Deploying VPN to Supervised Devices with MDM
Installing a VPN profile on a supervised device is straightforward — Apple's .mobileconfig format handles that. The harder part is controlling what happens inside the VPN client itself. Can users add their own tunnels? Can they change settings? What happens if the device is jailbroken?
Vylos answers these through three managed app configuration keys that are read on every app launch and foreground transition.