In this article

Network administrators use this article to prevent DNSFilter filtering bypass on managed iOS Roaming Clients by deploying a Global HTTP Proxy configuration profile through an MDM. 

On iOS devices, users can bypass the Roaming Client by manually changing proxy settings. Deploying this profile locks proxy settings so users cannot modify them.

Option A: Deploy via MDM

Most MDMs (Jamf, SimpleMDM, Intune, etc.) support deploying a Global HTTP Proxy payload directly. This is the recommended method since it keeps management within the MDM platform.

1. Create a new configuration profile in the MDM
2. Add a Global HTTP Proxy payload
   1. Enter a placeholder proxy URL (e.g., http://dont-avoid.dnsfilter.com)
   2. Set Captive Login Allowed and Fallback Allowed if desired
3. Assign the profile to supervised iOS devices
4. From Settings, navigate to General and select VPN & Device Management

The profile is now active and proxy settings are locked on the device.

Option B: Deploy using the sample profile

1. Download the DNSFilter iOS configuration profile
2. Upload the .mobileconfig file into the MDM (Jamf, Intune, SimpleMDM, etc.)
3. Assign the profile to supervised iOS devices running the DNSFilter Roaming Client
4. From Settings, navigate to General and select VPN & Device Management
5. Select DNSFilter Profile
6. Navigate to Restrictions and select Global HTTP Proxy

The profile is now active and proxy settings are locked on the device.