VPN Proxy MDM settings for Apple devices
You can configure a proxy for a VPN connection for users of an iPhone, iPad, Mac, or Apple Vision Pro, and for an Apple TV enrolled in a mobile device management (MDM) solution. These settings support manual VPN proxy and automatic proxy configuration using either the PAC file format or the Web Proxy Auto-Discovery (WPAD) Protocol method.
You can use the proxy settings in the table below with the VPN payload.
Setting | Description | Required | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
Hostname | The IP address or fully qualified domain name (FQDN) of the proxy server. Used for manual configuration. | Yes | |||||||||
Port | The port number of the proxy server. Used for manual configuration. | Yes | |||||||||
Account user name | The user name for the manual proxy connection. | Yes | |||||||||
Account password | The password for the manual proxy connection. | No | |||||||||
PAC-based configuration | Choose Automatic from the pop-up menu, then enter the URL of a PAC file—for example, https://www.betterbag.com/filename.pac. | Yes | |||||||||
WPAD configuration | Choose Automatic from the pop-up menu. If you leave the Proxy Server URL field empty, the device requests the wpad.dat file using DHCP (using a 252 entry) or DNS (using an A Record with the name WPAD). | No | |||||||||
PAC fallback | Specify whether to allow the device to connect to websites if the proxy is unreachable. | No | |||||||||
Note: Each MDM vendor implements these settings differently. To learn how VPN Proxy MDM payload settings are applied to your devices and users, consult your MDM vendor’s documentation.