Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Add configuration option for "Always On VPN" mode without putting device into Supervised Mode #109
Somewhere in the ALGO question and answer script (or as a configuration option in the configuration file) an option should exist to force "always on VPN" mode.
Normally this is only possible when the device is wiped and put into "supervised" mode.
However with the following configuration profile XML it is possible to force an Always on VPN mode.
Connect to VPN when connected to a network over Cellular or WiFi network interface:
Enable "on demand" option
Alternatively the "cellular" section may be set to "Disconnect" to only force VPN when connected to wifi, for instance this would always ensure the user was connected through a VPN when on any WiFi network (starbucks, home wifi or unsecured public wifi). This is highly desirable because it would always ensure a secure connection when routing through any wifi connection.
Connect to VPN only when connected to a network over the WiFi interface:
Since a user is always connected to WiFi or Cellular the VPN will always be on.
There may be a way configure some ruleset to drop VPN connection if VPN cannot be reached but this requires further research.
Example configuration of disabling VPN when on a known WiFi SSID (like your home WiFi) is connected.
Auto-enable VPN when connected to any other WiFi SSID and optionally when connected to cellular.
@NoahO it does work, I've been testing it without issue.
I have also recently tested it at Starbucks and another captive portal. It first prompts you through the captive portal first, after you connect it then auto-connects to the VPN.
Of course there may be some weird captive portal where this fails but you can also disable the VPN to go through captive portal first.
added a commit
Nov 3, 2016
There are 3 new options:
Hi, I'm new to this product but the downside of the on demand VPN is that users can easily disable it by toggling the "connect on demand" switch.