How to specify allowed Wi-Fi networks for iOS devices

Release Time
07/01/2020
Download PDF
Views
1268 times
Category
profiles
Tags


Click ‘Configuration Templates’ > ‘Profiles’ > open an iOS profile > open the ‘Wi-Fi’ section

  • The Wi-Fi section of an iOS profile lets you add Wi-Fi networks to which the devices applied with the profile can connect to
     
  • You can specify the SSID (service set identifier) or the domain name of the Wi-Fi network, the encryption type, the password to join the network and more for each network
     
  • You can also restrict the devices to connect only to the allowed Wi-Fi networks and prohibit connection to other Wi-Fi networks.

Use the links below to jump to the task you need help with:

Add the Wi-Fi section to an iOS profile

  • Login to Comodo One / Dragon
     
  • Click 'Applications' > 'Endpoint Manager'
     
  • Click ‘Configuration Templates’ > ‘Profiles’
     
  • Open the iOS profile applied to your target devices
     
    • Open the 'Wi-Fi' tab, if it has been added already, and click 'Edit'

      Or
       
    • Click 'Add Profile Section' > 'Wi-Fi', if it hasn't yet been added



 

The configuration pane for the 'Wi-Fi' section opens:
 


 

SSID* - Enter a unique identifier (Service Set Identifier) of the wireless network that the device should connect to.

  • Click the variables button to insert dynamic values. See this page for help to create and manage custom variables.

Note: In iOS 7 and later versions, this is optional if the 'Domain Name' value is set.

Auto join - The device will automatically connect to the configured wireless network.

  • None
     
  • WEP
     
  • WPA / WPA2
     
  • Any
     
  • WEP Enterprise
     
  • WPA / WPA2 Enterprise
     
  • Any (Enterprise)

Hidden network - Select this option if the specified wireless network is hidden and not visible to Wi-Fi scans.

Encryption type - Select the type of encryption used by the wireless network from the drop-down. The available options are:

  • The Password field will appear if any of the options, 'WEP', 'WPA / WPA2' and 'Any' are chosen.
     
  • If any of the Enterprise encryption types is chosen, then select the supported protocols and configure authentication. The options available are: TLS, LEAP, TTLS, PEAP, EAP-FAST, Use Pac, Provision pac and Provision Pac Anonymously, PAP, CHAP, MS CHAP ans MS CHAP V2

Password - Enter the password to connect to the Wi-Fi network. If left blank, the user will be prompted to enter the password when the device attempts to connect to the network.

Proxy - The proxy servers you added to the proxy settings section of the profile are available for selection in the 'Proxy' drop-down.

  • Choose the proxy to be used by the device for connecting to internet through the Wi-Fi connection.
     
  • You can also add new proxy servers:
     
  • Click the 'Add New' and specify the proxy server settings.
     
  • Repeat the process to add more proxies
     
  • See 'Proxy settings' in this online help page, if you want help to add proxy servers to a profile.

Is hotspot - If enabled, the network is treated as a hotspot.

Service provider roaming enabled - If enabled, devices can connect to roaming service providers.

Domain name - Enter the domain name of the Wi-Fi network to which the device has to connect.

  • This is optional and can be provided instead of SSID.
     
  • Click the variables button to insert dynamic values. See this page for help to create and manage custom variables.

Note: This feature applies only to iOS 7 and later versions.

Displayed operator name - Enter the name of the Wi-Fi network provider, to be shown on the device to the user.

  • Click the variables button to insert dynamic values. See this page for help to create and manage custom variables.

Note: This feature applies only to iOS 7 and later versions.

Roaming consortium Ois - Enter the Roaming Consortium Organization Identifier of the Wi-Fi hotspot 2.0 service providers of the networks, to which the device can connect to.

  • Click the variables button to insert dynamic values. See this page for help to create and manage custom variables.
     
  • Click the    button to add more Roaming Consortium OIs fields.
     
  • Click the   button to remove a field.

Note: This feature applies only to iOS 7 and later versions.

NAI Realm Names - Enter the Network Access Identifier (NAI) realm names of the Wi-Fi hotspot 2.0. service providers of the networks, to which the device can connect to.

  • Click the variables button to insert dynamic values. See this page for help to create and manage custom variables.
     
  • Click the   button to add more NAI realm names.
     
  • Click the   button to remove a field.

Note: This feature applies only to iOS 7 and later versions.

  • Click 'Save' to add the Wi-Fi network to the list of allowed networks.


 

  • Repeat the process to add more Wi-Fi networks

Add restriction for devices to connect to only allowed Wi-Fi networks

Click ‘Configuration Templates’ > ‘Profiles’ > open an iOS profile > open the ‘Restrictions’ section

  • The 'Restrictions' section of a profile lets you impose a limitation for the iOS device to connect to only the Wi-Fi networks added to the 'Wi-Fi' section of the profile.
     
  • Once imposed, the device will not be allowed to connect to any other Wi-Fi network.

Force iOS devices to connect to only allowed Wi-Fi networks

  • Login to Comodo One / Dragon
     
  • Click 'Applications' > 'Endpoint Manager'
     
  • Click ‘Configuration Templates’ > ‘Profiles’
     
  • Open the iOS profile applied to your target devices
     
    • Open the 'Restrictions' tab, if it has been added already, and click 'Edit'

      Or
       
    • Click 'Add Profile Section' > 'Restrictions', if it hasn't yet been added


 

  • Scroll down to 'Force Wifi Whitelisting'
     


 

  • Force Wifi Whitelisting - Select 'Force Wifi Whitelisting' to restrict the devices applied with the profile to connect only to the Wi-Fi networks added to the 'Wi-Fi' section of the profile. The devices will not be permitted to connect to any other Wi-Fi network.
     
  • Click 'Save' for your settings to take effect.
     
  • Please ensure at least one Wi-Fi network is added to the Wi-Fi section of the profile if 'Force Wifi Whitelisting ' is enabled for the profile. Else the device will not be able to connect to any Wi-Fi networks.
     
  • A notification is shown in the 'Wi-Fi' section of the profile if 'Force Wifi Whitelisting ' is enabled:


Related topics:

How to setup restrictions for iOS devices via Endpoint Manager profile