How to block apps and website with system manager?

[irish_dann]

Hi Guys, I am just after enrolling an iPad and can now see it system manager. I am just wondering how to I block certain apps and websites? 

Thanks

[BrechtSchamp]

For Apps, check this documentation:

https://documentation.meraki.com/SM/Tags_and_Policies/App_white%2F%2Fblacklisting_in_security_polici...

For Websites, for iOS there's this:

https://documentation.meraki.com/SM/Profiles_and_Settings/Web_content_filtering_on_iOS_devices_in_Sy...

For Android there's no content filtering on the SM side I think.

If you have a full-stack you could do it in your MX or your MR of course.

[kYutobi]

As @BrechtSchamp explained you can use those two links for info but as far as website URL filtering you're better of using Cisco Umbrella if you want it to integrate with Meraki or use it within your firewall to filter. 

[vassallon]

@BrechtSchamp and @irish_dann,

I prefer to do it with a profile under restrictions and specifically iOS Supervised restrictions and Show or hide apps.

[irish_dann]

@vassallon how did you do this? Thanks for the comment

[vassallon]

@irish_dann 

It is setup through Configuration Profiles.

https://documentation.meraki.com/SM/Profiles_and_Settings/Configuration_Profiles

https://documentation.meraki.com/SM/Profiles_and_Settings/Configuration_Settings_Payloads

[Afshin_A]

Hi 

I am new to Cisco Meraki.

I am trying to see how I can block an App that is already on an iOS device that is assigned in System Manager.

I thought Blacklisting does that. But if App is already installed Meraki App in my iOS phone says it is non-compliant.

Is there a way to actually block an App.. for example FaceBook on my iOS?

Thanks,

Afshin

[CptnCrnch]

You could use Application blacklisting:

[Afshin_A]

Hi,

What you said is blacklisting an App. The point is certain APP or APPs are already installed. I need to have a policy to stop running them.

Generally, Is there a way to select Apps that CAN RUN and select others that CAN NOT RUN?

thanks,

Afshin

[Afshin_A]

Again to emphasize,

The assumption is these Apps are on the phones already.

[CptnCrnch]

Application blacklist is part of a security policy. If some device will violate this policy, you could do (almost) whatever you want with it, e.g. deny network access.

[Afshin_A]

Ok thanks,

Can you tell me what the steps are to prevent the access?