You need Airwatch VPN co-existence with XNDC as if the SEP Mobile VPN (xNVC) is always active, the device loses the connection to the client's intranet because it connects through the AirWatch VPN.
There can be only one VPN connection running at the same time. The existing interface is deactivated when a new one is created.
This is a Google Android limitation
The customer should disable all SEP Mobile VPN technologies if they need to use the Airwatch VPN. Blocking Unwanted Network Content (XNDC) can not work at the same time as the Airwatch VPN