Manage VPN configurations on iOS and macOS devices

This topic describes the process for adding and removing VPN configurations from iOS and macOS devices. This assumes that you already configured VPN settings in the Library. For more information, see Create or edit VPN configurations in the Library.

To manage VPN configurations on an iOS or macOS device:

  1. Select the Devices tab in top navigation.
  2. Select an iOS or macOS device in the list.
  3. In the right-hand panel, choose VPN.
  4. To add one or more VPN configurations to the device:
    1. Click Add.
    2. In the VPN Configuration Library view, select one or more VPN configurations, and click Install on Device.
  5. To remove one or more VPN configurations from the device:
    1. Select one or more VPN configurations from the list.
    2. Click Remove, then Confirm Remove.
  6. To add VPN configurations to devices using policies:
    1. Select the Policies tab in top navigation.
    2. Complete one of the following steps:
      • To create a policy, click Add New.
      • To edit an existing policy, click an individual policy to open the policy details.
    3. In the Applies Tosection, select one or more labels associated with target devices. For more details about labels, see Using labels to group similar items.
    4. In the right pane, in the Resources tab, click Add Resources to open the drop-down list, and then click VPN to open a dialog.
    5. Slide the Link toggle to link/unlink the VPN configuration.
      • To link the VPN configuration to policy, slide the Link toggle to right. The color of the toggle changes to green indicating the resource is linked.
      • To unlink a previously linked VPN configuration, slide the Link toggle to left. The color of the toggle changes to red indicating the resource is unlinked.
    6. (Optional) In the Options column, click the icon to open Resource Options dialog. Select one of the following Compliance Type:
      1. Include - Select this option to include the resource when determining the compliance status.

        NOTE: By default, all the Resources in a policy are included in compliance checks.

      2. Exclude - Select this option to exclude the Resource when determining the compliance status.
    7. Click Add Resources to associate the VPN configuration to the policy. You can view the resource in the Resources pane.
    8. Click Push Resource to deploy the added VPN configuration to the target devices or users.
    9. For more information about policies, see Using policies to manage device configurations.