Configure VPN Settings for Android Devices

Create an Always On-VPN Profile

You must first create an Always On-VPN Profile in Intune to configure an Always-On VPN connection for Android devices.

To create an Always On-VPN Profile:

1. Log in to the Intune MDM admin portal. 
2. In the Intune admin portal, go to Devices > Android > Configuration profiles.
3. Under Policies, click Create and select New Policy. 
   
   
    
4. On the Create a profile panel, configure the following:
   • Platform. Select Android Enterprise as the platform for the profile. 
   • Profile type. Select Device restrictions as the profile type.
     
     
      
5. Click Create.
   
   
   The Android profile is created. 

Configure VPN Profile Settings

You can now configure the settings of the newly created Always On-VPN profile.

To configure the VPN profile settings:

1. Under the Basics tab, enter a Name for the VPN profile. 
   
   
    
2. Click Next.
   
   
    
3. Under the Configuration settings tab, in the Connectivity settings, configure the following VPN settings:
   For Fully managed, dedicated, and corporate-owned work profile devices:

• Always-on VPN (work profile-level). Select Enable to activate the Always-on VPN connection for your SMC app.
• VPN client. Select Custom as the VPN client. 
• Package ID. Enter com.skyhigh.clientproxy as the package ID of your SMC app. 
  
  

4. Click Next.
   
   

Assign the VPN Profile

After configuring the settings of the newly created Always On-VPN profile, you can assign the VPN profile to users in your organization. 

To assign the VPN profile:

1. Under the Assignments tab, click Add groups to assign the device restriction profile to Azure AD groups.
   
   
    
2. In the Select groups to include setting, select the Azure AD groups from the list.
   These groups must include the Android devices where you want to enable the Always-On VPN connection.
   
   
    
3. Click Select.
   
   
    
4. Under Review + create tab, review the configured settings of the VPN profile.

5. Click Create.
   
   

Once the VPN profile is created and assigned, the Always-On VPN connection is deployed and enabled on Android devices for users in the assigned groups.