Creating VPN profiles
You can use VPN profiles to specify how users connect to a work VPN. You can assign VPN profiles to users or groups. For BlackBerry 10 devices, you can also associate a VPN profile with a Wi-Fi profile. VPN profiles are not supported on Android devices.
Note: To allow affected third-party devices to store the XAuth password, you can modify the
group-policy attributes of the VPN profile in your Cisco VPN system to
include the password-storage enable option. For more information, visit www.blackberry.com/go/kbhelp to read KB30353.
Create a VPN profile
The required profile settings vary for each device type and depend on the VPN connection type and authentication type that you select. For more information about the profile settings for each device type, see the BES10 Cloud Policy and Profile Reference Guide.
Before you begin:
- If BlackBerry 10 devices use certificate-based authentication for work VPN connections, create a CA certificate profile and assign it to users.
- If iOS devices use certificate-based authentication for work VPN connections, create a shared certificate profile and assign it to users.
- If BlackBerry 10 or iOS devices use a proxy server for work VPN connections, create a proxy profile.
- On the menu bar, click Policies and Profiles.
- Click the + icon beside VPN.
- Type a name and description for the VPN profile. This information is displayed on devices.
- Optionally, clear the check box for any device type that you do not want to configure the profile for.
-
Perform the following actions:
- Click the tab for a device type.
- Configure the appropriate values for each profile setting to match the VPN configuration in your environment. If your organization requires that users provide a username and password to connect to the VPN and the profile is for multiple users, type %UserName% in the Username field.
- Repeat step 5 for each device type in your organization.
- Click Add.