When installing a VPN profile via a .mobileconfig file, setting the URLStringProbe in OnDemand settings seemed to be enough to temporarily disable the VPN connection when in a captive network.
Now, we've been writing our own VPN client using NEPacketTunnelProvider, and setting probeURL in the NETunnelProviderManager doesn't seem to have the same effect. Captive networks do not work.
Is this a bug, or is there some other way to temporarily disable the VPN when in a captive network progamatically?