Description
The WebContentFilter payload can be used to restrict Safari and third-party apps to specific websites. This article explores the different configuration options that exist within the WebContentFilter payload.
Web Content Filter Configuration Options
Built in filter (iOS Only) (most common) - Built in provides different options when restricting website access for iOS devices:
Allow List Bookmarks: Add URLs to this list to permit access to certain websites, even if they’re considered adult by the automatic filter. If you leave this list empty, access is permitted to all nonadult websites except for those listed in Denied URLs.
Deny List URLs: Add URLs to this list to deny access to certain websites. Note: If a restriction contains denied URLs, then any URLs in the Allow URLs field that contradict the denied list are removed.
Limit Adult Content Automatically: Limits access to many adult websites automatically.
Plug-In (macOS and iOS): Create customized settings to connect and authenticate to third-party content filters.
The Allow List Bookmarks or Deny List URLs option can be chosen depending on the purpose of the profile. The Web Content Filter profile can also be employed in conjunction with Single App Mode to secure the device, restricting it to a browser that exclusively accesses the specified URLs.
Organizations with complex or legally mandated content-filtering requirements should use global HTTP proxy or advanced content-filtering options provided by a third-party content filtering app. Learn more about HTTP proxy profiles here.
Creating a Web Content Filter Profile Using iMazing
Download iMazing and open the iMazing profile editor under Tools > iMazing Profile Editor.
Enter a profile name under the General > Name field in iMazing.
Locate the Web Content Filter option under Available System Domains in iMazing.
Click +Add Configuration Payload.
Configure the profile based on the overall goal.
For Allow list, select the Allow List Bookmarks option. Click + and enter the URL and Title for each website you want to allow. Learn more on how to structure URLs when configuring either the Allow List or Deny List here.
For Deny list, select the Deny List URLs option. Click + and enter the URL and Title for each website you want to deny. Learn more on how to structure URLs when configuring either the Allow List or Deny List here.
Select Limit Adult Content Automatically to limit access to pre-selected adult websites managed by Apple. Enabling Limit Adult Content Automatically will prevent Allow List Bookmarks and Deny List URLs from being enabled at the same time.
Click File > Save As to save the profile to your computer.
Upload the custom profile in Jamf Now under Blueprints > Custom Profile to deploy the profile to all devices in the blueprint. Learn more about Custom Profile upload and deployment here.
