I have an MDM supervised device with an installed managed app, that activates a content-filter solution to filter traffic system-wide. Is it possible in any way for the user to install a third party content-filter app that would somehow overtake the control of content filtering from my app? I'm asking this because I've tested such a case with my another test content-filter solution and it takes control over content filtering from my content-filter – I think this is possible only because my device is in developer mode, but I'm not entirely sure, and I need a confirmation that it would not be possible to happen in an end used environment.
I presume you’re talking about iOS here. The story on macOS is trickier.
Also, I presume that you’re not trigger the Screen Time API exception, as discussed in TN3134 Network Extension provider deployment.
If both of the above apply then the only way to configure a Network Extension content filter is via a configuration profile:
-
In the supervised device case, there are no restrictions on how the profile is installed.
-
In the per-app case, the profile must be deployed via MDM so that the
ContentFilterUUIDproperties line up.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"