u/colin_1972

Hi all

I'm struggling to push WireGuard + configuration to an iPhone.

My aim is to ideally push the WireGuard app and configuration file from Manageengine, whilst the app does deploy (even after attaching the configuration file), it asks for the Tunnel to be added.

So I'm not sure why this is not working. The AppConfig.xml template appears to be fine and it is not very clear on adding the config via Profiles -> VPN -> WireGuard.

Does anyone have a solution on how to achieve this?

Another issue that I'm having is that I use Unifi CyberSecure for DNS filtering and it looks like ME is classed as a file sharing app, therefore, the App Catalog on the phone is displaying the Unifi blocked screen even after add an allow for mdm.manageengine.uk!

Thanks in advance

Hi all,

I've just taken out a subscription for the CyberSecure dataset to restrict certain sites from my kids, I know there are probably better and cheaper options, but just wanted something that was easy to manage - seems I was wrong here.

It seems to work for one network, but not others.

I created a VLAN (192.168.8.0/24 default) for my sons PC and other wired devices that he has in his room. The gateway for this is the default 192.168.8.1, and I presume DNS is the same as it was just left at default. DHCP settings are default for this VLAN too.

I created a new 'CyberSecure->Content Filter' group and added his VLAN ID to this group and set the restrictions.

The Unifi SSL cert is installed on his PC and everything appears to be working as expected.

However, my main network (192.168.1.0/24), is a Windows Domain. The DC is at 192.168.1.2, DG is at 192.16.1.1 and this DC also manages DHCP. IPv6 is disabled.

I created a new 'CyberSecure->Content Filter' group and add restrictions and a few random machines (not networks) into it (which have had the Unifi SSL cert to) for test purposes, and set restrictions.

Machines on this network seem to ignore the restrictions, as an example all gambling sites load without being blocked.

This is what I've checked / changed so far:

Disabled IPv6 on both Cloud Gateway Fiber and endpoints

Encrypted DNS is set to Off on the CGF

The CGF Intternet network uses 8.8.8.8 and 1.1.1.1 for DNS

All of the devices on the 192.168.0.0/24 network use the DNS address of the DC (192.168.1.2)

The Forwarders of the DNS settings on the DC has been set to 192.168.1.1 and 'Use root hints if no forwarders are available' is unchecked. And there are no 'Conditional Forwarders'

I tried to block DoH and DoT, which made Google blocked!

Ad Blocker on the CyberSecure->Protection tab appears to work as do incoming Country Restrictions.

I feel like I'm banging my head against the wall with this, so any help would be appreciated.