Creating DNS Proxy Configurations

As the Ivanti EPMM administrator, you can configure DNS Proxy settings using the DNS Proxy Configuration for users of iPhone and iPad devices. You can use the DNS Proxy payload to specify the application that provides the DNS proxy network extension and other vendor-specific values. The DNS Proxy payload cannot be installed by Apple Configurator and must be installed by MDM on devices running iOS 15 or later.

  • Multiple DNS Proxy configurations can be created
  • Applicable to supervised only in-house apps and App Store apps.
  • You can import / export this configuration.

Procedure

  1. Log in to the Ivanti EPMM Admin portal.
  2. Go to Policies & Configs > Configurations.
  3. Select Add New > Apple > iOS/tvOS > DNS Proxy. The DNS Proxy dialog box opens.
  4. Enter a name and describe the configuration.

  5. Enter the following DNS Proxy Configuration settings:

    • App Bundle Identifier (Required) - Enter the bundle ID of the app that contains the DNS proxy network extension.
    • Provider Bundle Identifier - Enter the bundle ID of the DNS proxy network extension to use.
    • Provider Configuration - use the Upload Configuration button to add the plist file to populate the field.

  6. Click Save. The new policy displays in the Configurations page.

    Saved configurations will also display in the app's App Configurations tab as a new DNS Proxy App Configuration drop-down option.

  7. You must apply a label to this new configuration.
  8. Go to the app in the App Catalog and make sure that in DNS Proxy Filter Setting , the DNS Proxy configuration is selected.
  9. Within the same app, add a widget to select the DNS Proxy list. You can display the DNS Proxy widget in Custom Spaces.
  10. Add a label to the app. When applying a label to the app, the DNS Proxy will be applied based on the device label.

For more information, see Setting DNS proxy for iOS and macOS apps in the Ivanti EPMM Apps@Work Guide.