Cloud Shield App for Android

Function of the Cloud Shield Android app

Last adaptation to the version: 1.4 (02.2026)

New:

You can prevent the app from being disabled
SSIDs can be excluded in the USP
You can disable the exclusion of SSIDs in the app
Apps can be excluded

Use of the app for devices in external MDMs
App can be paused via notification

notempty

This article refers to a Beta version

-

Prerequisite

At least Android version 8.1

Introduction

With the Securepoint Cloud Shield app for Android devices, all DNS requests from the Android device are routed via secure servers that block suspicious or malicious domains based on regularly updated filter lists
Requests are encrypted (DNS-over-TLS/HTTPS) to prevent tampering and eavesdropping attempts
Central distribution via Securepoint Mobile Device Management ensures that all smartphones are uniformly protected and that company guidelines for secure Internet use are adhered to
At the same time, tracking and data theft are reduced while connection speed remains optimized

Preparations

Devices in MDM

A profile of type Managed devices is available in the Securepoint Portal under Cloud Shield Profile . Further information on this can be found in the

following Wiki article

Select the desired Android profile under Mobile Security iOS/iPadOS Profiles . For more information, see

following wiki article

In the profile tab Cloud Shield select the option Enable Cloud Shield and under Profile select the Cloud Shield profile
The Cloud Shield app is then automatically installed on the Android devices with the corresponding Android profile
The Cloud Shield profile is applied to the Android devices

Devices without MDM / external devices

In the Securepoint Portal under Cloud Shield Profile there is a profile of the type External devices. Further information can be found in the

following Wiki article

Download the Cloud Shield app from the Google Play Store.

Cloud Shield Startscreen

The start screen of the Cloud Shield app for managed Android devices shows whether the app is active or inactive
Cloud Shield can be activated or deactivated via the button
Error messages and notes are still displayed
The settings are displayed using the button Settings

Hovern: MDM ⇄ external devices

Start screen of the app for MDM devices

Start screen of the app for external devices on first start without configuration ID

The start screen of the Cloud Shield app for external Android devices will display an error message when first started: No configuration ID
- As long as this message is displayed, the app cannot be activated
- To add a configuration ID, click Settings see below for more information
Cloud Shield can be activated or deactivated via the button
Error messages and notes are also displayed
With the button Settings the settings are displayed

Pause via notification

notempty

New as of: 1.3.0

The Cloud Shield app can be paused via the Android notification. To use this feature, the following steps are necessary:

If this feature has not yet been activated, a pop-up window will appear when you activate from Cloud Shield
This pop-up window will ask for permission or confirmation to pause the app via notification
Settings will redirect you to Alarms and reminders
There, activate Allow setting alarms and reminders for the Cloud Shield app

The Cloud Shield app can then be paused via the notification with Pause until tomorrow until 5:00 a.m. the next day.
The app can be reactivated either via the home screen or via the notification with Continue now.

Settings

Tenant Domain:

123456.sms

Displays the associated tenant

Profile name:

TTT-Point DNS

Displays the profile name of the Cloud Shield profile used

exclude SSIDs

This can be used to exclude certain SSIDs from the Cloud Shield settings
This is only possible with the currently connected SSID
Excluded SSIDs are listed
If an excluded SSID is to be deleted again, this is done via the icon button

Extended

Displays advanced setting options

Help

A direct redirect in the device browser to this Wiki article

Imprint

Displays the imprint with the contact details

Privacy policy

Displays the privacy policy

EULA

Displays the end user agreement

Open source licenses

Displays the licenses of the open source programs used

Logs

Displays the Log entries

Extended

Use system colors

If is activated, the system colors of the Android device are used

Use HTTP3

Installed apps or manually added packages can be excluded from Cloud Shield
[[Datei: ]]
In the list of installed apps, the desired apps can be selected and the selection can be confirmed via the button Apply changes
For manually added packages, the desired package name is entered and the selection is confirmed via the button Apply changes
After making changes, the Cloud Shield app must be restarted; a dialog box will inform you about this
notempty
New from USP version: 2.13
In Securepoint USP, under Device profile in the Cloud Shield tab, apps can be excluded for Cloud Shield under Exclude apps and these are also listed
- These apps are marked with a -icon and cannot be deactivated in the app
notempty
New from USP version: 2.13
If deactivating the app is not allowed, no more apps can be excluded in the app, and the button is then inactive
- Apps manually excluded in the app are protected again by the Cloud Shield app
  Excluded applications from USP remain excluded

notempty

New as of: 1.4

Logs

Activate logging

Logging is activated when is activated. This may result in performance restrictions.

Search in logs

All Service Info Warning Error Fatal In detail

Delete

Deletes all log entries

Forward

Forwards the log as a .csv file

Downloaden

Download the log as a .csv file

Activation for external devices

A configuration ID is required so that the Cloud Shield app can be used on external Android devices

Select the desired profile of type External devices in the Securepoint portal under Cloud Shield Profile
Click on the Configuration: button display on its profile tile and switch to the Cloud Shield App tab in the dialog window
Open the Cloud Shield app and click Settings

Either

the QR code from the dialog window is scanned with the app's QR scanner
- QR scanner of the app can be called up via the button at Configuration ID

Or

The configuration ID displayed in the abc123 dialog box is entered in Configuration ID

Optional a name can be entered in device name (optional)
Via the button Save the configuration ID is saved

Activation for external MDMs

If an Android device is integrated in another MDM, i.e. not in Securepoint MDM, it is still possible to use the Cloud Shield app for this device.

Prerequisite:' The external MDM has a configuration ID External-Config-ID

Download the Cloud Shield app from Google Play Store.
In the app, click Settings
In Configuration ID , enter the External-Config-ID
The configuration ID of the external MDM
Via the button Save the External-Config-ID is saved

After successful saving, the app can be activated and is ready for use

App settings for devices in external MDM

notempty

Under Settings the following is no longer possible after a successful save:

The Configuration ID field can no longer be edited
The QR code scanner in the configuration ID field is deactivated
The device name (optional) field is hidden