Configure a Per-App VPN Configuration for iOS Endpoints Using Microsoft Intune

You can enable access to internal resources from your managed mobile endpoints by configuring GlobalProtect VPN access using Microsoft Intune. In a per-app VPN configuration, you can specify which managed apps can route traffic through the VPN tunnel. Unmanaged apps will continue to connect directly to the internet instead of through the VPN tunnel.
Use the following steps to configure a per-app VPN configuration for iOS endpoints using Microsoft Intune:
  1. Download the GlobalProtect app for iOS.
  2. Before you can assign, monitor, configure, or protect apps, you must add them to Microsoft Intune.

Related Documentation