Segregating VPN traffic based on the originating application

A computer-implemented method, comprising:

• receiving network traffic from a tunnel endpoint of an application-specific virtual private network tunnel, the network traffic originating from a client application executed in a client device;
• identifying a particular virtual local area network through which the network traffic is received;
• determining, using an identifier of the particular virtual local area network and a mapping of virtual local area network identifiers, at least one characteristic of the client application or the client device from a set of one or more mobile device management attributes;
• and
• determining whether to route the network traffic to a destination based at least in part on the at least one characteristic.

A non-transitory computer-readable medium embodying a program executable in at least one computing device, wherein when executed the program causes the at least one computing device to at least:

• receive network traffic from a tunnel endpoint of an application-specific virtual private network tunnel, the network traffic originating from a client application executed in a client device;
• identify a particular virtual local area network through which the network traffic is received;
• determine, using an identifier of the particular virtual local area network and a mapping of virtual local area network identifiers, at least one characteristic of the client application or the client device from a set of one or more mobile device management attributes;
• and
• determine whether to route the network traffic to a destination based at least in part on the at least one characteristic.