Ensure "VPN" is "Configured"

MediumLevel 1Manual reviewios

Description

This recommendation pertains to establishing a virtual private network (VPN) connection as needed. Profile: Level 1 - Institutionally-Owned Devices.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

This audit procedure cannot be accomplished with a checkbox verification. As mentioned below, a per-application VPN configuration is the preferred solution, but a system-wide VPN is also acceptable. The auditor will need to determine which solution is appropriate, and to what extent on a per-application VPN case. From the Configuration Profile: Apple Configurator > Configuration Profile > VPN tab > enter an appropriate VPN configuration > Deploy the Configuration Profile. From the device, > Settings > General > VPN > Inspect the configuration.

How it is fixed

Fix method: Guidance or infrastructure patch

This remediation procedure cannot be accomplished with a checkbox. As mentioned below, a per-application VPN configuration is the preferred solution, but a system-wide VPN is also acceptable. An appropriate solution will need to be determined and implemented. From the Configuration Profile: Apple Configurator > Configuration Profile > VPN tab > enter an appropriate VPN configuration > Deploy the Configuration Profile. From the device, > Settings > General > VPN > Enter an appropriate VPN configuration.

Properties

Operating systems: Any
Tags: iosinstitutionally-owned
Reference: CIS Apple iOS 26 Benchmark v1.0.0 - 3.6.1 Ensure "VPN" is "Configured"