Modern VPN: VPN Plugin Profile

Configure VPN Plugin Profile settings on your devices.

Note: Use the Windows Companion for SOTI MobiControl application to retrieve the necessary application information to fill out the fields below.


VPN Name The name used to identify this VPN account. Note that no spaces or special characters are allowed.
VPN Server Hostname/IP Address The hostname or IP address of the VPN server.
DNS Suffix A required setting to push down the primary connection-specific DNS suffix, for example
Custom Configuration HTML encoded XML blob for SSL-VPN plug-in specific configuration including authentication information that is deployed to the device to make it available for SSL-VPN plug-ins.
Plugin Package Family Name Package family name for the SSL-VPN plug-in.


Depending on your proxy type choice, some settings are inapplicable.

Proxy Choose Automatic, Manual, or None.
Proxy Server The hostname or IP address of the proxy server. (This field becomes enabled if Proxy is set to Manual.
Port The port number of the proxy server. (This field becomes enabled if Proxy is set to Manual.
Auto config URL URL that automatically retrieves proxy settings. (This field becomes enabled if Proxy is set to Automatic.

Connection Settings

Remember Credentials Selects whether the device should remember the credentials for this connection.
Lockdown Forces the VPN profile to always stay on. The profile cannot be disconnected or modified.
Always On Forces the device to automatically connect to the VPN at sign-in and stay connected until user manually disconnects.
Bypass for Local VPN does not connect automatically when user is on their corporate wireless network where protected devices are directly accessible to the device.
Trusted Network Detection Detects when users are on a trusted network such as their corporate wireless. If a trusted network is detected the VPN does not connect automatically.

Optional Settings

App Triggers allows you to add applications that trigger the VPN to connect when the application is launched. Use the application ID (either the application's package family name or file path) to select your applications.

Routes allow the networking stack to identify the traffic that needs to go over the VPN interface for a split tunnel VPN.

DNS Info collects information entered in its fields to send to the Name Resolution Policy Table (NRPT) which determines the DNS client behaviour when issuing queries and processing responses.

App Traffic specifies which traffic can be sent through the VPN interface. Only traffic matching a rule, is allowed through. If there are multiple rules, each rule operates on an OR basis with the other rules.