Enable VPN automatically when not on my home wifi with my IPad

Hi,


The summarized question = how can I set it so that my VPN connects automatically when my ipad connects to a Wifi (hotspot) network, other than my home wifi?

I'm using the VPN service from Private Internet Access (either via the OPENVPN client, or the native PIA client)

On my IPAD (gen 4), with IOS 9.3.x


What I need to do now each time after I connect to a hotspot: goto the vpn app as fast as possible, and activate the vpn connection

When I get back home, go back to the vpn app and disconnect the vpn connection.


Here are my concerns :

- most apps (mail,calendar, and others with possible private information) immediately start connecting with their backend/the internet, the instance they notice internet connectivity

- this means, during the few seconds it takes between joining an untrusted WiFi hotspot, and connecting the vpn, there is already a lot of sensitive data transmitted, unencrypted for all snoopers on that WiFi



On my pc's for example, I can set it so that when not on a trusted network, all traffic is blocked until the VPN connection is active

on my android phone, I can have my VPN client activate automatically upon a WiFi connection if not on my home WiFi (using built in profiles)


There is no feature with profiles or "block internet until vpn is active" to provide full security (like on a PC or android) on the IPAD, and because of the strict closed system, no apps are allowed to disable/enable data/traffic/wifi directly ?

isn't that a security hole by design?


Does there exist a solution for this issue? I've looked around but could not find any


O.


P.S. it should be a solution, which is workable for normal (business) use, so without jailbreaking

iPad (4th gen) Wi-Fi + Cellular (MM), iOS 9.3, null

Posted on Jun 18, 2016 12:15 PM

Reply
4 replies

Nov 9, 2017 8:06 AM in response to thomas witt

I have to say I found this a revelation. FINALLY I have discovered a solution to a real world problem that actually works. Well done Thomas, fine work.

Incidentally, being the sceptic I am, I investigated the Apple Configurator 2 tool (found in the Mac App Store) before I blindly installed Thomas'suitably modified profiles to my iPhone. Whilst the tool allows you to create multiple VPN profiles, it unfortunately doesn't help with on demand VPN - however you can add the necessary ondemandenabled segments using your favourite text editor. You can even subsequently load them back into Apple Configurator 2, and whilst you can't do anything with those segments you can change anything else and re-export them to your iDevice.

Jun 18, 2016 12:42 PM in response to olce

I also use PIA and their mobile app, but there is no option to do that unless you find a third party app that recognises when you are leaving "safe" wifi networks and fires the VPN client.

What I do is turning off wifi by default when not at home or work, turn the app on and connect to the VPN.

But if you find a solution or an app (I haven't tried with OpenVPN which can also be used with PIA settings), please do share it here!


EDIT: Well, yes, if you use the Apple Configurator and your device is controlled by it, you can force it. That is not an option for me since I use my job Exchange account and I cannot set my device to be supervised.

http://www.howtogeek.com/218851/how-to-enable-always-on-vpn-on-an-iphone-or-ipad /

Aug 9, 2016 10:06 AM in response to olce

Hi, I found "Cloak" VPN which supports a customizable White List of trusted Wi-Fi connections then automatically protects all others, and doesn't need to be left open.

Here is a review; http://thesweetsetup.com/apps/best-vpn-solution-ios-os-x/

And their site; https://www.getcloak.com/

I am currently in free 14 day trial and so far very good. Works seamless, clean interface, costs about $100 per year. Unfortunately ONLY works with Apple devices (including Macs) but I mostly just want it for iPhone and iPad so OK for me. I use "Surf Easy" free for Windows 10 laptop, which does NOT support White Lists—but since I don't take laptop much anymore when travelling; not that big a deal. I chatted both; Cloak says they are working on Win version, and Surf Easy says they are working on a White List-like feature. Well…maybe but I wouldn't recommend any breath holding.

Seems like this should be a very standard feature right? And why hasn't Pogue or Mossberg had anything to say about this? Hmmmm?

Good luck.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Enable VPN automatically when not on my home wifi with my IPad

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.