From: Mobile Device Management Settings for IT - Apple Support
New payload updates for iOS 13 and iPadOS 13.1
- Exchange ActiveSync (EAS): EAS now specifies which services (Calendar, Contacts, Mail, Notes, Reminders) are enabled for an account.
- Single App Mode: Voice Control and use of the keyboard have been added to the list of features that can be configured in Single App Mode.
- Network Usage Rules: Ed25519WPA3 has been added to the list of certificate types.
- Network: App rules are no longer required, and rules for SIMs have been added.
- VPN: Three new values have been added—allow local networks, allow any networks, and type of provider (app-proxy or packet-tunnel). If it is app-proxy, the service will tunnel traffic at the application level. If it is packet-tunnel, the service will tunnel traffic at the IP layer.
- Per-app VPN: Per-app VPN supports and specifies domains for Mail, Calendar, and Contacts.
- IKEv2: Four new values have been added—Ed25519WPA3 was added to the list of certificate types, ChaCha20Poly1305 was added to the encryption algorithm types, the Diffie-Hellman security setting added type 31, and fallback is now permitted.
- Wi-Fi: WPA3 has been added to the list of encryption types and allows both personal and enterprise-level authentication. The profile password removal setting has been deprecated on unsupervised devices in iOS 13 and iPadOS.
New and modified restrictions and other configuration profiles are documented here: