Contact UsContact Us

Deploying and Updating Connect iOS for Education

Linewize Connect for iOS allows you to filter school-managed iOS devices such as iPads and iPhones. Student devices with the Connect iOS app installed will be subject to School Manager’s Content Filtering Rules regardless of whether they are at school or at home, or attempting to hotspot using an unfiltered internet connection.

DNS Filtering 

DNS Filtering is the process of filtering a device's internet traffic by intercepting and inspecting packets of the Domain Name System (DNS). DNS is a core backbone of the internet, which is responsible for converting the domain you type into a browser (for example, google.com) into an address the computer can talk to (such as 8.8.8.8). The Connect app checks to see if that domain should be blocked or allowed for that user, or if safe search needs to be enforced for them.

SSL Inspection 

The Connect app offers full path filtering for keyword searches, such as explicitly allowing searches in YouTube or Vimeo based on school Content Filtering Rules. This allows School Manager to access, view, make verdicts, and report back on the full URL of each request. Version 2.1.0 (and later) of the app brings its filtering features into parity with the Connect for Windows, macOS and Chrome agents and extensions.

Before you Begin

To deploy the Connect iOS for Education app, ensure that user iOS devices are:

  • are not running any other iOS filtering software and don't have a global proxy configured,
  • are supervised and managed by a Mobile Device Manager (MDM), and
  • are running iOS 14.5.1+ or later.

Please Note: Apple has fixed many WebKit issues in iOS 14.5.1. An older version of iOS may be used but will only be DNS filtered and not have SSL Inspection.

 

Deploying Connect iOS for Education

The Connect app must be deployed using your MDM and activated using an appropriate MDM profile. Please contact Linewize Support to help you with the process.

 

Post Deployment

Once the Connect app has been deployed and activated on your school managed iOS devices, you should use your MDM to remove the Google and YouTube apps. Removing these apps means students can only search or view videos using a web browser such as Apple Safari or Google Chrome, and ensures that Google and YouTube traffic is inspected and reported in School Manager.


Troubleshooting

Where do I get the latest version of Connect iOS for Education?

You can download the latest version of the Connect iOS app at http://edu-ios.edu.prd.familyzone.com

 

What happens if I don't update devices to the latest version of Connect?

It is very important to ensure your users' iOS and iPadOS devices have the most current version of Connect. Devices with earlier versions of Connect may stop connecting to Apple's servers, to your MDM, or to your schools' network entirely. Check with your MDM on the best way to update an enterprise application, then update your devices to the latest version as soon as it’s released.

Users on Connect 2.2.0 or earlier

Linewize Connect for iOS and iPadOS is provided as an enterprise IPA application, which means Apple requires Linewize to issue a new signing certificate every twelve months.  We typically issue a new version of the certificate every few Connect releases.

If a user is on Connect 2.2.0 or earlier and you can't update their device to the latest version, you should immediately remove any old versions of Linewize Connect App from it, either manually or via your MDM. This will ensure the device maintains network connectivity.

If the user's device checks in with Apple before you can update or remove the old version of Connect, it may lose network connectivity. You will need to manually access the device to take corrective action:

  1. If you do not have it locked down via MDM restrictions, access the device and delete the Connect app, or ask affected users to perform a wipe and restore of the device.

  2. If your MDM prevents users from accessing the “Wipe all content and settings from iPad” feature, you will need to connect the device to Apple Configurator 2.

How do I tell if a device is Supervised?

  1. On the iOS device, go to Settings > General

  2. If the device is successfully supervised, you will see “This [iPhone, iPad or iPod touch] is Supervised. [Organisation name] can monitor your internet traffic and locate this device.”

  3. If the device is not Supervised, please contact your MDM provider or Linewize support for assistance.

 

How can I check that Connect has deployed correctly?

A successful Connect iOS for Education deployment will display: 

  • the Connect App on the Home Screen
  • the Device Identity Certificate
  • the Family Zone Root CA 
  • the Family Zone DNS Proxy
  • the Signing Certificates
  • the MDM (for example SimpleMDM)

To view the MDM settings, go to Settings > General > Device Management > More Details 

You should see the following settings


 

How do I tell if a device is correctly enrolled in School Manager?

To see if a device has been correctly enrolled and associated with your school:

  1. Open the Connect app on the device

  2. On the Home screen, find the User and Device fields. They should be populated with the student’s School Manager username and the device ID of your school manager appliance.

You can also check to see if your MDM settings are correct:

  1. Go to Settings > General > Profile & Device Management > More Details

  2. Check the following fields are correct

    FieldExpected Setting

    Mobile Device Management 

    Your MDM tool details

    Certificate

    Family Zone Root CA

    DNS proxy settings

    Family Zone DNS Proxy

 

How can I check that the device is associated with the correct user?

  1. On the iOS device, open the Connect app

  2. On the home screen, select the Copy icon to copy the debugging information to the clipboard. If the device is enrolled, it will display the user’s details and the School Manager device.

  3. If the device displays incorrect details or doesn’t display details at all, please contact Linewize support for assistance.

 

How do I check if devices are connecting properly?

Filtered On-Network Devices

  1. On the iOS device, go to Settings > Wi-Fi.

  2. If the device is connected on-network (on a safe network via an SSID on an AP), this means the edge device (School Manager or Family Zone Box)/Connect app will be responsible for filtering the device based on the School Manager configuration.

Filtered Off-Network Devices

  1. On the iOS device, go to Settings > Wi-Fi.

  2. If the device is connected off-network, on an unsafe Wifi or cellular (3G/4G/5G) connection, this means the Connect app will be responsible for filtering the device.

 

How can I check that devices are being filtered correctly?

Filtered On-Network Devices

  1. Go to a known blocked website.

  2. If the device is connected to a safe network, the user will see the following Block Page (same as Chromebook, Windows, and macOS)


Filtered Off-Network Devices (DNS filtered)

  1. Go to a known blocked website.

  2. If the device is connected to an unsafe network, the user will see one of the following Block Pages.

Filtered by the Connect iOS Education app (SSL Inspection)

  1. Go to a known blocked website that is being SSL Inspected

  2. The user will see the following Block Page (same as Chromebook, Windows, and macOS)


 

How can I check that Cloud Reporting is working?

When the Connect iOS Education app is filtering, the device will report its network activity to School Manager in near real-time. To check that cloud reporting is functioning:

  1. Log into School Manager

  2. Go to Statistics > Users

  3. Select a User

  4. Go to Active Connections

  5. You should see the connection. To view more details select Details 

 

How do I check error logs?

If a device is experiencing issues, checking logs can be very helpful. The Connect app leverages Apple’s Unified Logging System which allows an IT administrator to filter log events.

  1. In School Manager, go to Statistics > Users.

  2. Select a User.

  3. Go to View Timeline.

  4. Select a Date Range.