> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-agent-ios-guide/8.3/configure-cortex-xdr-agent-app-for-ios/configure-network-filtering-on-supervised-devices-administrator-task.md).
# Configure Network Filtering on Supervised Devices (Administrator Task)
When your organization supervises iOS devices, the administrator can set up network filtering to block network activity for specific URLs.
When your organization supervises iOS devices, the administrator can set up network filtering to block network activity for specific URLs. The administrator must configure profiles both at the mobile device management (MDM) side, and at the Cortex XDR side.
* At the MDM side, configure a payload configuration profile for network filtering.
* At the Cortex XDR side, configure the **Block list** in the **SMS, MMS and Safari Malicious URL filtering** section of the Malware profile.
{% hint style="info" %}
### Note
We recommend configuring your environment so that supervised iOS device users cannot remove the Cortex XDR app manually.
{% endhint %}
Task 1: Configure a payload configuration profile
In your MDM, configure a profile for the supervised devices that includes the payload that enables the network filtering feature. Ensure that the following are configured:
* Enable `FilterBrowsers` and `FilterSockets`
* Set `PluginBundleID` to the bundle ID of the Cortex XDR agent iOS app: `com.paloaltonetworks.cortex.ios`
The following example shows a sample configuration profile with the required payload settings:
```programlisting
PayloadContent
FilterBrowsers
FilterSockets
FilterType
Plugin
PayloadDescription
Configures content filtering settings
PayloadDisplayName
Cortex XDR Network Data Filter
PayloadIdentifier
com.apple.webcontent-filter.2EF1184F-FC41-4477-BA81-D46AB318D8BB
PayloadType
com.apple.webcontent-filter
PayloadUUID
2EF1184F-FC41-4477-BA81-D46AB318D8BB
PayloadVersion
1
PluginBundleID
com.paloaltonetworks.cortex.ios
UserDefinedName
Test667016 Filter Config
PayloadDisplayName
Network Filter
PayloadIdentifier
M-NPGQ47GQG3.9A2AF4B6-BB2C-4956-B599-CAB4C0CCBD6B
PayloadRemovalDisallowed
PayloadType
Configuration
PayloadUUID
187DABAB-297B-44B9-88FA-B57F0A44088F
PayloadVersion
1
```
Task 2: Configure a network filtering policy and assign it to devices
1. On your Cortex XDR tenant, create a new [Malware profile](/cortex-xdr-agent-ios-guide/8.3/install-and-connect-cortex-xdr-agent-app-for-ios/add-a-malware-security-profile-administrator-task.md), or edit an existing one for iOS devices.
* Ensure that you set **SMS, MMS and Safari Malicious URL filtering** **Action Mode** to **Blocked**.
* Add URLs to the **Block List**. You can specify exact URLs, or define a range of URLs using wildcards. For example:
* Block a specific URL: [www.google.com](http://www.google.com)
* Block all URLs under Google: [www.google.com/\\](http://www.google.com/\\)\*
2. If the Malware profile is not assigned to a prevention policy rule yet, add it to a new or existing policy rule, and ensure that the supervised iOS devices are mapped to the policy rule.
3. To validate that the network filter is enabled on the device, go to the Cortex XDR app settings screen on the device. The **Network filter** row should display **Enabled**.
Actions required when disabling a network filter
To disable the network filter, use your MDM to remove the payload configuration profile that enabled the filter from the supervised iOS device.
Actions required when deleting or reinstalling the Cortex XDR app
Before deleting the Cortex XDR app from a supervised device, use your MDM to remove the payload configuration profile that enabled the filter from the supervised iOS device. This will ensure that all processes related to network filtering are terminated correctly, and ensures seamless reinstallation of the app.
{% hint style="warning" %}
### Caution
If you do not delete the network filtering configuration profile before deleting the Cortex XDR app from the device, unexpected behaviors might occur, or network connectivity might be lost. Therefore, best practice is to always remove the configuration profile before deleting or reinstalling the Cortex XDR app.
{% endhint %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-agent-ios-guide/8.3/configure-cortex-xdr-agent-app-for-ios/configure-network-filtering-on-supervised-devices-administrator-task.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.