GSA iOS client deployment
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit d611383 · +12 −13 lines · also on GitHub
⋯ 2 unchanged lines
33
description: The Global Secure Access client secures network traffic at the end-user device. This article describes how to download and install the iOS client app.
44
ms.service: global-secure-access
55
ms.topic: how-to
6
−ms.date: 02/25/2025
6
+ms.date: 02/28/2025
77
ms.author: jayrusso
88
author: HULKsmashGithub
9
−manager: amycolannino
9
+manager: femila
1010
ms.reviewer: dhruvinrshah
1111
1212
⋯ 63 unchanged lines
7676
:::image type="content" source="media/how-to-install-ios-client/ios-client-device-install-status.png" alt-text="Screenshot of the Device install status screen showing a list of installed devices.":::
7777
7878
### Create a VPN profile and configure Global Secure Access for Microsoft Defender for Endpoint
79
−1. In the [Microsoft Intune admin center](https://intune.microsoft.com/#home), go to **Devices** > **Configuration Profiles** > **Create Profile**.
79
+1. In the [Microsoft Intune admin center](https://intune.microsoft.com/#home), go to **Devices** > **Configuration** > **Create** > **New Policy**.
8080
1. Set the **Platform** to **iOS/iPadOS**, the **Profile type** to **Templates**, and the **Template name** to **VPN**.
8181
1. Select **Create**.
8282
1. Type a name for the profile and select **Next**.
⋯ 12 unchanged lines
9595
|---------|---------|---------|
9696
|EnableGSA |No value |Global Secure Access isn't enabled and tile isn't visible. |
9797
| |0 | Global Secure Access in not enabled and tile isn't visible.|
98
− | |1 | The tile is visible and defaults to false (disabled state). User can enable or disable Global Secure Access using the toggle from the app.|
99
− | |2 | The tile is visible and defaults to true (enabled state). User can override. User can enable or disable Global Secure Access using the toggle from the app.|
100
− | |3 | The tile is visible and defaults to true (enabled state). User **cannot** disable Global Secure Access. |
98
+ | |1 | Global Secure Access tile is visible and defaults to disabled state. User can enable or disable using the toggle.|
99
+ | |2 | Global Secure Access tile is visible and defaults to enabled state. User can enable or disable using the toggle from the app. |
100
+ | |3 | Global Secure Access tile is visible and defaults to enabled state. User cannot disable Global Secure Access. |
101101
102102
- Add more key-value pairs as required (optional):
103103
104104
|Key |Value |Details |
105105
|---------|---------|---------|
106
− |EnableGSAPrivateChannel |No value |Global Secure Access is enabled by default. User can enable or disable. |
107
− | |0 |Global Secure Access isn't enabled and toggle isn't visible to user. |
108
− | |1 |Toggle is visible and defaults to false (disabled state). User can enable or disable. |
109
− | |2 |Tile is visible and defaults to true (enabled state). User can enable or disable. |
110
− | |3 |Toggle is visible and grayed out and defaults to true (enabled state). User **cannot** disable Global Secure Access. |
106
+ |EnableGSAPrivateChannel |No value |Use the EnableGSA configured option. |
107
+ | |0 |Private Access is not enabled and toggle option not visible to user. |
108
+ | |1 |Private Access toggle is visible and defaults to disabled state. User can enable or disable. |
109
+ | |2 |Private Access toggle is visible and defaults to enabled state. User can enable or disable. |
110
+ | |3 |Private Access toggle is visible and greyed out and defaults to enable state. User **cannot** disable Private Access. |
111111
112112
1. Continue filling out the VPN form:
113113
- **Type of Automatic VPN**: On-demand VPN
⋯ 1 unchanged line
115115
- Set **I want to do the following** to **Connect VPN**.
116116
- Set **I want to restrict** to **All domains**.
117117
:::image type="content" source="media/how-to-install-ios-client/ios-client-set-up-vpn.png" alt-text="Screenshot of the VPN screen showing example setup parameters.":::
118
−1. To prevent end users from disabling VPN, set **Block users from disabling automatic VPN** to **Yes**. By default, this setting isn't configured and users can disable VPN only in the Settings.
119
−1. To allow users to use the VPN toggle from within the app, add the key-value pair **EnableVPNToggleInApp = TRUE**. By default, users can't change the toggle from within the app.
118
+1. To prevent end users from disabling VPN, set **Block users from disabling automatic VPN** to **Yes**. By default, this setting isn't configured and users can disable VPN only in the Settings.
120119
1. Select **Next** and assign the profile to targeted users.
121120
1. In the **Review + Create** section, verify that all the information is correct and then select **Create**.
122121
⋯ 28 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 17:01 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.