Preventing Bypass on Android
After you’ve connected an Android device to your content policy, the next step is to enforce that connection.
Android devices bring a high degree of customization and configurability, giving you a few methods that can help you prevent your Content Policy from being bypassed.
Prevent App Uninstall
There are two main ways that you can prevent the app from being uninstalled:
- Use an Applocker to deny access to these Settings.
- Enable managed mode to disable the ability to remove programs completely.
Between the two, we strongly recommend enabling managed mode. Managed mode allows you to block access to built-in apps, like Settings. However, an AppLocker app can work just fine if you want to keep things simple.
Enable managed mode to disable the ability to remove programs from your smartphone
Deny the option to remove or uninstall apps to prevent the Cloudflare One App from being uninstalled:
You can also enable kiosk mode, which can further restrict your ability to access apps you don't need to access:
Use an AppLocker to Block access to Settings
This is an option for many customers. Unfortunately, we can't suggest step-by-step instructions, since each AppLocker is very different. However, most AppLockers will allow you to block the Settings app.
Also, keep in mind that you may not need to block access to the Cloudflare One App, since you can enforce settings that prevent users from leaving the organization or disabling the VPN.