topic Re: Scheduling VPN in Endpoint Security

Scheduling VPN

danjns888 — Thu, 19 Oct 2017 09:40:39 GMT

Hi, does anyone know of a way to be able to schedule device-wide VPN for an iOS client? I'd like to be able to enable a VPN during work hours (say 9am - 6pm) so that all traffic is managed by an MX at HQ. Then allow users to use unfiltered internet 'after hours'.

I'm guessing if it's not built into SM it might be possible with API and adding/removing tags... Anyone have any experience with this that can point me in the right direction?

Cheers!

Re: Scheduling VPN

danjns888 — Thu, 19 Oct 2017 15:22:07 GMT

Bump

Re: Scheduling VPN

WadeAlsup — Thu, 19 Oct 2017 15:42:42 GMT

Hi @danjns888,

I have not tried this myself, but I think you could create a Time-Based Tag in Systems Manager > Configure > General specifying the hours that you want. Then tie that tag to a SM profile containing your VPN for the devices. Then tag your devices with the time-based tag.

Let me know if that will work!

Re: Scheduling VPN

PeterJames1 — Fri, 20 Oct 2017 11:39:13 GMT

@WadeAlsup Has it.

Meraki 'Time-Based Tags' documentation Link

This would require you to set up two profiles, once with restrictions and one with a difference. And then applying the restricted one during the times specified. I would definitely read this document 'Scoping Profiles and Apps'.

The only thing that needs to exist in the second profile is that one particular difference.

Thank you,
Peter James

Re: Scheduling VPN

jared_f — Sat, 21 Oct 2017 00:47:37 GMT

I second @WadeAlsup and @PeterJames1, time tags are the way to go. Just a tip - confirm that your Meraki sever is set to your local time. Ours was not when we started using time tags and profiles were syncing down at the wrong times.

Re: Scheduling VPN

danjns888 — Sat, 21 Oct 2017 06:14:26 GMT

Thanks!