Restrict AnyConnect Mobile VPN to Cellular

[J Webster]

As the title says, I'm researching the possibility of restricting a deployment of android devices to only establish a VPN tunnel via a cellular network. Wi-fi needs to be active to connect to other local devices (personal cameras, etc.).

I'm so far toying with keeping the LTE antenna active via the Android developer settings and disabling Auto Reconnect in the Mobile Device Manager, but this seems messy to deploy.

Any thoughts?

[Marvin Rhoads]

I think MDM is the way to go for this.

You can use Trusted Network Detection with AnyConnect but that supposes you know the domain you want to trust.

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect41/administration/guide/b_AnyConnect_Administrator_Guide_4-1/configure-vpn.html#ID-1428-00000178