iPad MDM setting...?

[iphone4usa]

View attachment 2632939
Hi everyone,


Someone in my family got a work iPad, but it has MDM (Mobile Device Management) on it.


Can any IT experts tell me how much they can track us during normal use? We mostly want to know if the company can see what we do on the internet (browsing history, websites visited in Safari, etc.). Is it like "Big Brother" watching everything, or is it just blocking some apps?


Also, is there an easy way to check if our internet traffic goes through their servers or a VPN?


Does anyone know how this works and what they can actually see?


Thanks a lot!

 

[hg.wells]

You should assume they can track anything. If you wouldn’t do it in the office don’t do it on the iPad.

 

[BigBlur]

They will be able to see the system info, what apps are installed, and enforce policies. Intune itself does not monitor web traffic, but they could have other ways of doing that. It's clearly provided for work, so don't use it for personal use.

BTW, I think the company name is shown in a couple of your screenshots. You may want to take them down or mask it out.

 

[I7guy]

I have an MDM on my phone. Accessing inside infrastructure requires the MDM and specific apps, which provides a secure tunnel. Policies prevent internal data from leaking but unless signed in with edge with a corporate id, browsing is not monitored. YMMV with your mdm.

 

[iphone4usa]

I have an MDM on my phone. Accessing inside infrastructure requires the MDM and specific apps, which provides a secure tunnel. Policies prevent internal data from leaking but unless signed in with edge with a corporate id, browsing is not monitored. YMMV with your mdm.

I have also MDM on iPhone and there is not tracked the web traffic, so there are several options. Is there some chance to check if traffic goes trough some their servers?

 

[iphone4usa]

They will be able to see the system info, what apps are installed, and enforce policies. Intune itself does not monitor web traffic, but they could have other ways of doing that. It's clearly provided for work, so don't use it for personal use.

BTW, I think the company name is shown in a couple of your screenshots. You may want to take them down or mask it out.

Is there some chance how to test it that is going through some their servers?

 

[FreakinEurekan]

Is there some chance how to test it that is going through some their servers?

It could, so you should assume that it does.

 

[iphone4usa]

It could, so you should assume that it does.

? My question was on possible test.

 

[Reverend Benny]

While MDM won't monitor traffic its fairly standard for companies to install apps that do. A good example might be MS Defender that's used to protect the device and to do so it monitors internet traffic.
It might also be the case that the company disables specific functions such as private relay as it stops MS Defender working as it should.

Have a good read on the company policy on what's allowed to do on company devices. Some block stuff while others just have a policy and trust that the employee will follow these.

One example might be that you aren't allowed to install a VPN client, but that they haven't blocked you to do so.
If you do its easy for them to see that you have installed this.

So ask the family member to have a good read on what's allowed and what's not before starting to test if it works.

 

[FreakinEurekan]

? My question was on possible test.

Even if it didn’t at the time of the test - it’s a feature they “could” enable. So assume that they’re going to, and don’t use the iPad for anything outside of policy or that you don’t want them to know about. It’s their iPad and their rules, after all.