Configure an Always On VPN Configuration for Windows 10 UWP Endpoints Using Microsoft Intune

In an Always On VPN configuration, the secure GlobalProtect connection is always on. Traffic that matches specific filters (such as port and IP address) configured on the GlobalProtect gateway is always routed through the VPN tunnel.
Use the following steps to configure an Always On VPN configuration for Windows 10 UWP endpoints using Microsoft Intune:
  1. Download the GlobalProtect app for Windows 10 UWP:
  2. (
    Optional
    ) If your deployment requires certificate-based authentication, configure a certificate profile.
    • Set the
      Platform
      to
      Windows 10 and later
      .
    • Set the
      Connection type
      to
      Palo Alto Networks GlobalProtect
      .
    • Enable
      Always On
      VPN.

Related Documentation