Configuring the MaaS360 VPN policy in the IBM MaaS360 Portal

Information about creating and defining the MaaS360® VPN policy for devices in the IBM® MaaS360 Portal.

iOS policy settings for MaaS360 VPN

The VPN setting in the default iOS MDM policy provides the MaaS360 VPN policy profile settings that you apply to your iOS devices. Follow these steps to create a MaaS360 VPN policy for iOS devices:

  1. From the IBM MaaS360 Portal Home page, select Security > Policies. The Policies window is displayed.
  2. Click Add Policy. The Add Policy window is displayed.
  3. Enter a policy name, select iOS MDM as the policy type, and then click Continue.
  4. From the Device Settings list, select VPN. The MaaS360 VPN Profile window is displayed. If the MaaS360 VPN profile settings are not displayed, contact IBM Support to enable the MaaS360 VPN service.
  5. Provide the following settings:
    Setting Description
    VPN Connection Name The name of the VPN profile.
    Select VPN Server The VPN server that you defined in the Cloud Extender® Configuration Tool.
    VPN on Demand Dictionary Rule (Optional) The on-demand rules that determine how the VPN connection is used by iOS.
    Apps to use this VPN The comma-separated list of apps that you use to configure the VPN in iOS.
    Safari Domains to use this VPN The list of Safari domains that can use the VPN.
    Maximum Connection Duration (in hours) The maximum session time for the VPN connection before it terminates a connection. Allowed values: 1 - 24 hours
    Terminate Inactive Connection After (in mins) The amount of time that the VPN connection waits before it terminates a connection on a device with no activity. Allowed values: 5 - 60 minutes
  6. Click Save and Publish.

Android policy settings for MaaS360 VPN

The VPN setting in the default Android MDM policy provides the MaaS360 VPN policy profile settings that you apply to your Android devices. The following settings are available for the MaaS360 VPN policy for Android devices:
  1. From the IBM MaaS360 Portal Home page, select Security > Policies. The Policies window is displayed.
  2. Click Add Policy. The Add Policy window is displayed.
  3. Enter a policy name, select Android MDM as the policy type, and then click Continue.
  4. From the Device Settings list, select VPN. The MaaS360 VPN Profile window is displayed. If the MaaS360 VPN profile settings are not displayed, contact IBM Support to enable the MaaS360 VPN service.
  5. Provide the following settings:
    Setting Description
    VPN Connection Name The name of the VPN profile.
    Select VPN Server The VPN server that you defined in the Cloud Extender Configuration Tool.
    Type The VPN is configured at the device level or app level.
    Keep the VPN connection ON at all times The VPN is always connected. Allowed values: Yes or No
    Maximum Connection Duration (in hours) The maximum session time for the VPN connection before it terminates a connection. Allowed values: 1 - 24 hours
    Terminate Inactive Connection After (in mins) The amount of time the VPN connection waits before it terminates a connection on the device. This option only applies if you disabled Always On, where the VPN is always connected. Allowed values: 5 - 60 minutes
    Apps not allowed to use VPN configuration If the VPN Type is set to Device Level, the comma-separated list of apps that cannot use the VPN connection
    Apps allowed to use VPN configuration If the VPN Type is set to App Level, the comma-separated list of apps that can use the VPN connection.
  6. Click Save and Publish.