If you have an iPhone linked to Tech Lockdown using Remote Supervision, chances are you would also like to ensure it stays connected to the Content Policy.
Why connect an iPhone to the Content Policy if it's remotely supervised?
The biggest reason is that the Content Policy makes it much easier to manage the internet connection on an iPhone. For example, the Content Policy is much better at blocking websites that fit into a category, like adult content, gambling, questionable activities, etc.
This can still be combined with remote supervision; in fact, we recommend both.
iPhones can be connected in two main ways:
- By installing the Cloudflare One Agent. This sets up a VPN profile on your iPhone that is used to filter websites, and should be preferred if you have multiple members on your Tech Lockdown account.
- By adding DNS Settings to the config file synced to your iPhone.
You can use both methods if you'd like. The Cloudflare One Agent is the preferred way to connect your device for several reasons if you must choose one, but if you're the only member of your account, DNS settings are also perfectly fine.
Use these instructions to connect your iPhone via Cloudflare One.
Afterwards, you can automatically enforce the Cloudflare VPN and block any other VPNs from conflicting with the Config Generator. On your iPhone's config, make sure that you enforce Cloudflare in the "VPN Protections" section like this:
Don't forget to restrict any new VPNs from being installed!
Note that if your iPhone is manually supervised instead, you should enforce the VPN using these instructions instead.
Optionally, connect your iPhone via DNS. This should work on iPhones using manual or remote supervision.
A fully set-up config might look something like this:
Frequently Asked Questions
Why prefer Cloudflare One over DNS?
Cloudflare One requires your device to log in via an email address, and this associates a device with that email address so it can be selected by your Content Policy.
For example, say I have myself and John on my Tech Lockdown account:
If John and I are both using the Cloudflare application on our devices, that means if I create a new rule for myself like this...
...only my own device is affected by the rule. I could just as easily make a rule apply to John only.
However, if both of us are using DNS (or just one of us is), I could still say I want a rule to apply to me on the Tech Lockdown dashboard, but this wouldn't be what I actually see on my own device. The rule I just created would not apply to iPhone unless Cloudflare One was used instead.