You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
algo/roles/vpn
Tim H b4740185e8 Add catch-all VPN On Demand Rule (#739)
If a user is not connected to a trusted Wi-Fi network or if the
URLStringProbe fails none of the existing dictionaries match.

According to the Apple Configuration Profile Reference[1] section "VPN
Payload > On Demand Rules Dictionary Keys" a default behavior for
unknown networks with no matching criteria should always be set as the
last dictionary in the array. The current default behavior is to allow a
connection to occur, but this behavior is not guaranteed.

Tear down the VPN connection and do not reconnect on demand as long as
the catch-all dictionary matches to guarantee the default behavior and
more specifically allow users to access captive portals.

[1]: https://developer.apple.com/library/content/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html
6 years ago
..
defaults Support for custom domain names in the endpoint (#1337) 6 years ago
handlers Certificate revocation fix (#719) 7 years ago
meta invoke dns encryption from main playbook instead of meta-dependencies (#1097) 6 years ago
tasks BSD StrongSwan fixes (#1207) 6 years ago
templates Add catch-all VPN On Demand Rule (#739) 6 years ago