About iOS device operating modes
The device operating mode depends on the owner of the mobile device (personal or corporate) and corporate security requirements. You can choose the operating mode that is most suitable for your company and use several modes at the same time.
The following device operating modes are available for iOS devices:
- Basic protection
- Basic control
- Supervised
Basic protection
Basic protection is the device operating mode for personal or corporate iOS devices. This operating mode lets you protect against web threats and detect jailbreaking on devices using the Kaspersky Security for iOS app.
Basic control
Basic control is the device operating mode for personal iOS devices. This operating mode lets you protect and perform basic management of devices.
The user is allowed to use a personal Apple ID, work with any apps, and store personal data on the device. You can configure policy settings to control user's access to corporate resources and manage other security requirements.
To manage iOS devices in the basic control operating mode, you must have an installed and configured iOS MDM Server.
Supervised
Supervised is the device operating mode for corporate iOS devices. This operating mode provides a wider range of settings to define through the policy than devices in other operating modes, for example:
- Send additional commands to manage Bluetooth settings, update operating system, locate device or sound alarm in Lost Mode.
- Manage advanced restrictions:
- Network restrictions (prohibit modifying Personal Hotspot settings, prohibit creating VPN configurations, force Wi-Fi on and allow connection to specified Wi-Fi networks on, prohibit modifying Bluetooth settings).
- App restrictions (for example, prohibit installation of apps from Apple Configurator and iTunes).
- Prohibit access to USB devices in Files and disable access to USB devices when the device is locked.
- Configure advanced App Control settings (for example, create custom lists of allowed and forbidden apps).
- Configure Web Control settings.
- Configure an HTTP proxy server to monitor internet traffic on a device within the corporate network.
To manage iOS devices in the supervised operating mode, you must have an installed and configured iOS MDM Server and devices switched to the supervised status in Apple Configurator. For detailed information on working with Apple Configurator, refer to the Apple Technical Support website.