Create a VPN profile
- If devices use certificate-based authentication for work VPN connections, create a CA certificate profile and assign it to user accounts, user groups, or device groups. To send client certificates to devices, create a SCEP, shared certificate, or user credential profile to associate with the VPN profile.
- For iOS, iPadOS, macOS, and Samsung Knox devices that use a proxy server, create a proxy profile to associate with the VPN profile.
- For Samsung Knox devices, add the appropriate VPN client app to the app list and assign it to user accounts, user groups, or device groups. The supported VPN client apps are Cisco AnyConnect, Juniper, and GlobalProtect.