Device VPN provides VPN access to a device on boot. VPN access is expected to be always available and limited to critical common resources that provide basic network access, logon, remote management, and remediation services (for devices lacking capability). For example, DNS, PDC, Windows Update and other critical services. The Device VPN session is non-interactive and establishes VPN connection in background.
Topic
The device VPN endpoint enrollment is supported only for Windows based managed devices.