Configure an Always On VPN Configuration for Windows 10 UWP Endpoints Using Microsoft Intune

In an Always On VPN configuration, the secure GlobalProtect connection is always on. Traffic that matches specific filters (such as port and IP address) configured on the GlobalProtect gateway is always routed through the VPN tunnel.
Use the following steps to configure an Always On VPN configuration for Windows 10 UWP endpoints using Microsoft Intune:
  1. Download the GlobalProtect app for Windows 10 UWP:
  2. (Optional) If your deployment requires certificate-based authentication, configure a certificate profile.
  3. Create a new Windows 10 UWP VPN profile.
    • Set the Platform to Windows 10 and later.
  4. Configure always on VPN settings for Windows 10 UWP endpoints.
    • Set the Connection type to Palo Alto Networks GlobalProtect.
    • Enable Always On VPN.

Related Documentation