We're going through this ourselves. The structure of the plist is pretty
simple (at least in our simple setup – no internal gateways, etc.). Most
of the configuration is set by policy on the gateway. Unfortunately, the
client doesn't seem to respect ...
