Improved Content Filtering VPN Bypass Prevention with iOS 18

techlockdown logo
Tech Lockdown Team
|
Updated September 13, 2024

With Apple's newest iOS version 18 update just around the corner, we're excited to announce how these newer updates impact current Tech Lockdown iPhone users who have configured supervised content filtering VPN enforcement .

We've been testing the iOS 18 Beta release, and the most significant update we've found is more reliable enforcement of a content filtering VPN connection on supervised iOS devices.

Protecting a Content Filtering VPN before iOS 18

Tech Lockdown members get access to our supervised manager , which allows you to install config files that reliably enforce settings on an iPhone.

We currently recommend installing three of our Supervised Config Presets in order to protect the VPN connection with your Content Policy :

  1. Enforce a Content Filtering VPN: If installed onto a supervised device, you can prevent a specific VPN connection from being deleted from iPhone settings.
  2. Restrict New VPNs: Blocks the ability to add new VPN configurations manually from iPhone settings.
  3. Prevent Deleting Apps: Removes the ability to uninstall existing apps.

One of the weaknesses we noticed with this approach was that the Restrict New VPNs Config File was only partially effective because apps could still add new VPN configurations.

The best way we recommended counter-acting this was by using the Shortcuts app to automatically toggle back on the content filtering VPN connection. That way, if VPN connections are switched, the VPN connection you want to enforce would be re-enabled automatically.

How Does iOS Version 18 Improve VPN Protection?

iOS 18 has improved the behavior such that new apps can't add VPN connections if the Restrict New VPNs config we provide is added to the supervised device.

You can still choose to use an Automation as an extra layer of backup, but it's not required if you only have one valid VPN connection available.

To fully protect your VPN connection on iOS 18, you still need to install the same three Config Presets mentioned previously, but now the Restrict New VPNs preset we provide will also prevent apps from adding conflicting VPN connections.

The order you install these Config Presets is important
Make sure that you install the Enforce Cloudflare VPN Config first, then Restrict New VPNs. All new VPN connections will be blocked, including ones you add with a Config Preset.

Where Can I Find These Config Presets?

Members can access these Presets on the Tech Lockdown dashboard by going to Tools > iPhone / iPad > Config Presets.

An important note, your iPhone needs to be supervised in order for these Config Presets to work as intended.

How Do I Enable Supervised Mode on My iPhone or iPad?

Tech Lockdown members can access our premium guide straight from the dashboard:

This guide can be access in the guides section of the Tech Lockdown dashboard and is available to all of our members.

Open chat