Supervise iOS devices

Hello again man, I tried putting the profile1.configuration on the family ipad. I downloaded the mobicip supervision and activated but it fails everytime I try to install the profile on the ipad. It says "profile needs to be downloaded by mobile device manager server"

 

So I didn't want to get a screenshot because that requires reseting my phone again. Is there a way we could make or develop our own supervisory software like Mobicip's?

 

I'm having the same issue.

 

So I'm not having issues with getting the profile onto my phone, im having issues installing it. I get the same error that Bob gets above but with installation.

 

Ahhhhh, so they may have closed a loophole in their software that allowed you to install any other profiles. So yeah, how could we create our own?

 

Any updates on getting mobicip to work? Or would it be a good idea to just purchase mobicip?

 

Maybe its just me but I cannot get iBackupBot to work...it just gives me "restore error" and no explanation of whats wrong.

I have an iPhone 12 Pro Max latest software 15.5

 

Is there a way around getting FortiClient to run if you don't have a window's computer to run FortiClient EMS? (I use mac ios and there is a FortiClient EMS for ios)

 

Managed to get the profile installed onto my Iphone but now I can't use the internet, what gives?

 

Hi, its been working great but found out it removes the profile and supervision if you update your iOS and have to re-set up each update.

 

Thank you so much for all the info!
I customized your profile to my needs but I have a problem. It seems that even after adding the "allowVPNCreation" key on the restrictions payload and setting it to false, it's still possible to add VPN profiles from any "VPN related" app. I tried to also add the "allowUIConfigurationProfileInstallation" key and set it to false but the result is the same. Maybe you know of any method to prevent this?

The only thing that came to my mind is to block any VPN app from the App Store using the BundleID, but there are A LOT of them (and also I assume new ones are released every day).

I tried to leave the "completely block installing apps" as my last hope. Thanks if anyone can help!

 

First of all want to say thanks to OP. I’m new to this forum, but have been playing around with iOS supervision for a while now.

In response to your post, yes that’s what I’ve found in my experience-disallowing VPN creation does not prevent VPN apps from installing VPNs and overriding enforced DNS settings. I’ve too tried using long lists of blocked apps, but it’s so tiresome to make these lists and near impossible to keep them up to date. In weak moments, I’ve found unblocked vpn apps and yeah then my system doesn’t work.

I think we just need to hope Apple change the settings. I’ve filled out multiple feedback reports and even emailed Craig Federighi, but heard nothing back. It seems odd to me. Device supervision is intended for company use. I imagine the setting to prohibit VPN creation is so companies can enforce web browsing they deem safe and protect their employees’ traffic. I don’t know why then Apple would not also allow blocking of some dodgy 3rd party VPN apps. I reckon we can only hope Apple develops Screen Time beyond parent-child relationships or gives people with supervised devices more settings to play around with.

 

As of iOS 16.4 Apple now includes a description of VPNs and privacy in the VPN section of the Settings app. They write here ‘it is important that you only use a VPN service you trust’. I hope this indicates Apple is being more forthright about VPN security and that they might give users or at least employers the power to block all VPNs (maybe apart from their own).

This would, at least in my circumstances, create the most secure web browsing environment. I only have iOS devices. I supervised them with a borrowed Mac and saved the organisation file in iCloud for safe keeping. Being able to enforce DNS (my choice is NextDNS) and lock that profile to the device is game changing. The weak point in the set up is VPNs can override DNS. One little change from Apple could have a massive effect on my digital environment.

 

Such an excellent work done by you bro, really appreciate the amount of effort that you have put forward. I was trying to supervise my device for such a long time and the list of VPNs that you have made to block requires a lot of work, but there is one VPN that you forgot to block, it is Ultrasurf VPN, request you to kindly add it in your configuration profile for all people who are going to use this profile.
Also, let me know if there is any way that we can prevent adding VPN configurations from these downloaded apps by using configuration files, because there may be many more VPNs out there that is still not in this list, please help me if you found out any method to just block adding configuration profile from VPN apps.