


ProfileXML includes all settings that define the Always On VPN connection. In these scenarios the administrator must manually create a ProfileXML file and provision it using Intune, System Center Configuration Manager (SCCM), or PowerShell. Also, there is currently no option for configuring a device tunnel with Intune. Crucially, IKEv2 advanced security settings cannot be configured using the Intune portal. However, it provides only limited support and does not include all settings and options required for many deployments. With Intune specifically, there is an option to configure an Always On VPN profile in the UI. Windows 10 Always On VPN is designed to be implemented and managed using a Mobile Device Management (MDM) platform such as Microsoft Intune.
