---
title: Configuring new VPN settings
slug: device-management-apple/configuring-new-vpn-settings
createdAt: 2026-10-06T07:47:36.453Z
---

In the Admin Portal, go to Policies & Configs > Configurations and select Add New > VPN to configure VPN access.

For macOS only, select one of the following Channel options:

- Device channel - the configuration is effective for all users on a device. This is the typical option.
- User channel - the configuration is effective only for the currently registered user on a device.

The following sections describe the fields required for each selection in the Connect Type field. For tunnel support for Android, select Ivanti Tunnel (Android) in the Connection Type field.

For macOS devices, distribute the VPN configurations to either the Device Channel (effective for all users on a device) or the User Channel (effective only for the currently registered user on a device). Regardless of the user logged into the device, the configuration is effective for all users at the device level.

:::hint{type="info"}
When the bottom entry of the Safari domains list is clicked in a VPN configuration, the scroll bar automatically scrolls all the way to the top. New edit option introduced for Safari Domains on Windows integrated touch devices, you can now edit Safari Domains information, such as domain name and description, in the Edit VPN Setting window from the Windows UI touch screen.
:::

## Enhanced VPN configuration label handling

Ivanti EPMM now isolates VPN app setting associations by label and device space when a label is removed from a VPN configuration. This enhancement prevents VPN app setting associations from being unintentionally removed from devices in other device spaces.

### VPN settings across device spaces

Device spaces allow administrators to manage separate groups of devices independently. When the same app is available in multiple device spaces, administrators can associate different VPN configurations with that app in each space.

With this enhancement, removing a label from one VPN configuration affects only the VPN app setting association that belongs to the matching label and device space. VPN app setting associations in other device spaces remain unchanged.