Ensure "VPN" is "Configured"

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

This audit procedure cannot be accomplished with a checkbox verification. As mentioned below, a per-application VPN configuration is the preferred solution, but a system-wide VPN is also acceptable. The auditor will need to determine which solution, and to what extent in the per-application VPN case, is appropriate. From the Configuration Profile: Apple Configurator > Configuration Profile > VPN tab > enter an appropriate VPN configuration > Deploy the Configuration Profile. From the device: Settings > General > VPN > Inspect the configuration.

How it is fixed

Fix method: Guidance or infrastructure patch

This remediation procedure cannot be accomplished with a checkbox. As mentioned below, a per-application VPN configuration is the preferred option, but a system-wide VPN is also acceptable. An appropriate solution will need to be determined and implemented. From the Configuration Profile: Apple Configurator > Configuration Profile > VPN tab > enter an appropriate VPN configuration > Deploy the Configuration Profile. From the device: Settings > General > VPN > Enter an appropriate VPN configuration.