To connect an iOS MDM device to a virtual private network (VPN) and protect data during the connection to the VPN, configure the VPN connection settings. The IKEv2 VPN protocol also lets you set up a VPN connection for selected website domains in Safari.
To configure the VPN connection on a user's iOS MDM device:
In the console tree, in the Managed devices folder, select the administration group to which the iOS MDM devices belong.
In the workspace of the group, select the Policies tab.
Open the policy properties window by double-clicking.
In the policy Properties window, select the VPN section.
Click the Add button in the VPN networks section.
This opens the VPN network window.
In the Network name field, enter the name of the VPN tunnel.
In the Connection type drop-down list, select the type of VPN connection:
L2TP (Layer 2 Tunneling Protocol). The connection supports authentication of iOS MDM mobile device user using MS-CHAP v2 passwords, two-factor authentication, and automatic authentication using a public key.
PPTP (Point-to-Point Tunneling Protocol). The connection supports authentication of iOS MDM mobile device user using MS-CHAP v2 passwords and two-factor authentication.
IKEv2 (Internet Key Exchange version 2). The connection establishes the Security Association (SA) attribute between two network entities and supports authentication using EAP (Extensible Authentication Protocols), shared secrets, and certificates.
IPSec (Cisco). The connection supports password-based user authentication, two-factor authentication, and automatic authentication using a public key and certificates.
Cisco AnyConnect. The connection supports the Cisco Adaptive Security Appliance (ASA) firewall of version 8.0(3).1 or later. To configure the VPN connection, install the Cisco AnyConnect app from App Store on the iOS MDM mobile device.
Juniper SSL. The connection supports the Juniper Networks SSL VPN gateway, Series SA, of version 6.4 or later with the Juniper Networks IVE package of version 7.0 or later. To configure the VPN connection, install the JUNOS app from App Store on the iOS MDM mobile device.
F5 SSL. The connection supports F5 BIG-IP Edge Gateway, Access Policy Manager, and Fire SSL VPN solutions. To configure the VPN connection, install the F5 BIG-IP Edge Client app from App Store on the iOS MDM mobile device.
SonicWALL Mobile Connect. The connection supports SonicWALL Aventail E-Class Secure Remote Access devices of version 10.5.4 or later, SonicWALL SRA devices of version 5.5 or later, as well as SonicWALL Next-Generation Firewall devices, including TZ, NSA, E-Class NSA with SonicOS of version 5.8.1.0 or later. To configure the VPN connection, install the SonicWALL Mobile Connect app from App Store on the iOS MDM mobile device.
Aruba VIA. The connection supports Aruba Networks mobile access controllers. To configure them, install the Aruba Networks VIA app from App Store on the iOS MDM mobile device.
Custom SSL. The connection supports authentication of the iOS MDM mobile device user using passwords and certificates and two-factor authentication.
In the Server address field, enter the network name or IP address of the VPN server.
In the Account name field, enter the account name for authorization on the VPN server. You can use macros from the Macros available drop-down list.
Configure the security settings for the VPN connection according to the selected type of virtual private network. For information about these settings, refer to the context help of the administration plug-in.
For an IKEv2 connection, if necessary, set up a VPN connection for selected domains in Safari:
Select the Set up VPN connection for domains (Safari only) check box to specify the website domains that trigger a VPN connection.
Select the Connect automatically check box if you want the device to automatically activate a VPN connection when associated domains initiate network communication. If the check box is cleared, the user must activate a VPN connection manually before associated domains initiate network communication.
In the table, specify the domains that trigger a VPN connection in Safari. Each domain should be in the "www.example.com" format.
If necessary, configure the settings of the VPN connection via a proxy server:
Select the Proxy server settings tab.
Select the proxy server configuration mode and specify the connection settings.
Click OK.
As a result, the settings of the device connection to a VPN via a proxy server are configured on the iOS MDM device.
Click OK.
The new VPN is displayed in the list.
Click the Apply button to save the changes you have made.
As a result, a VPN connection will be configured on the user's iOS MDM device once the policy is applied.