Profiles | What - Network Settings Overview

The Network Settings section within a Mobile Guardian profile allows administrators to control how enrolled devices connect to the internet, route web traffic, and authenticate within corporate or school environments. Properly configuring these options ensures both data security and seamless web filtering.

Below is an overview of the four primary sub-sections found within Network Settings.

WiFi & Proxy

This section is used to manage local wireless network access and initial web traffic routing.

• WiFi Configuration: Pre-configure Service Set Identifiers (SSIDs), passwords, and security types (e.g., WPA/WPA2) so managed devices automatically and securely connect to official networks without manual user intervention.
• Proxy Settings: Define whether device traffic should pass through a proxy server when connected to specific networks. This is commonly used for caching, logging, or additional perimeter security.

iOS Global Proxy

A system-level override for Supervised iOS devices that forces strict web traffic routing.

• Always-On Routing: Unlike standard WiFi proxies, a Global Proxy forces all HTTP and HTTPS traffic across both WiFi and Cellular networks to pass through a designated proxy server.
• Enforced Filtering: This is heavily utilised to ensure that web filtering policies cannot be bypassed by turning off WiFi or switching networks.

DNS Settings

This section ensures that device domain requests are secure, encrypted, and pointed to the correct filtering infrastructure.

• Encrypted DNS: Enforce secure DNS protocols across iOS devices using HTTPS (DoH) or TLS (DoT).
• Mobile Guardian Integration: Configure devices to specifically use Mobile Guardian (such as QA PREPROD or Production environments) as the secure DNS provider to accurately log and filter web requests.

VPN (Virtual Private Network)

The VPN tab establishes a secure, encrypted tunnel between the managed device and an internal private network.

• Profile-Wide VPN: Push enterprise VPN configurations (e.g., IKEv2, IPsec) directly to devices.
• Traffic Control: Configure whether all device traffic is tunnelled through the private network or only traffic destined for specific internal subnets.

SCEP (Simple Certificate Enrollment Protocol)

SCEP automates the distribution and management of digital certificates to managed devices at scale.

• Certificate-Based Security: Allows devices to automatically request unique cryptographic certificates from a corporate Certificate Authority (CA) rather than using shared passwords.
• Seamless Authentication: These certificates are silently deployed to authenticate devices seamlessly for secure WiFi, VPN, or internal web portals.