The Tech Lockdown dashboard includes a Device Setup wizard, which walks you through the recommended bypass prevention steps.
Here is what the wizard walks you through for Standard or Supervised iPhone bypass prevention.
Protect the Cloudflare One VPN
This is a summary of what the bypass prevention wizard recommends for enforcing the VPN connection.
Prevent App Uninstall
Prevent Overriding VPN Settings
If the iPhone is supervised, configure the following using the Supervised Config Manager:
If the iPhone is not supervised, you could try the following:
Disable Conflicting iPhone Features
Use the Supervised Config Manager to do the following:
If you can't supervise the iPhone:
Prevent the App from Being Opened and Modified
If you'd like to prevent the Cloudflare One App from being opened and customized, you can use the Shortcuts app to lock the Cloudflare One App.
- Create a personal automation using the Shortcuts app
- Select
App
as the trigger and choose the Cloudflare One app - Select
Go to Home Screen
as theAction
- Set the automation to run immediately
Follow the exact steps in our Apple Shortcuts & Automations Guide for iOS .
Automatically re-enable the VPN if disconnected
In some cases, the Cloudflare VPN might get disconnected. Using Apple Shortcuts, you can make an Automation to ensure the VPN is always on and enabled.
You can create automations for the following triggers:
- When a browser app is opened
- When the settings app is closed
- When any Wi-Fi network is connected to
This is the action you should create for each of these automations:
- The action should be to
Set VPN
and you'll choose the Cloudflare VPN - Set the automation to run immediately.
I don't see Cloudflare on this list?
Follow the exact steps in our Apple Shortcuts & Automations Guide for iOS .
Restrict Apps
We highly recommend restricting the apps that can be added to an iPhone.
A) Standard
If you can't enable supervised mode:
B) Supervised
Use the Supervised App Manager in your Tech Lockdown dashboard:
Both Standard and Supervised
You can use the Content Policy in your Tech Lockdown dashboard to create app block rules to disable apps that rely on the internet to function properly. When an app is blocked this way, you will still be able to install it on the iPhone, but it won't function properly.
Other Bypass Prevention Techniques
There are some bypass prevention techniques that apply regardless of the device you are using.
Bypass Prevention
Prevent Bypass of DNS Content Policy
Ensure that filtering is not bypassed either intentionally or unintentionally.