iOS Global Protect Always-On VPN ?

[OGMaverick]

We have:

MDM: Filewave

iOS: 12+

GP: 5+

When an iPad is rebooted, GP doesn't auto reconnect & must manually be opened/connected again.  Any ideas how to get it to actually always auto reconnect?  We really only care about the user identification being automatic.

[SutareMayur]

@OGMaverick,

In order to work Pre-Logon in proper way, you need to use Certificates for authentication.

Let me grab some information on this. Will update you.

Mayur

[OGMaverick]

We were able to go with the 'On Demand' option and then add XML to make it always connect when on our SSID.  It's staying connected through reboots now.  Now our only other issue is iPads all of a sudden prompting for portal/user even though it has been pushed out in the profile

[Sec101]

How/What XML did you add to get this to work?

[OGMaverick]

I think it was:

<dict>

        <key>Action</key>

        <string>Connect</string>

        <key>SSIDMatch</key>

        <string>SampleSSID</string>

</dict>

These links were used for reference.  I don't deal with the iPads or the MDM system to know absolutely for sure that it's still working or if it's exactly what was used.

https://nerd.one/vpn-on-demand-configuration-profiles-for-ios-and-macos-explained/

https://www.derman.com/blogs/Example-iOS-VPN-OnDemand-Rules

https://www.codingmerc.com/blog/ios-vpn-on-demand-profile-with-openvpn/