VPN Settings

The VPN Configuration section within Network Settings lets administrators control how VPN (Virtual Private Network) connectivity is managed on enrolled Android devices. You can disable the user’s ability to configure VPNs, enforce VPN lockdown, and specify which VPN app should be used for secure connectivity.

Navigation:

Device Management → Device Profiles → Edit Profile → Network Settings → VPN Configuration

VPN Configuration tab available in Configurations

What Each Setting Does

Disallow Config VPN

When enabled, users are prevented from accessing VPN configuration settings on the device. This means VPN profiles cannot be created or modified manually by the user, ensuring only admin‑pushed VPN configurations apply.

• Disabled (default): User can manually open and edit VPN settings.

• Enabled: Users cannot open or change VPN settings.

Enabled Lockdown

This option enforces a network lockdown around the VPN connection. When enabled:

• The device will not allow network access unless the VPN is connected.

• All network traffic is blocked if the VPN is not actively connected – preventing unprotected communications.

This is especially useful for high‑security environments where all traffic must go through the corporate VPN and no unencrypted network access should be allowed.

Manage VPN App

This dropdown lets you select the application that will be used as the primary VPN client app on the device. Only apps that are already added to the profile’s application list will appear here.

• Choose a VPN client app (such as a third‑party VPN app you have included in the profile).

• The selected app will be used as the configured VPN service provider for the device.

This setting is helpful when the built‑in Android VPN is not sufficient or when using a managed VPN app that supports always‑on or advanced tunneling.

How These Settings Work Together

Setting	Effect
Disallow Config VPN	Prevents users from editing or adding VPN connections manually.
Enabled Lockdown	Locks all network traffic if the VPN is not connected. Device has no network access outside the VPN.
Manage VPN App	Specifies the VPN client to use for device connectivity.

Why This Matters for Admins

• Security Enforcement: Ensures all network traffic is routed through a trusted VPN endpoint before allowing connectivity.

• Prevent User Interference: Stops users from disabling VPN or creating insecure connections.

• Consistent Deployment: Guarantees that only selected VPN apps with corporate configurations are used on enrolled devices.

This approach helps maintain secure network access for corporate data and compliance with IT policies across all managed endpoints.