Configuration Cloud Shield

Profile configuration in the Cloud Shield

Last adaptation to the version: 2.12 (12.2025)

New:

Hinweis wird eingeblendet, wenn keine VPP-Lizenz vorliegt

Cloud Shield can be activated even if the device is integrated into ASC

notempty

This article refers to a Beta version

Further information is displayed here:

Cloud Shield

Caption

Value

Description

Cloud Shield settings

Activate Cloud Shield

Activate Cloud Shield with this profile. This allows the profile to be linked with a Cloud Shield profile

If Cloud Shield is active , enable Security under Security / VPN (link to the wiki article) cannot be activated at the same time
If enable Security under Security / VPN is activated, Cloud Shield will automatically be deactivated and cannot be reactivated
For profiles created before version 2.3, where both Enable Security and Cloud Shield are active, these buttons will be displayed as inactive
This can be resolved by removing one of the two apps under Applications

If the iOS/iPad device is integrated into a VPN configuration (ASC), Cloud Shield can still be used if

split DNS is used in the VPN configuration (ASC).
notempty

New as of: 2.12

A corresponding message will be displayed if no VPP license is available: To use the Cloud Shield feature, you need a VPP license for the Securepoint Cloud Shield app from Apple Business Manager

Profile

TTT-Point DNS

Select Cloud Shield profile whose Cloud Shield configuration should be used.

The profile must be created in advance in the Cloud Shield Profile menu item, see the following Wiki article.

Name

Device Custom name

Choose which attribute should be used as the device name to identify the devices in Cloud Shield statistics and logs

Not specified	Do not set a device name. This means the device cannot be identified in the statistics and logs.
Device Custom name	Uses the default device name as device name
Device alias	Uses the device alias as the device name
Device ID	Uses the device ID as the device name
Username	Uses the assigned username as devicename

Install CA for block page

When enabled the CA certificate for the block page is installed on the device, so that no certificate warnings are shown when a page is blocked.