This guide walks you through configuring encrypted DNS settings for iOS devices within the Mobile Guardian profile. Implementing Encrypted DNS ensures that device internet traffic is secure, private, and correctly routed through Mobile Guardian's filtering system.
Prerequisite Note: Ensure that the iOS devices are properly supervised and enrolled in the Mobile Guardian MDM for these profile restrictions and configurations to take effect successfully.
- Select Profiles from the left-hand navigation panel and click the Edit (Pencil) icon next to your target profile.
- Navigate to the What tab on the profile configuration screen.
- Select the Networks option, and you will find DNS Settings.
Configuration
- Select the DNS Provider: Check the box for Use Mobile Guardian settings.
This configures the profile settings to use Mobile Guardian as your primary DNS provider.
- Choose the DNS Protocol: Under the DNS Protocol dropdown, select one of the following based on your network architecture:
- HTTPS (DoH): Uses DNS-over-HTTPS. If selected, you must fill out the Server URL field using the provided URI template for the DoH server.
- TLS (DoT): Uses DNS-over-TLS. If selected, you must fill out the Server Addresses field.
- Enter Server Information: Depending on the protocol selected in the previous step, fill in the corresponding field:
- Server URL (for DoH): Enter the specific URI template for the DNS-over-HTTPS server.
- Server Addresses (for DoT): Enter a comma-separated list of the DNS server IP addresses.
- Configure Supplemental Match Domains (Optional): In the Supplemental Match Domains field, enter a comma-separated list of specific domains that must use this exact DNS configuration.
- Important Toggle: Check Do not use as search domains if you want to ensure these supplemental match domains are strictly used for routing and not appended to the device's local search domain list.
- Save Changes: Click the Save button at the bottom of the screen to deploy the configuration to the devices assigned to this profile.
Settings Reference
| Setting Field | Description / Requirement |
| Per Device Configuration | Determines if settings are applied uniformly or tailored per device. |
| DNS Protocol | Choose between HTTPS (DoH) or TLS (DoT). |
| Server URL | Required if DoH is chosen. Format: URI template. |
| Server Addresses | Required if DoT is chosen. Format: Comma-separated IPs. |
| Supplemental Match Domains | Limits this DNS config to specific domains (comma-separated). |
| Do not use as search domains | Keeps supplemental domains out of the device's default search list. |