VPN profiles in System Center Configuration Manager

Applies to: System Center Configuration Manager (Current Branch)

To deploy VPN settings to users in your organization, use VPN profiles in Configuration Manager. By deploying these settings, you minimize the end-user effort required to connect to resources on the company network.

For example, you want to configure all Windows 10 devices with the settings required to connect to a file share on the corporate network. You can create a VPN profile with the settings necessary to connect to the corporate network. Then deploy this profile to all users that have devices running Windows 10. These users see the VPN connection in the list of available networks and can connect with little effort.

When you create a VPN profile, you can include a wide range of security settings. These settings include certificates for server validation and client authentication that you provision with Configuration Manager certificate profiles. For more information, see Certificate profiles.


Configuration Manager doesn't enable this optional feature by default. You must enable this feature before using it. For more information, see Enable optional features from updates.

See VPN profiles on mobile devices to review the devices you can configure when using Configuration Manager with Microsoft Intune.

VPN profiles when using Configuration Manager

The following table describes the VPN profiles you can configure for various device platforms.

Connection type Windows 8.1 Windows RT Windows RT 8.1 Windows 10
Cisco AnyConnect No No No No
Pulse Secure Yes No Yes Yes
F5 Edge Client Yes No Yes Yes
Dell SonicWALL Mobile Connect Yes No Yes Yes
Check Point Mobile VPN Yes No Yes Yes
Microsoft SSL (SSTP) Yes Yes Yes No
Microsoft Automatic Yes Yes Yes No
IKEv2 Yes Yes Yes No
PPTP Yes Yes Yes No
L2TP Yes Yes Yes No

Next steps

Use the following topics to help you plan for, configure, operate, and maintain VPN profiles in Configuration Manager.