> For the complete documentation index, see [llms.txt](https://docs.cubilock.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cubilock.com/profile-management/network-settings/vpn-settings.md).

# VPN Settings

The **VPN Configuration** section within **Network Settings** lets administrators control how VPN (Virtual Private Network) connectivity is managed on enrolled Android devices. You can disable the user’s ability to configure VPNs, enforce VPN lockdown, and specify which VPN app should be used for secure connectivity.

#### Navigation:

Device Management → Device Profiles → Edit Profile → Network Settings → VPN Configuration

![VPN Configuration tab available in Configurations](/files/PQqx69xe3CIw0A7sWZwt)

### **What Each Setting Does**

#### **Disallow Config VPN**

When enabled, users are **prevented from accessing VPN configuration settings** on the device. This means VPN profiles *cannot be created or modified manually* by the user, ensuring only admin‑pushed VPN configurations apply.

* **Disabled (default):** User can manually open and edit VPN settings.
* **Enabled:** Users cannot open or change VPN settings.

#### **Enabled Lockdown**

This option enforces a **network lockdown around the VPN connection**. When enabled:

* The device **will not allow network access unless the VPN is connected**.
* All network traffic is blocked if the VPN is not actively connected – preventing unprotected communications.

This is especially useful for high‑security environments where **all traffic must go through the corporate VPN** and no unencrypted network access should be allowed.

#### **Manage VPN App**

This dropdown lets you *select the application* that will be used as the primary **VPN client app** on the device. Only apps that are already added to the profile’s application list will appear here.

* Choose a VPN client app (such as a third‑party VPN app you have included in the profile).
* The selected app will be used as the configured VPN service provider for the device.

> This setting is helpful when the built‑in Android VPN is not sufficient or when using a managed VPN app that supports always‑on or advanced tunneling.

<figure><img src="/files/CAOEunS2sHJuAmvn5jWd" alt=""><figcaption></figcaption></figure>

#### How These Settings Work Together

| **Setting**             | **Effect**                                                                                           |
| ----------------------- | ---------------------------------------------------------------------------------------------------- |
| **Disallow Config VPN** | Prevents users from editing or adding VPN connections manually.                                      |
| **Enabled Lockdown**    | Locks all network traffic if the VPN is not connected. Device has no network access outside the VPN. |
| **Manage VPN App**      | Specifies the VPN client to use for device connectivity.                                             |

### **Why This Matters for Admins**

* **Security Enforcement:** Ensures all network traffic is routed through a trusted VPN endpoint before allowing connectivity.
* **Prevent User Interference:** Stops users from disabling VPN or creating insecure connections.
* **Consistent Deployment:** Guarantees that only selected VPN apps with corporate configurations are used on enrolled devices.

This approach helps maintain secure network access for corporate data and compliance with IT policies across all managed endpoints.