This guide explains how to configure Wi-Fi and proxy settings for Mobile Device Management (MDM) payload profiles across managed devices.
Proxy settings are only for iOS devices.
- Navigate to Profiles: On the left-hand side panel, select "Profiles."
- Select a Profile to Edit: Click on the pencil icon on the far right under the "Actions" column for the profile you want to edit.
- Network Option: Once directed, click on the “Network” option.
- Select Wi-Fi & Proxy
Adding a New Wi-Fi Network
- Select Add New
Basic Wi-Fi Details
- Wi-Fi Description: A friendly, display-only name for the network configuration (e.g., Library Wi-Fi). This field is required.
- SSID (Service Set Identifier): The exact technical name of the targeted wireless network.
Connection Options
- Hidden Network: Check this box if the target wireless access point does not broadcast its network name publicly.
- Auto Join: Enables managed devices to connect to this network automatically whenever it is within range.
- Disable Captive Network Detection: Bypasses web-based login pop-ups (web portals) when connecting to the network.
- Disable Association MAC Randomisation: Prevents the device from using a randomised Private Wi-Fi Address for this specific network.
- Disabling MAC randomisation triggers a Reduced Privacy warning on devices running iOS 14+.
Proxy Configuration (iOS)
Select how network traffic routes through your organisation's proxy server:
Proxy Type | Description |
| None | Direct internet connection; no proxy routing used. |
| Manual | Manually input the proxy server host IP, port number, and required authentication details. |
| Auto | Uses a PAC (Proxy Auto-Configuration) URL to handle proxy routing dynamically based on script rules. |
Security Types
Choose the authentication protocol that matches your wireless network setup:
Category | Security Option | Supported Features / Scope |
| Open | None | Unsecured network requiring no passphrase or certificate. |
| Legacy | WEP | Legacy encryption protocols (not recommended for modern deployments). |
| Personal | WPA / WPA2 Personal | Standard pre-shared key (PSK) authentication. |
| WPA2 Personal | Enforces WPA2 PSK (iOS 8+; excluding Apple TV). | |
| Any Personal | Accepts any available personal pre-shared key protocol. | |
| Dynamic WEP (iOS) | Enterprise 802.1X RADIUS authentication using dynamically rotating per-session WEP (RC4) keys. | |
| Enterprise | WPA / WPA2 Enterprise (iOS) | 802.1X RADIUS-based authentication for corporate environments. |
| WPA2 Enterprise (iOS) | Enforces 802.1X WPA2 Enterprise (iOS 8+; excluding Apple TV). | |
| Any Enterprise (iOS) | Accepts any Enterprise 802.1X standard supported by the device. |
Fast Lane QoS Marking
Applies Quality of Service (QoS) prioritisation for critical enterprise applications on Cisco Wi-Fi networks:
- Do not restrict: Allows all managed business apps to tag traffic for prioritised QoS queueing.
- Restrict: Limits QoS prioritisation strictly to whitelisted apps configured within your enterprise policy.