topic Re: iOS Global Protect Always-On VPN ? in General Topics

iOS Global Protect Always-On VPN ?

OGMaverick — Wed, 12 Feb 2020 14:46:51 GMT

We have:

MDM: Filewave

iOS: 12+

GP: 5+

When an iPad is rebooted, GP doesn't auto reconnect & must manually be opened/connected again. Any ideas how to get it to actually always auto reconnect? We really only care about the user identification being automatic.

Re: iOS Global Protect Always-On VPN ?

SutareMayur — Wed, 12 Feb 2020 15:06:30 GMT

@OGMaverick,

In order to work Pre-Logon in proper way, you need to use Certificates for authentication.

Let me grab some information on this. Will update you.

Mayur

Re: iOS Global Protect Always-On VPN ?

OGMaverick — Wed, 12 Feb 2020 20:36:15 GMT

We were able to go with the 'On Demand' option and then add XML to make it always connect when on our SSID. It's staying connected through reboots now. Now our only other issue is iPads all of a sudden prompting for portal/user even though it has been pushed out in the profile

Re: iOS Global Protect Always-On VPN ?

Sec101 — Tue, 08 Sep 2020 14:02:03 GMT

How/What XML did you add to get this to work?

Re: iOS Global Protect Always-On VPN ?

OGMaverick — Tue, 08 Sep 2020 14:11:45 GMT

I think it was:

<dict>

<key>Action</key>

<string>Connect</string>

<key>SSIDMatch</key>

<string>SampleSSID</string>

</dict>

These links were used for reference. I don't deal with the iPads or the MDM system to know absolutely for sure that it's still working or if it's exactly what was used.

https://nerd.one/vpn-on-demand-configuration-profiles-for-ios-and-macos-explained/

https://www.derman.com/blogs/Example-iOS-VPN-OnDemand-Rules

https://www.codingmerc.com/blog/ios-vpn-on-demand-profile-with-openvpn/