I need to prevent a user from being able to disable the VPN setup by MS Defender as part of the Web Protection feature, On an iPhone

Question

Hi,

We are wanting to protect and prevent our users (all with iPhones unfortunately) from accessing know malicious or phishing website.

Allowing them to effectively disable this protection by disabling the VPN is not ideal. How can we using Defender or Intune prevent our users from turn off the VPN or worse still, install a different VPN App?

Many thanks

Nick

Answer 1

@Nick Broomhead, Thanks for posting in Q&A.

From your description, I know you want to prevent users from turning off the VPN. Based on my research, Intune didn't not have this feature. In general, Intune develop the feature according to the API Apple MDM provided. After researching, I find there's no feature in apple MDM either. To request this, you need to contact Apple support to see if we can have this feature in the future:

https://support.apple.com/en-sg/guide/deployment/dep739685973/web

Meanwhile you can also contact Defender support to see if it can do on Defender side.

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/contact-support?view=o365-worldwide

Hope it can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.