Cloud Shield App for Android

Function of the Cloud Shield Android app

Last adaptation to the version: 1.3 (08.2025)

New:

Use of the app for devices in external MDMs
App kann per Benachrichtigung pausiert werden

Hinweis, falls die Lizenz abgelaufen ist, oder das Cloud Shield Profil gelöscht wurde
Ab Portalversion 2.5
Neuer Reiter in den Einstellungen: Hilfe
Neuer Abschnitt: Voraussetzung

Last updated:

Rename profile type MDM to Managed devices

notempty

This article refers to a Beta version

Prerequisite

At least Android version 8.1

Introduction

With the Securepoint Cloud Shield app for Android devices, all DNS requests from the Android device are routed via secure servers that block suspicious or malicious domains based on regularly updated filter lists
Requests are encrypted (DNS-over-TLS/HTTPS) to prevent tampering and eavesdropping attempts
Central distribution via Securepoint Mobile Device Management ensures that all smartphones are uniformly protected and that company guidelines for secure Internet use are adhered to
At the same time, tracking and data theft are reduced while connection speed remains optimized

Preparations

Devices in MDM

A profile of type Managed devices is available in the Securepoint Portal under Cloud Shield Profile . Further information on this can be found in the

following Wiki article

Select the desired Android profile under Mobile Security iOS/iPadOS Profiles . For more information, see

following wiki article

In the profile tab Cloud Shield select the option Enable Cloud Shield and under Profile select the Cloud Shield profile
The Cloud Shield app is then automatically installed on the Android devices with the corresponding Android profile
The Cloud Shield profile is applied to the Android devices

Devices without MDM / external devices

In the Securepoint Portal under Cloud Shield Profile there is a profile of the type External devices. Further information can be found in the

following Wiki article

Download the Cloud Shield app from the Google Play Store.

Cloud Shield Startscreen

The start screen of the Cloud Shield app for managed Android devices shows whether the app is active or inactive
Cloud Shield can be activated or deactivated via the button
Error messages and notes are still displayed
The settings are displayed using the button Settings

Hovern: MDM ⇄ external devices

Start screen of the app for MDM devices

Start screen of the app for external devices on first start without configuration ID

The start screen of the Cloud Shield app for external Android devices will display an error message when first started: No configuration ID
- As long as this message is displayed, the app cannot be activated
- To add a configuration ID, click Settings see below for more information
Cloud Shield can be activated or deactivated via the button
Error messages and notes are also displayed
With the button Settings the settings are displayed

Per Benachrichtigung pausieren

notempty

New as of: 1.3.0

Die Cloud Shield-App lässt sich über die Android-Benachrichtigung pausieren. Damit dies genutzt werden kann, sind folgende Schritt notwendig:

Falls diese Funktion noch nicht aktiviert wurde, wird beim Aktivieren von Cloud Shield ein PopUp-Fenster eingeblendet
In diesem PopUp-Fenster wird nach der Erlaubnis, bzw. nach der Bestätigung gefragt, ob die App per Benachrichtigung pausiert werden darf
Über Einstellungen erfolgt eine Weiterleitung auf Wecker und Erinnerungen
Dort wird für die Cloud Shield-App Erlauben, Wecker und Erinnerungen einzurichten aktiviert

Dann kann die Cloud Shield-App über die Benachrichtigung mit pausieren bis morgen bis 05:00 Uhr am nächsten Tag pausiert werden.
Die App kann entweder über den Startbildschirm oder über die Benachrichtigung mit Jetzt fortsetzen wieder aktiviert werden.

Settings

Tenant Domain:

123456.sms

Displays the associated tenant

Profile name:

TTT-Point DNS

Displays the profile name of the Cloud Shield profile used

exclude SSIDs

This can be used to exclude certain SSIDs from the Cloud Shield settings
This is only possible with the currently connected SSID
Excluded SSIDs are listed
If an excluded SSID is to be deleted again, this is done via the icon button

Extended

Displays advanced setting options

Help

A direct redirect in the device browser to this Wiki article

Imprint

Displays the imprint with the contact details

Privacy policy

Displays the privacy policy

EULA

Displays the end user agreement

Open source licenses

Displays the licenses of the open source programs used

Logs

Displays the Log entries

Extended

Use system colors

If is activated, the system colors of the Android device are used

Use HTTP3

When activated , HTTP3 is used, which improves the general performance of the app

UDP is used for this, therefore port 443 must be enabled for UDP on the firewall used

Add tile to quick settings

Add

This button adds a Cloud Shield tile in the quick settings, allowing to switch the DNS service on and off

Logs

Activate logging

Logging is activated when is activated. This may result in performance restrictions.

Search in logs

You can search for log entries. The search filter All is preselected

All Service Info Warning Error Fatal In detail

Delete

Deletes all log entries

Forward

Forwards the log as a .csv file

Downloaden

Download the log as a .csv file

Activation for external devices

A configuration ID is required so that the Cloud Shield app can be used on external Android devices

Select the desired profile of type External devices in the Securepoint portal under Cloud Shield Profile
Click on the Configuration: button display on its profile tile and switch to the Cloud Shield App tab in the dialog window
Open the Cloud Shield app and click Settings

Either

the QR code from the dialog window is scanned with the app's QR scanner
- QR scanner of the app can be called up via the button at Configuration ID

Or

The configuration ID displayed in the abc123 dialog box is entered in Configuration ID

Optional a name can be entered in device name (optional)
Via the button Save the configuration ID is saved

Activation for external MDMs

If an Android device is integrated in another MDM, i.e. not in Securepoint MDM, it is still possible to use the Cloud Shield app for this device.

Prerequisite:' The external MDM has a configuration IDExternal-Config-ID

Download the Cloud Shield app from Google Play Store.
In the app, click Settings
In Configuration ID , enter the External-Config-ID
The configuration ID of the external MDM
Via the button Save the External-Config-ID is saved

After successful saving, the app can be activated and is ready for use

App settings for devices in external MDM

notempty

Under Settings the following is no longer possible after a successful save:

The Configuration ID field can no longer be edited
The QR code scanner in the configuration ID field is deactivated
The device name (optional) field is hidden