iOS 7: About the Always option for VPN On Demand
Learn how the functionality of the Always option for VPN On Demand in iOS 7 has changed from earlier iOS versions.
The Always option for matching domains is no longer supported; Always domains will be automatically converted to If Needed domains in existing configurations.
Enhancements have been made to the VPN On Demand feature in iOS 7 to support the following scenarios:
Desired Behavior | iOS 7 Configuration |
|---|---|
Trigger VPN for all traffic from the device. | Configure with the Connect option. |
Trigger VPN when DNS servers redirect internal host names to landing pages. | Automatic for If Needed domains. |
Trigger VPN when internal host names are externally resolvable but connections cannot be established. | Automatic for If Needed domains. |
Trigger VPN to access internal sides of dual-facing hosts. | Configure with the Required DNS Servers option for If Needed domains. |
For information on how to configure VPN On Demand profiles for iOS 7, see the VPN Payload section of the Configuration Profile Key Reference Guide.