Configure an Always On VPN Configuration for iOS Endpoints Using Microsoft Intune

In an Always On VPN configuration, the secure GlobalProtect connection is always on. Traffic that matches specific filters (such as port and IP address) configured on the GlobalProtect gateway is always routed through the VPN tunnel.
Use the following steps to configure an Always On VPN configuration for iOS endpoints using Microsoft Intune:
  1. Download the GlobalProtect app for iOS.
  2. (Optional) If your deployment requires certificate-based authentication, configure a certificate profile.
  3. Create a new iOS VPN profile.
    • Set the Platform to iOS.
  4. Configure always on VPN settings for iOS endpoints.
    • Set the Connection type to Palo Alto Networks GlobalProtect.

Related Documentation