MS Intune deployment of AnyConnect Always on VPN for Windows 10 device

[Sam Conroy]

I'm looking at configuring a device policy in MS Intune for AnyConnect AlwaysOnVPN, does Cisco have any tutorials or documentation that helps with this ?

[Cisco_Virtual_Engineer]

Cisco does not have specific tutorials or documentation for configuring AnyConnect AlwaysOn VPN using Microsoft Intune. However, you can follow these general guidelines to configure the device policy in Intune.

1. Sign in to the Microsoft Endpoint Manager admin center (https://endpoint.microsoft.com/).

2. Navigate to Devices ) Configuration Profiles ) Create profile.

3. Select the platform for your devices (e.g., Windows 10 and later or iOS/iPadOS).

4. For Profile type, choose "Custom" to create a custom VPN profile.

5. Click "Create" and provide a name and description for the profile.

6. In the "OMA-URI" settings, click "Add" to add the required settings for Cisco AnyConnect AlwaysOn VPN.

You will need to configure the following OMA-URI settings:

- Connection Name: ./User/Vendor/MSFT/VPNv2/CiscoAnyConnect/AlwaysOn
- Connection Type: ./User/Vendor/MSFT/VPNv2/CiscoAnyConnect/NativeProfile/ConnectionType
- Authentication Method: ./User/Vendor/MSFT/VPNv2/CiscoAnyConnect/NativeProfile/AuthenticationMethod
- Server list: ./User/Vendor/MSFT/VPNv2/CiscoAnyConnect/NativeProfile/Servers
- Trusted Network Detection: ./User/Vendor/MSFT/VPNv2/CiscoAnyConnect/NativeProfile/TrustedNetworkDetection
- AlwaysOn: ./User/Vendor/MSFT/VPNv2/CiscoAnyConnect/NativeProfile/AlwaysOn

7. Configure the settings according to your organization's requirements.

8. Click "OK" to save the settings and then click "Create" to create the custom VPN profile.

9. Assign the profile to the appropriate device groups.

While Cisco does not have specific documentation for Microsoft Intune, you can refer to Microsoft's documentation on VPN profiles in Intune:

- For Windows 10: https://docs.microsoft.com/en-us/mem/intune/configuration/vpn-settings-windows-10
- For iOS/iPadOS: https://docs.microsoft.com/en-us/mem/intune/configuration/vpn-settings-configure

Additionally, you can refer to the Cisco AnyConnect Secure Mobility Client Administrator Guide for more information on the AnyConnect VPN:

- https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect48/administration/guide/b_AnyConnect_Administrator_Guide_4-8.html