IKEv2 VPN

[free780]

I’m trying to push a IKEv2 config out from JAMF and it keeps failing.

I’ve had to use the User Scope.

 

I’ve tried a custom PLIST file which doesn’t seem to work.

 

Has anyone attempted this before ?

[free780]

So the 1:1 user must be listed as an MDM user which I can only seem to update by making the user a local admin [emoji15].

 

I can remove their admin rights. A IKEv2 VPN profile can only be deployed to a user which seems very illogical given that device certificates are more secure than user certs/creds.

 

There is a IPSEC profile but it doesn’t look like split tunnel will work. But it may obey the VPN settings work.

 

Time and again Apple seem to make decisions that are not necessarily to do with security and make it hard to push settings to devices.