Neat tip! So this will ensure that all connections including Apple's push notification service always go through the VPN? How does this interact with public wi

Neat tip! So this will ensure that all connections including Apple's push notification service always go through the VPN? How does this interact with public wifi captive portals, which often are a barrier to get online in the first place? A pretty common need would be to click through the public portal, sometimes dealing with email verification links or Facebook logins for those portals that require identifying oneself, and then to want 100% of traffic after the Internet connection is open to go through the VPN. In other words, road warriors with security concerns need a solution that is NOT always-on but is comprehensive when on. Apparently iOS doesn't support this as per the article, and the always-on MDM suggestion isn't that either.