VPN profiles in System Center Configuration Manager
Applies to: System Center Configuration Manager (Current Branch)
To deploy VPN settings to users in your organization, use VPN profiles in Configuration Manager. By deploying these settings, you minimize the end-user effort required to connect to resources on the company network.
For example, you want to configure all Windows 10 devices with the settings required to connect to a file share on the corporate network. You can create a VPN profile with the settings necessary to connect to the corporate network. Then deploy this profile to all users that have devices running Windows 10. These users see the VPN connection in the list of available networks and can connect with little effort.
When you create a VPN profile, you can include a wide range of security settings. These settings include certificates for server validation and client authentication that you provision with Configuration Manager certificate profiles. For more information, see Certificate profiles.
Configuration Manager doesn't enable this optional feature by default. You must enable this feature before using it. For more information, see Enable optional features from updates.
See VPN profiles on mobile devices to review the devices you can configure when using Configuration Manager with Microsoft Intune.
VPN profiles when using Configuration Manager
The following table describes the VPN profiles you can configure for various device platforms.
|Connection type||Windows 8.1||Windows RT||Windows RT 8.1||Windows 10|
|F5 Edge Client||Yes||No||Yes||Yes|
|Dell SonicWALL Mobile Connect||Yes||No||Yes||Yes|
|Check Point Mobile VPN||Yes||No||Yes||Yes|
|Microsoft SSL (SSTP)||Yes||Yes||Yes||No|
Use the following topics to help you plan for, configure, operate, and maintain VPN profiles in Configuration Manager.