For 64-bit Chromebook devices, you can specify which apps send data through the Gateway tunnel using the Gateway service policy. If your organization manages Chrome OS Enterprise devices using a Google domain, you can force Gateway to always be enabled and prevent users from changing the VPN configuration in the Aurora Protect Mobile app. For instructions, visit https://support.google.com/ and read "Set up virtual private networks (Android VPN app)". You can also extend the management of Chromebook Enterprise devices to your EMM provider such as BlackBerry UEM. For more information, see Extending the management of Chrome OS devices to BlackBerry UEM.