the VendorConfig keys inside the payload that will be sent is configurable, when configuring GlobalProtect MDM by using a 3rd party vendor.
Details
The available keys that the user can send are:
OnlyAppLevel
Used for iOS 7 device only, a value of ‘1’ means that the VPN configuration profile is Per-App VPN only while a value ‘0’ means that the profile supports device level VPN as well as Per-App VPN.
In iOS 8, Per-App VPN and device level VPN are put into separate VPN configuration groups on the device based on the profile payload type, so this config is no longer needed.
AllowPortalProfile
‘1’ means allow and ‘0’ means not allow.
Reference step 3, ‘Allow Portal Profile’, of the ‘Create a GlobalProtect Configuration for iOS devices’ section in the administrator's guide.
FromAspen
Internally used. Indicates that the VPN configuration comes from GlobalProtect MSM.