Configure an Always On VPN Configuration for iOS Endpoints Using Microsoft Intune

In an Always On VPN configuration, the secure GlobalProtect connection is always on. Traffic that matches specific filters (such as port and IP address) configured on the GlobalProtect gateway is always routed through the VPN tunnel.
Use the following steps to configure an Always On VPN configuration for iOS endpoints using Microsoft Intune:
  1. Download the GlobalProtect app for iOS.
  2. (
    Optional
    ) If your deployment requires certificate-based authentication, configure a certificate profile.
    • Set the
      Platform
      to
      iOS
      .
    • Set the
      Connection type
      to
      Palo Alto Networks GlobalProtect
      .

Related Documentation