We can successfully break or block vpn or proxy iOS apps via firewall rules. However, a few get through, and we have to work with our firewall support to create a signature or a hexadecimal pattern to break individual apps. One such app currently is called betternet. Is there any way in Casper to block or break these types of apps that are used to circumvent our school district's filter either permanently, or temporarily until we can block permanently through our firewall?
Question
Blocking iOS app 'betternet'
+1
+12No way to prevent installation of apps (besides disabling App Store). The way we sort this out is that we have a smart group with all the inappropriate apps in it, and as soon as the device becomes a member of that smart group, an app lock profile gets installed, that locks the iPad into the Mail app.
+26As far as I know...blocking a single app or two is not possible; that being said...there are many ways you can "mess with someone" who has violated your organization's AUP in some way.
What we do is create a Smart Group based on having that app or any in our "banned list". We apply to that Smart Group a "Mega Punishment" profile. You can do all kinds of sinister things with that profile. In our case, we adjusted the app ratings down to "allow zero third party apps". That hides all the user's apps. We removed their email account from the device and prevented the addition of new ones. That takes away communication vectors. We disabled the Camera, the Messaging service, Safari, iTunes Store, Game Center, Podcasts...basically I went into the Restrictions payload and went hog wild! I specifically did NOT take away WiFi though.
So what happens when a student gets that profile applied....basically the device becomes a paperweight. Kid can't do work so kid makes himself/herself known to a teacher. We have trained our teachers to recognize that condition on the device and send the students to a building principal. I have trained them how to delete the offending app from the device, punish the student with a school punishment and clear the condition on the iPad. With this, the student has to tell the teacher/principal that they were bad and need punished.
We also apply this profile to all users in the district (staff and students) attempting to jailbreak or doing one other task (that I won't share) that breaks our AUP. This way an offending person has to tell someone or not use their device.
+10Ditto ^. Works a charm - when the banned app is downloaded I have set up an automated email notification, so I can get notified that way as well. Needed that final step as students worked out how to remove the banned app before we found them.
+11Does anyone have a pre-set Banned-App list? I have a few that we see regularly, but if they can't do it on one app they'll find another. Any suggestions?
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.