Is it acceptable (assuming it is supported) to have a VPN set to always on for a group of applications but not for the device as a whole? The description here is clearly expecting the whole device, but what if the VPN tunnel was set to only be applicable to an app group? That would still seem useful to be able to set, but the testing would be different.
This could impact some other requirements as well, but worthwhile to consider.
Is it acceptable (assuming it is supported) to have a VPN set to always on for a group of applications but not for the device as a whole? The description here is clearly expecting the whole device, but what if the VPN tunnel was set to only be applicable to an app group? That would still seem useful to be able to set, but the testing would be different.
This could impact some other requirements as well, but worthwhile to consider.