further to this:   https://developer.apple.com/documentation/devicemanagement/dnssettings reports that the web content filter and DNS have to be installed on the *device* and not *user* channel. I'm testing with Umbrella and Cisco Security Connector and all appears well (websites are blocked: but CSC reports not configured: weird) ... View more