Need help with Intune always on VPN deployment with custom XML

%3CLINGO-SUB%20id%3D%22lingo-sub-2991243%22%20slang%3D%22en-US%22%3ENeed%20help%20with%20Intune%20always%20on%20VPN%20deployment%20with%20custom%20XML%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2991243%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20deploying%20an%20Always%20On%20VPN%20using%20a%20custom%20Intune%20configuration%20policy.%20I%20would%20like%20to%20have%20the%20VPN%20set%20to%20automatic%20so%20that%20the%20VPN%20uses%20IKEv2%20user%20tunnel%20and%20SSTP%20as%20a%20fallback.%20I%20also%20want%20the%20VPN%20IKEv2%20user%20tunnel%20to%20be%20more%20secure%20than%20the%20default%20settings%20that%20Windows%20sets.%26nbsp%3B%20Using%20the%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ECryptographySuite%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3E%26gt%3B%20I%20am%20able%20to%20change%20the%20IKEv2%20to%20more%20secure%20settings%20but%20if%20I%20do%20that%20along%20with%20the%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ENativeProtocolType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%20tag%20set%20to%20automatic%20then%20%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ECryptographySuite%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%20section%20is%20ignored.%20I%20can%20manually%20change%20the%20IKEv2%20after%20Intune%20deploys%20it%20using%20a%20PowerShell%20and%20everything%20works%20the%20way%20it%20is%20supposed%20to%3B%20however%2C%20Intune%20syncs%20and%20changes%20it%20back.%20Does%20anyone%20know%20if%20what%20I%20am%20I%20trying%20to%20accomplish%20with%20the%20XML%20is%20file%20possible%20and%20if%20so%20how%20to%20fix%20the%20XML%20file%20I%20am%20using%3F%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EVPNProfile%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDnsSuffix%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Edomain.org%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDnsSuffix%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ENativeProfile%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EServers%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Evpn.domain.org%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EServers%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ENativeProtocolType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3BAutomatic%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ENativeProtocolType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EAuthentication%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EUserMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EUserMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EConfiguration%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEapHostConfig%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapHostConfig%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapHostConfig%3C%2FA%3E%22%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEapMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%3C%2FA%3E%22%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E25%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EVendorId%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%3C%2FA%3E%22%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E0%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EVendorId%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EVendorType%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%3C%2FA%3E%22%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E0%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EVendorType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EAuthorId%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%3C%2FA%3E%22%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E0%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EAuthorId%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEapMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EConfig%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapHostConfig%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapHostConfig%3C%2FA%3E%22%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FBaseEapConnectionPropertiesV1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FBaseEapConnectionPropertiesV1%3C%2FA%3E%22%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E25%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEapType%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FMsPeapConnectionPropertiesV1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FMsPeapConnectionPropertiesV1%3C%2FA%3E%22%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDisableUserPromptForServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDisableUserPromptForServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EServerNames%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Edc.domain.org%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EServerNames%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ETrustedRootCA%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E1c%26nbsp%3B2b%26nbsp%3B3f%26nbsp%3B25%26nbsp%3B75%26nbsp%3B85%26nbsp%3B3d%20da%2023%26nbsp%3Bcd%26nbsp%3B39%20f2%26nbsp%3B89%26nbsp%3B8e%26nbsp%3B74%26nbsp%3Be9%26nbsp%3Bc4%2077%26nbsp%3Bf0%202b%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ETrustedRootCA%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EFastReconnect%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EFastReconnect%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EInnerEapOptional%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Efalse%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EInnerEapOptional%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FBaseEapConnectionPropertiesV1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FBaseEapConnectionPropertiesV1%3C%2FA%3E%22%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E13%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEapType%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV1%3C%2FA%3E%22%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ECredentialsSource%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ECertificateStore%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ESimpleCertSelection%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ESimpleCertSelection%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3ECertificateStore%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3ECredentialsSource%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDisableUserPromptForServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDisableUserPromptForServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EServerNames%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Edc.domain.org%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EServerNames%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ETrustedRootCA%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E1c%26nbsp%3B2b%26nbsp%3B3f%26nbsp%3B25%26nbsp%3B75%26nbsp%3B85%26nbsp%3B3d%26nbsp%3Bda%26nbsp%3B13%20cd%26nbsp%3B33%2032%26nbsp%3B89%203e%26nbsp%3