Advanced VPN settings for iOS consist of connection and authentication settings, proxy, and vendor configurations. Enable these settings as necessary to configure VPN for iOS.

Settings Description
Connection Info
Account Enter the name of the VPN account.
Disconnect on Idle (min) Allow the VPN to auto-disconnect after a specific amount of time. Support for this value depends on the VPN provider.
Send All Traffic Select to force all traffic through the specified network.
Per App VPN Rules Select to enable and configure Per App VPN rules.
Connect Automatically Select to allow the VPN to connect automatically to chosen Safari Domains. This option appears when the Per App VPN Rules check box is selected.
Provider Type Select the type of Per-App VPN provider. Determine how to tunnel traffic, either through an application layer or IP layer by choosing between AppProxy and PacketTunnel. This option appears when the Per App VPN Rules check box is selected.
Safari Domains Enter each domain to which you want the Per-App VPN to connect automatically. These domains are internal sites that trigger an automatic VPN connection. This option appears when the Per App VPN Rules check box is selected.
Authentication
User Authentication Authenticate end users by either uploading a Certificate or by requiring a Password for VPN access.
Group Name Enter the AirWatch group name.
Password Available only when User Authentication is set to Password. Enter the password for the AirWatch Group Name.
Identity Certificate This setting is only available when User Authentication is set to Certificate. Select Add A Certificate to either name and upload a certificate file or choose an existing certificate authority using a certificate template.
Enable VPN On Demand This setting is only available when User Authentication is set to Certificate. Enable VPN On Demand to use certificates to establish VPN connections automatically.
Use new On-Demand keys This setting is only available when User Authentication is set to Certificate. Enable the option to activate a VPN connection when end users access any of the specified domains.
Match Domain or Host This setting is only available when User Authentication is set to Certificate. Enter a domain or hostname that, when accessed by an end user, triggers the activation of a VPN connection.
On-Demand Action This setting is only available when User Authentication is set to Certificate. Choose the domain-specific on-demand action that takes place when end users activate a VPN connection. Choose among Always Establish, Never Establish, and Establish if Needed.
Proxy
Proxy Choose among None, Manual, and Auto.
Proxy Server Auto Config URL Available only when Proxy is Auto. Enter the URL of the Wi-Fi proxy that the device uses to connect.
Server Available only when Proxy is Manual. Enter the name of the proxy server to which your devices connect.
Port Available only when Proxy is Manual. Include the port number of the proxy server through which the device connects to the proxy server.
User name Available only when Proxy is Manual. Enter a user name recognized by the proxy server.
Password Available only when Proxy is Manual. Enter the password that corresponds to the user name entered.
Vendor Configurations
Vendor Keys

Create custom keys using the vendor config dictionary.

Key Enter the specific key provided by the vendor.
Value Enter the VPN value for each key.