How To's
Home » How To's

How to remotely configure iBoss Per-app VPN Plug-ins for iOS/iPadOS devices?

Description

A Virtual Private Network (VPN) ensures only authorized users can access confidential corporate data, from any public network by transmitting all device-web communication on a secure channel. VPN also boosts productivity as it ensures employees can work from anywhere, without worrying about lack of access to specific resource/data. With remote work being adopted extensively, it has become mandatory for IT admins to configure VPN on mobile devices. Configuring VPN can be easily and efficiently done using MDM.

Steps

Follow the steps given below, to configure VPN plug-ins:

  • On the MDM console, click on Device Mgmt tab and select Profiles.
  • Create iOS/iPadOS profile and click Continue.
  • Select the VPN tab and fill the requisite parameters as explained below:

Policy Description

PARAMETER DESCRIPTION
Connection type

Select Custom SSL as the connection type.
Connection name

Provide a name for the VPN connection to be configured
App Name Specify the name of your VPN vendor
Plug-in identifier Specify com.iboss.ibossCloudForIOSEnterprise as Plug-in identifier
Server name/IP address Enter the Fully Qualified Domain Name or IP address of your VPN server
Account Specify the account that needs access to this VPN. Type %username% to get the appropriate user name, mapped to the device
Custom Data To apply customized configurations to the VPN, enter Custom Data key/value pair provided by your vendor. The key/value to be configured are
  • Gateway Port - Specify the port used by this VPN.
  • RunTimeMode- Specify standard as the value
  • ProxyAutoConfigurationScriptURL - Specify PAC script URL.
  • ComputerOverrideUser - To automate group categorization based on the user's profiles, specify 0. To automate group categorization to occur based on the device's configuration policy, specify 1.
  • WebSecurityKey - Specify group security key for the groups to which the profile will be distributed.
  • GatewayHost - Specify the hostname of the preferred DNS cluster used for this VPN Server.
  • CloudRegistrationSSLPort - If the proxy port was entered as 8009, specify 8016. If the proxy port was entered as 80, specify 443.
  • LogLevel - 0
  • AutoLoginSecurityGroups - Specify the group name associated with the security key from the WebSecurityKey parameter.
User authentication Specify the authentication type as Password or Certificate or Both
Password (If Password is selected for authentication) Specify the password to be used for user authentication
Identity Certificate (If Certificate is selected for authentication) Specify the identity certificate to be used for certificate-based authentication. You can also use SCEP for this.
Enable On-Demand VPN

Enabling On-Demand VPN ensures that a device not present in the corporate network, will be automatically connected to VPN whenever the specified list of server/domains are accessed. If you specify multiple domain names, they should be comma separated.
Proxy  Do not configure proxy setting to be used for this VPN connection