B73%20e9%26nbsp%3Bc9%2088%20f0%26nbsp%3B1b%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ETrustedRootCA%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDifferentUsername%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Efalse%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDifferentUsername%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EPerformServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV2%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV2%3C%2FA%3E%22%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EPerformServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EAcceptServerName%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV2%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV2%3C%2FA%3E%22%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EAcceptServerName%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ETLSExtensions%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV2%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV2%3C%2FA%3E%22%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EFilteringInfo%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV3%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapTlsConnectionPropertiesV3%3C%2FA%3E%22%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ECAHashList%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EEnabled%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22true%22%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EIssuerHash%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E1c%26nbsp%3B2b%26nbsp%3B3f%26nbsp%3B25%26nbsp%3B75%26nbsp%3B85%26nbsp%3B3d%26nbsp%3Bda%2012%20cd%26nbsp%3B39%26nbsp%3B32%26nbsp%3B89%26nbsp%3B8e%26nbsp%3B74%26nbsp%3Be9%26nbsp%3Bc9%2088%20f0%202b%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EIssuerHash%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EIssuerHash%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B2%3C%2FSPAN%3E%3CSPAN%3Ec%203d%203f%26nbsp%3B25%26nbsp%3B75%26nbsp%3B85%26nbsp%3B3d%26nbsp%3Bda%26nbsp%3B13%26nbsp%3Bcd%26nbsp%3B39%26nbsp%3B32%26nbsp%3B89%26nbsp%3B8e%2034%26nbsp%3Be9%26nbsp%3Bc9%2088%20f0%202b%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EIssuerHash%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3ECAHashList%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EFilteringInfo%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3ETLSExtensions%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEapType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEnableQuarantineChecks%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Efalse%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EEnableQuarantineChecks%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ERequireCryptoBinding%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Efalse%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ERequireCryptoBinding%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EPeapExtensions%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EPerformServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FMsPeapConnectionPropertiesV2%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FMsPeapConnectionPropertiesV2%3C%2FA%3E%22%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EPerformServerValidation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EAcceptServerName%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FMsPeapConnectionPropertiesV2%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FMsPeapConnectionPropertiesV2%3C%2FA%3E%22%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EAcceptServerName%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EPeapExtensions%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEapType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EConfig%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEapHostConfig%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EConfiguration%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EAuthentication%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ERoutingPolicyType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3EForceTunnel%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ERoutingPolicyType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ECryptographySuite%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EAuthenticationTransformConstants%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3ESHA256128%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EAuthenticationTransformConstants%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ECipherTransformConstants%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3EAES128%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ECipherTransformConstants%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEncryptionMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3EAES128%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EEncryptionMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EIntegrityCheckMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3ESHA256%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EIntegrityCheckMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDHGroup%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3EGroup14%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDHGroup%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EPfsGroup%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3EPFS2048%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EPfsGroup%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ECryptographySuite%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ENativeProfile%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EAlwaysOn%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EAlwaysOn%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ERememberCredentials%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ERememberCredentials%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ETrustedNetworkDetection%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Edomain.org%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ETrustedNetworkDetection%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDomainNameInformation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDomainName%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E.domain.org%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDomainName%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDnsServers%3C%2FSPAN%3E%3CSPAN%3E%26gt%3Bx%3C%2FSPAN%3E%3CSPAN%3E.x.x.x%2Cx.x.x.x%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDnsServers%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDomainNameInformation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EVPNProfile%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2991243%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAlways%20on%20VPN%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECustom%20Configuration%20Profile%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EProfileXML%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Contributor

