format, such as:
$USERID$, $EMAIL$, $SAM\_ACCOUNT\_NAME$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as the following:
- $USERID$:$EMAIL$
- $USERID$\_$EMAIL$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant username.
Some enterprises have a strong preference concerning which identifier is exposed. |
| User Authentication | Select the user authentication to use:
- Password - see next row for information.
- Certificate - If you select Certificate, select the identity certificate to be used as the account credential. |
| Password | Specify the password to use (required.) The default value is $PASSWORD$. Include at least one of the following variables:
$USERID$, $EMAIL$, $PASSWORD$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as $EMAIL$:$PASSWORD$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant password. |
| Role | Specify the Juniper user role to use as a restriction. |
| Realm | Specify the Juniper realm to use as a restriction. |
| VPN On Demand | This setting does not apply to Windows devices. |
| Per-app VPN | This setting does not apply to Windows devices. |
| Provider Type | This setting applies to iOS and macOS devices only. |
Continue to [Windows Configuration](docId\:YOeOVtZ42-Fp9Q_CnLvIY).
Continue to [Custom Data](docId\:YOeOVtZ42-Fp9Q_CnLvIY).
## Windows Configuration
Allowed Secured Resources (Windows Phone only)
Excluded Secured Resources (Windows Phone only)
See [Application-triggered VPN for Windows devices](docId\:bjvBroYZ4Tp_ME7E4S_Aq) for information on how to configure these settings to set up application-triggered VPN for 8.0.1 devices.
Table: Windows Configurations
| Item | Description |
| --------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Windows Configuration | Enter the secured resources (domains, IP ranges, or apps) used by the **Send All Traffic** option. |
| Always On | Select this option to keep the VPN on. **Lock Down** supersedes this option for Windows devices. |
| Lock Down | You cannot change the assigned settings unless 1) the **Lock Down** setting is removed from the profile and the new profile is pushed to the device or 2) the device is un-enrolled from Ivanti EPMM.
This option supersedes the **Always On** option. |
## Custom Data
- Add+ - Click to add a new key / value pair.
- Key / Value - Enter the Key / value pairs necessary to configure the VPN setting. The app creator should provide the necessary key / value pairs.