diff --git a/windows/security/identity-protection/vpn/images/custom-vpn-profile.png b/windows/security/identity-protection/vpn/images/custom-vpn-profile.png
index e451447693..1bb3d8d310 100644
Binary files a/windows/security/identity-protection/vpn/images/custom-vpn-profile.png and b/windows/security/identity-protection/vpn/images/custom-vpn-profile.png differ
diff --git a/windows/security/identity-protection/vpn/vpn-profile-options.md b/windows/security/identity-protection/vpn/vpn-profile-options.md
index 8d5dd2cd72..68f5c03c71 100644
--- a/windows/security/identity-protection/vpn/vpn-profile-options.md
+++ b/windows/security/identity-protection/vpn/vpn-profile-options.md
@@ -297,6 +297,26 @@ The following is a sample plug-in VPN profile. This blob would fall under the Pr
 
 After you configure the settings that you want using ProfileXML, you can apply it using Intune and a **Custom Configuration (Windows 10 Desktop and Mobile and later)** policy.
 
+1. Sign into the [Azure portal](https://portal.azure.com).
+2. Go to Intune > Device Configuration > Properties.
+3. Click Create Profile.
+4. Enter a name and (optionally) a description.
+5. Choose Windows 10 and later as the platform.
+6. Choose Custom as the profile type.
+7. Click Add.
+8. Configure the custom setting:
+    a. Enter a name and (optionally) a description.
+    b. Enter the OMA-URI ./user/vendor/MSFT/_VPN profile name_/ProfileXML.
+    c. Set Data type to String (XML file).
+    d. Upload the profile XML file.
+    e. Click OK.
+
+    ![Custom VPN profile](images/custom-vpn-profile.png)
+ 
+9. Click OK, then Create.
+10. Assign the profile.
+
+
 1.	Sign into the [Azure portal](https://portal.azure.com).
 2.	Go to **Intune** > **Device Configuration** > **Profiles**.
 3.	Click **Create Profile**.