Hello,

 

I am deploying an Always On VPN using a custom Intune configuration policy. I would like to have the VPN set to automatic so that the VPN uses IKEv2 user tunnel and SSTP as a fallback. I also want the VPN IKEv2 user tunnel to be more secure than the default settings that Windows sets.  Using the 

<CryptographySuite> I am able to change the IKEv2 to more secure settings but if I do that along with the <NativeProtocolType> tag set to automatic then <CryptographySuite> section is ignored. I can manually change the IKEv2 after Intune deploys it using a PowerShell and everything works the way it is supposed to; however, Intune syncs and changes it back. Does anyone know if what I am I trying to accomplish with the XML is file possible and if so how to fix the XML file I am using?  
 
<VPNProfile>
   <DnsSuffix>domain.org</DnsSuffix>
   <NativeProfile>
 <Servers>vpn.domain.org</Servers>
 <NativeProtocolType>Automatic</NativeProtocolType>
 <Authentication>
   <UserMethod>Eap</UserMethod>
   <Eap>
    <Configuration>
     <EapHostConfig xmlns="http://www.microsoft.com/provisioning/EapHostConfig"><EapMethod><Type xmlns="http://www.microsoft.com/provisioning/EapCommon">25</Type><VendorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorId><VendorType xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorType><AuthorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</AuthorId></EapMethod><Config xmlns="http://www.microsoft.com/provisioning/EapHostConfig"><Eap xmlns="http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1"><Type>25</Type><EapType xmlns="http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV1"><ServerValidation><DisableUserPromptForServerValidation>true</DisableUserPromptForServerValidation><ServerNames>dc.domain.org</ServerNames><TrustedRootCA>1c 2b 3f 25 75 85 3d da 23 cd 39 f2 89 8e 74 e9 c4 77 f0 2b </TrustedRootCA></ServerValidation><FastReconnect>true</FastReconnect><InnerEapOptional>false</InnerEapOptional><Eap xmlns="http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1"><Type>13</Type><EapType xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV1"><CredentialsSource><CertificateStore><SimpleCertSelection>true</SimpleCertSelection></CertificateStore></CredentialsSource><ServerValidation><DisableUserPromptForServerValidation>true</DisableUserPromptForServerValidation><ServerNames>dc.domain.org</ServerNames><TrustedRootCA>1c 2b 3f 25 75 85 3d da 13 cd 33 32 89 3e 73 e9 c9 88 f0 1b </TrustedRootCA></ServerValidation><DifferentUsername>false</DifferentUsername><PerformServerValidation xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2">true</PerformServerValidation><AcceptServerName xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2">true</AcceptServerName><TLSExtensions xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2"><FilteringInfo xmlns="http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV3"><CAHashList Enabled="true"><IssuerHash>1c 2b 3f 25 75 85 3d da 12 cd 39 32 89 8e 74 e9 c9 88 f0 2b </IssuerHash><IssuerHash>2c 3d 3f 25 75 85 3d da 13 cd 39 32 89 8e 34 e9 c9 88 f0 2b </IssuerHash></CAHashList></FilteringInfo></TLSExtensions></EapType></Eap><EnableQuarantineChecks>false</EnableQuarantineChecks><RequireCryptoBinding>false</RequireCryptoBinding><PeapExtensions><PerformServerValidation xmlns="http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV2">true</PerformServerValidation><AcceptServerName xmlns="http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV2">true</AcceptServerName></PeapExtensions></EapType></Eap></Config></EapHostConfig>
    </Configuration>
   </Eap>
 </Authentication>
<RoutingPolicyType>ForceTunnel</RoutingPolicyType>
<CryptographySuite>
   <AuthenticationTransformConstants>SHA256128</AuthenticationTransformConstants>
   <CipherTransformConstants>AES128</CipherTransformConstants>
   <EncryptionMethod>AES128</EncryptionMethod>
   <IntegrityCheckMethod>SHA256</IntegrityCheckMethod>
   <DHGroup>Group14</DHGroup>
   <PfsGroup>PFS2048</PfsGroup>
  </CryptographySuite>
   </NativeProfile>
 <AlwaysOn>true</AlwaysOn>
 <RememberCredentials>true</RememberCredentials>
 <TrustedNetworkDetection>domain.org</TrustedNetworkDetection>
   <DomainNameInformation>
 <DomainName>.domain.org</DomainName>
 <DnsServers>x.x.x.x,x.x.x.x</DnsServers>
 </DomainNameInformation>
 </VPNProfile>
0 Replies