In your MDM, configure a profile for the managed devices, that includes the payload that enables the Network Shield feature. Configure the following:
Enable FilterBrowsers
and FilterSockets
Set PluginBundleID
to the bundle ID of the Cortex XDR agent iOS app: com.paloaltonetworks.cortex.ios
(Optional, supported only on devices running iOS 17 or higher) Add the distributionID
to the payload.
When the distributionID
is included in the payload, registration is performed in the background when the device user first opens the app, and the user does not need to perform the installation wizard's onboarding procedures.
(Optional, supported only on devices running iOS 17 or higher) If your MDM solution allows you to set dynamic values in payloads (by providing a value such as $USERNAME or $EMAIL), you can define a user name that will be used during automatic registration in background.
The following example shows a sample configuration profile with the required payload settings:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>FilterBrowsers</key>
<true/>
<key>FilterSockets</key>
<true/>
<key>FilterType</key>
<string>Plugin</string>
<key>PayloadDescription</key>
<string>Configures content filtering settings</string>
<key>PayloadDisplayName</key>
<string>Cortex XDR Network Data Filter</string>
<key>PayloadIdentifier</key>
<string>com.apple.webcontent-filter.2EF1184F-FC41-4477-BA81-D46AB318D8BB</string>
<key>PayloadType</key>
<string>com.apple.webcontent-filter</string>
<key>PayloadUUID</key>
<string>2EF1184F-FC41-4477-BA81-D46AB318D8BB</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>PluginBundleID</key>
<string>com.paloaltonetworks.cortex.ios</string>
<key>UserDefinedName</key>
<string>Test667016 Filter Config</string>
<key>VendorConfig</key>
<dict>
<key>distributionId</key>
<string>******4046b24424d9ce252**********</string>
<key>username</key>
<string>$USERNAME</string>
</dict>
</dict>
</array>
<key>PayloadDisplayName</key>
<string>Network Filter</string>
<key>PayloadIdentifier</key>
<string>M-NPGQ47GQG3.9A2AF4B6-BB2C-4956-B599-CAB4C0CCBD6B</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>187DABAB-297B-44B9-88FA-B57F0A44088F</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>