In an Always On VPN configuration, the secure
GlobalProtect connection is always on. Traffic that matches specific
filters (such as port and IP address) configured on the GlobalProtect
gateway is always routed through the VPN tunnel.
Use the following
steps to configure an Always On VPN configuration for iOS endpoints
using Microsoft Intune: