Is it possible to require VPN for internet-access?

Question

Level 1

0 points

Is it possible to require VPN for internet-access?

Hi!

At my work we run a pretty tight ship when it comes to security, in order to access any resources (including e-mail) or even the internet you need to be connected via VPN if you're not at the office. It's quite frustrating to bring your computer home just to check the e-mail. Non-company equipment will never be allowed access to the servers because of potential malware. And now for my question:

Is it possible to prep an iOS device so that it cant access the internet without a VPN connection before handing it out? I tried to google for a while but didint come up with anything.

Thanks!

David

Posted on Dec 7, 2014 1:38 PM

Reply

Answer 1

Kappy

Level 10

362,017 points

Dec 7, 2014 1:43 PM in response to dygland

You might see if this helps: iOS 7- Mobile Device Management and Find My iPhone Activation Lock. Also, this is the tool: Apple Configurator 1.7.1.

Reply

Answer 2

rccharles

Level 6

13,037 points

Dec 7, 2014 2:23 PM in response to Kappy

Consider DEP, Device Enrollment Program. This will establish the company as the owner of the device. It will lock an MDM to the divice which in turn will lock profiles to the device.

Quick overview of zero-touch MDM enrollment, DEP

http://www.apple.com/education/it/dep/

"This document offers guidance on some important considerations for getting the most out of your iOS deployment." Covers: Prepare your infrastructure. Set up devices. Configure and manage devices. Deploy apps and content. Plan for support.

https://www.apple.com/ipad/business/docs/iOS_Enterprise_Deployment_Overview_EN_F eb14.pdf

Reply

Answer 3

Kappy

Level 10

362,017 points

Dec 7, 2014 3:06 PM in response to rccharles

Thank you so much. That sounds just like what the OP requires.

Reply

Answer 4

KiltedTim

Level 10

227,256 points

Dec 7, 2014 3:10 PM in response to dygland

I don't believe that there is any way to require a VPN connection in order to access internet resources from an iOS device.

The other posters here have good advice.

However, you should keep in mind that there is no known malware in the wild that can affect an un-jailbroken iOS device.

There would be no way for an un-jailbroken device to infect any of your other systems.

Reply

Answer 5

Kappy

Level 10

362,017 points

Dec 7, 2014 3:17 PM in response to KiltedTim

But there is still the problem of passing on malware embedded in a forwarded email you may receive.

Reply

Answer 6

rccharles

Level 6

13,037 points

Dec 7, 2014 5:47 PM in response to dygland

s it possible to prep an iOS device so that it cant access the internet without a VPN connection before handing it out? I tried to google for a while but didint come up with anything.

& What is your worry? They will not be able to get onto your systems without using VPN. You worried they will wonder around the internet & get into trouble?

Putting the machine in supervisory mode will prevent it from being connect via a cable to any computer except the supervising computer.

There are also all-in-one applications for business that lock down the data. Everything you do for business is down in the app. There are more of these, but here is one:

All in one Applications that emphasize security

"Good Collaboration Suite

Secure mobile app-to-app collaboration.

The Good Collaboration Suite includes Good for Enterprise, Good Share and Good Connect secure mobile apps, simplifying access to email, calendar, contacts, tasks, instant messaging, browsing and document sharing. These apps are built using Good’s next-gen containerization that includes secure data sharing between any Good secured app as well as app-level encryption independent of the device used."

http://www1.good.com/applications/

Reply