Android VPN troubleshooting
Android Work Profile VPN: Which Apps Use It?
Identify the Android app profile, check whether work apps are available and collect the right details when a managed VPN connection fails.
Identify the copy of the app you opened
An Android phone with a Work Profile can show two copies of the same browser, mail client or calendar. Open the app drawer and look for the copy with a briefcase badge. That badge identifies an app in the Work Profile. Note the app name, the badge and the task you were trying to complete. Google illustrates the app distinction in its Android Work Profile guide.
Suppose your personal browser opens a public website and the work browser cannot reach a staff portal. Keep those observations separate when you describe the problem. The public page tells you the personal browser could reach that page. The staff portal still needs to be checked from the approved work app. For context about the services used by each, read the guide to work VPNs and personal VPNs when travelling.
Read the VPN icon alongside the app profile
Android supports a VPN service for a user or Work Profile, and a different VPN app can run in each profile. Android’s developer documentation describes one active VPN service per user or profile. A connection shown on the phone can therefore belong to a particular profile. See the Android VPN service documentation.
Google’s workplace guidance says a VPN set up in the Work Profile serves that profile and leaves personal app traffic outside its route. The status icon looks the same across profiles. To understand which connection applies to your task, match the work app and its approved VPN to the organisation’s setup instructions. Refer to Google’s explanation of work policy and VPN scope.
Check whether work apps are available
Look at the Work tab before treating an unavailable app as a VPN failure. Android can pause work apps and their notifications. If the profile is paused and you are scheduled to work, use your organisation’s normal instructions to resume it. If the phone displays an administrator message or the work controls are unavailable, give the exact message to the help desk.
Keep a managed VPN configuration as provided by the administrator. If you see a VPN connection prompt after opening an app, note the app name and which profile it belongs to before accepting anything unexpected. The Android VPN connection permission guide explains what to check when that prompt appears.
Record one result for the network and one for work access
Confirm which Wi-Fi or mobile connection the phone is using. If both profiles have trouble reaching their usual services, write down when the connection changed and whether the phone has a working internet connection. A venue sign-in or a mobile connection change may be relevant context. Use your organisation’s approved connection process for work apps and keep the profile and app names in your notes.
Once the work app is available, try one ordinary task you have permission to do. For example, open the staff calendar and note whether it shows an internet error, a VPN message or a request to sign in. Record the wording and the time. If the error began when you moved between networks, add the order of events using the VPN connection interruption checklist.
Work through a travel example
At a shared workspace, your personal browser loads a public page. The briefcase copy of your calendar opens but reports that it cannot reach the service. In the work tab, other work apps are available. Write down the network name for your administrator, the time, the calendar’s exact message and the status shown by the approved work VPN. A report with those four observations gives support enough context to decide which connection to inspect first.
If your organisation permits using mobile data for the same work task, ask whether a comparison would help. Record which connection you used for each result and keep the same work app and task. If the work calendar reaches the service after the change, report both outcomes. The administrator can then investigate the connection difference without losing the original error.
Give support enough information to reproduce the issue
A useful first report says which copy of the app you opened, whether the Work Profile was active, what the phone showed for the approved connection and which task failed. Include the phone model, Android version and time of the failure. If a personal app succeeded on the same connection, include that observation with the personal profile label.
Send the report to the team responsible for the managed connection using its usual support channel. Check screenshots for private notifications and account details before attaching them. The VPN support report privacy checklist can help you decide what belongs in the ticket. For a separate question about a JungleVPN release or access, use the current JungleVPN Android release information.