How to Whitelist Wi-Fi using SureMDM

How to Whitelist Wi-Fi using SureMDM

Mobile devices are at risk when they connect to unknown, unsecured Wi-Fi networks. Devices exposed to unsecured networks are vulnerable to network and security threats such as Eavesdropping, Man in the Middle, Phishing and WEP/WPA attacks. These are detrimental to device security, settings and stored data/files.

Whitelisting Wi-Fi provides an added layer of protection to the devices, which guards them from unsecured Wi-Fi networks. Whitelisting Wi-Fi allows the devices to only connect to selected Wi-Fi networks. For example, iPads given to mobile employees can easily be connected to unsecured Wi-Fi networks. These networks can invite possible attacks and security threats that put the stored data in danger. In order to secure such devices, a company needs to whitelist Wi-Fi. Use SureMDM to ensure your employees are only connected to secure Wi-Fi networks.

SureMDM offers whitelisting of Wi-Fi for Samsung Knox and iOS devices.

How to Whitelist Wi-Fi on Samsung Knox Devices

Whitelisting Wi-Fi can be achieved on Android Samsung KNOX devices using a script deployed remotely from SureMDM console onto the device.

Follow the below mentioned steps to Whitelist Wi-Fi on Samsung Knox devices:

Step 1: Create a Whitelisting job

1. Login to SureMDM Web Console.
2. Go to Job.

Go to Job
3. Click on New Job.

Click on New Job
4. Select Android from list of Operating Systems.

Select Android from list of Operating Systems

5. On Select Job Type screen, click on Run Script.

On Select Job Type screen, click on Run Script

Step 2: Create the Run Script

1. On Run Script prompt name the job.
2. Add the following script.

!#suremdm
whiteListWifiSSID(SSID1,…SSIDn)

Add the run script

3. Remove SSID1, …SSID2 and replace it with your whitelisted SSID.

Note: For multiple SSIDs, write all SSIDs in bracket and add commas in between them like the example below:

!#suremdm
whiteListWifiSSID(test SSID1,test SSID2, test SSID3)

Step 3: Push the Job to Your Devices

1. Go back to SureMDM Home.
2. Select desired devices and click Apply.

Select desired devices and click Apply
3. From the list, select the job you have created earlier and click on Apply.

From the list, select the job you have created earlier and click on Apply

Step 4: Verify Non-Connectivity to Non-Whitelisted Network

After the job has been pushed, verify the device does not connect to non-whitelisted networks. Go to device settings and try to connect the device to a non-listed network.

The following notification should appear:

“Your device is now protected from unsecured networks.”

Note: This feature will work only on SureMDM Nix Agent version 12.09 onwards.

 

How to Whitelist Wi-Fi in iOS Devices

Wi-Fi can be whitelisted for enrolled iOS devices in SureMDM with use to Wi-Fi Configuration and Restriction profile.

Follow the steps below to whitelist Wi-Fi on an iOS device:

Step 1: Login to SureMDM

1. Login to SureMDM Web Console.
2. Go to Profiles.

Go to Profiles
3. Select iOS.

Select iOS
4. Click on the Add button.


5. From iOS MDM Profile screen, click on Wi-Fi Configuration.

From iOS MDM Profile screen, click on Wi-Fi Configuration.

Step 2: Wi-Fi Configuration and Whitelisting

1. Once you select Wi-Fi configuration, click Configure and Add.

Once you select Wi-Fi configuration, click Configure and Add.
2. When the Wi-Fi Configuration prompt appears, enter the SSID (Wi-Fi SSID which is to be whitelisted), select Security Type and Save.

When the Wi-Fi Configuration prompt appears, enter the SSID, select Security Type and Save.

Note: Follow the same steps to whitelist multiple allowed SSIDs.

Step 3: Restriction Profile Settings

1. Once Wi-Fi Configuration profile is created, go back to the iOS MDM Profile screen and select Restriction Profile.

iOS MDM Profile screen and select Restriction Profile
2. Click Configure.

Click Configure
3. Next screen, scroll the list under Functionality, and select Force Wi-Fi Whitelisting option and click Save.

select Force Wi-Fi Whitelisting option

Note: As mentioned in Force Wi-Fi whitelisting option, this feature will work only on iOS 10.3 onwards supervised devices.

Step 4: Apply the Whitelisting Profile

1. Go back to SureMDM Home.
2. Select desired devices and click Apply.
3. From the list, select the profile you have created earlier and click Apply.

You have now successfully configured an iOS Wi-Fi Whitelisting Profile. You can validate this setup in the iOS device by connecting it to a non-whitelisted Wi-Fi network. If successful, you will not be able to connect to any other network except the whitelisted ones. If you attempt to connect to a non-listed Wi-Fi, the below notification will appear:

“Your device is now protected from unsecured Wi-Fi networks.”

 

Interested in ensuring secured Wi-Fi access on your devices? Try SureMDM today.

Leave a Comment