A profile with a Global Proxy set forces all network traffic from a supervised iOS device to route through a designated proxy server. This configuration ensures corporate data compliance, traffic filtering, and data leak protection regardless of the Wi-Fi or cellular network the device connects to.
Prerequisites
- Supervised Device Status: The target iOS device must be supervised (configured via Apple Configurator or Apple Business Manager).
- Network Infrastructure: Valid proxy server details (IP/Hostname and Port) or an accessible Proxy Auto-Configuration (PAC) file hosted over http:// or https://.
Configuration Workflow
- Select Profiles from the left-hand navigation panel and click the Edit (Pencil) icon next to your target profile.
- Navigate to the What tab on the profile configuration screen.
- Select the Networks option, and you will find iOS Global Proxy
- Select your target Proxy Type.
Proxy Type Setup
Proxy Type: Manual
Use this setting to explicitly route all device traffic to a static proxy IP or domain.
| Setting | Field Value | Description |
| Proxy Type | Manual | Forces static proxy entry. |
| Hostname | e.g., proxy.company.com | Fully Qualified Domain Name (FQDN) or IP address of the proxy server. |
| Port | e.g., 8080 | Network port number listening for proxy connections. |
| Username (Optional) | e.g., user@company.com | Authentication username for the proxy server. |
| Password (Optional) | •••••••• | Authentication password for the proxy server. |
| Allow Bypassing Proxy | Enabled / Disabled | Permits captive portal login screens (such as hotel or coffee shop Wi-Fi) to load without going through the proxy. |
Proxy Type: Auto
Use this setting to dynamically direct traffic using a hosted Proxy Auto-Configuration (PAC) script.
| Setting | Field Value | Description |
| Proxy Type | Auto | Uses PAC-driven routing rules. |
| Proxy PAC URL | [http://pac.company.com/proxy.pac](http://pac.company.com/proxy.pac) | Location of the PAC file. Must begin with http:// or https://. |
| Allow Direct Connection | Enabled / Disabled | Fallback setting allowing the device to connect directly to the internet if the PAC server is offline or unreachable. |
| Allow Bypassing Proxy | Enabled / Disabled | Permits captive portal login screens to load directly so users can complete network authentication. |