TMA-IOS-3.3.1
Ensure "Managed Safari Web Domains" is "Configured"
Description
This recommendation pertains to whether Safari, as well as Mobile Device Management (MDM) deployed browsers, will consider certain URL patterns for managed application spaces only. Profile: Level 1 - Institutionally-Owned Devices.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
From the Configuration Profile: Apple Configurator > Configuration Profile > In the left windowpane, click on the Domains tab > In the right windowpane, verify that under Managed Safari Web Domains each appropriate URL pattern is configured.
How it is fixed
Fix method: Guidance or infrastructure patch
From the Configuration Profile: Apple Configurator > Configuration Profile > In the left windowpane, click on the Domains tab > In the right windowpane, under Managed Safari Web Domains enter the appropriate URL pattern(s) > Deploy the Configuration Profile.
Properties
- Operating systems
- Any
- Tags
- iosinstitutionally-owned
- Reference
- CIS Apple iOS 26 Benchmark v1.0.0 - 3.3.1 Ensure "Managed Safari Web Domains" is "Configured"