The following example shows the XML configuration containing a VPN payload that you can use to verify the device-level VPN configuration of the GlobalProtect app for iOS. Note that the key values in your configuration file may be different from the example based on the third-party MDM system you are working with.

<?xml version="1.0"
encoding="UTF-8"?> 
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> 
<plist version="1.0"> 
<dict> 
<key>PayloadContent</key> 
<array> 
<dict> 
<key>PayloadDescription</key> 
<string>Configures VPN settings, including authentication.</string> 
<key>PayloadDisplayName</key> 
<string>VPN (Sample Device Level VPN)</string> 
<key>PayloadIdentifier</key> 
<string>Sample Device Level VPN.vpn</string> 
<key>PayloadOrganization</key> 
<string>Palo Alto Networks</string> 
<key>PayloadType</key> 
<string>com.apple.vpn.managed</string> 
<key>PayloadVersion</key> 
<integer>1</integer> 
<key>PayloadUUID</key> 
<string>5436fc94-205f-7c59-0000-011d</string> 
<key>UserDefinedName</key> 
<string>Sample Device Level VPN</string> 
<key>Proxies</key> 
<dict/> 
<key>VPNType</key> 
<string>VPN</string> 
<key>VPNSubType</key> 
<string>com.xyznetworks.GlobalProtect.vpnplugin</string> 
<key>IPv4</key> 
<dict> 
<key>OverridePrimary</key> 
<integer>0</integer> 
</dict> 
<key>VPN</key> 
<dict> 
<key>RemoteAddress</key> 
<string>gp.paloaltonetworks.com</string> 
<key>AuthName</key> 
<string></string> 
<key>DisconnectOnIdle</key> 
<integer>0</integer> 
<key>OnDemandEnabled</key> 
<integer>1</integer> 
<key>OnDemandRules</key> 
<array> 
<dict> 
<key>Action</key> 
<string>Connect</string> 
</dict> 
</array> 
<key>AuthenticationMethod</key> 
<string>Password</string> 
</dict> 
<key>VendorConfig</key> 
<dict> 
<key>AllowPortalProfile</key> 
<integer>0</integer> 
<key>FromAspen</key> 
<integer>1</integer> 
</dict> 
</dict> 
</array> 
<key>PayloadDisplayName</key> 
<string>Sample Device Level VPN</string> 
<key>PayloadOrganization</key> 
<string>Palo Alto Networks</string> 
<key>PayloadDescription</key> 
<string>Profile Description</string> 
<key>PayloadIdentifier</key> 
<string>Sample Device Level VPN</string> 
<key>PayloadType</key> 
<string>Configuration</string> 
<key>PayloadVersion</key> 
<integer>1</integer> 
<key>PayloadUUID</key> 
<string>5436fc94-205f-7c59-0000-011c</string> 
<key>PayloadRemovalDisallowed</key> 
<false/> 
</dict> 
</plist>