While a third-party MDM system allows you to push configuration
settings that allow access to your corporate resources and provides
a mechanism for enforcing device restrictions, it does not secure
the connection between the mobile endpoint and services to which
it connects. To enable the client to establish secure tunnel connections,
you must enable VPN support on the endpoint.