iOS will always attempt to initiate a VPN connection when rules in this list are matched.
iOS will never attempt to initiate a VPN connection when
rules in this list are matched. Any rules in this list will take
precedence over the rules in the other two lists.
When Connect On Demand is enabled, the application automatically adds the server
address to this list. This prevents a VPN connection from being automatically
established if you try accessing the server's clientless portal with a web
browser. This rule can be removed if you do not want this behavior.
iOS will attempt to initiate a VPN connection when rules in this list are matched only if the system could not resolve the address using DNS.