Adding a Configuration Profile to Deploy the TMWS VPN

Procedure

1. Go to Devices → Configuration profiles, and click Create profile.
2. On the Create a profile screen, set the following parameters and click Create.
   • Platform: Select iOS/iPadOS.
   • Profile type: Select Templates.
   • Template name: Select VPN.
3. On the Basics tab, set the name for the profile and click Next.
4. On the Configuration settings tab, select Custom VPN for Connection type and set the following parameters.
   • Base VPN settings:
     • Connection name: Type a descriptive name for the VPN connection. The name will be displayed to end users on their devices.
     • VPN server address: Type 127.0.0.1.
     • Authentication method: Select Username and password
     • Split tunneling: Select Disable.
     • VPN identifier: Type com.trendmicro.tmws.vpn.client.
     • Enter key and value pairs for the custom VPN attributes: Add the key username, and the value MDM_TMWS.
   • Automatic VPN settings:
     • Type of automatic VPN: Select On-demand VPN.
     • On-demand rules: Click Add to add a row, specify the following settings, and click Save:
       • I want to do the following: Select Connect.
       • I want to restrict to: Select All domains.
     • Block users from disabling automatic VPN: Select Yes.

       Note This setting applies to iOS/iPadOS 14 and later.

5. Click Next.
6. On the Assignments tab, click Add groups, Add all users, or Add all devices under Included groups to assign the TMWS Agent app to your users.

   Note If you select Add group, make sure you select the same group or groups in the app information configuration, configuration policies, and configuration profiles for the TMWS Agent app for iOS/iPadOS.

7. Click Next.
8. On the Review + create tab, review the information you specified and click Create.
   The profile is successfully added to Microsoft Intune.