Category filter

How to Set up Web Content Filtering for Mac?

Web content filtering enables your organization to regulate access to websites. Organizations may have to restrict access to certain websites due to compliance regulations, bandwidth usage, or other concerns. You can configure policies across your devices, effectively preventing users from accessing these URLs from the Safari browser.

Note:


This feature is supported only on Ultra pricing plans.

Configure Web Content Filtering

  1. Go to Policies tab from the Hexnode MDM dashboard.
  2. Continue with an existing policy or create a new one by clicking on New Policy.
  3. Select Web Content Filtering from macOS > Security. Click Configure.
  4. Next, choose the Filter Type.
  5. Configure the necessary settings for web content filtering.

Filter Type 1: If you have chosen Blacklist as the filter type,

Blacklist Web URLs

Blacklisting a URL prevents the users from accessing any page on that website.

To blacklist web URLs, specify the URL to be blacklisted in the text field and click on Add.
.

Notes:

  • URLs should start with http://, ftp://, or https://.
  • You can blacklist multiple URLs by separating them using comma or semi-colon.

When a user tries to visit the blacklisted URLs, they will be locked out of the page with a warning message.

blacklisting website URLs on macOS devices with hexnode mdm
 
blacklisting a website with hexnode mdm

Blacklist by Content

The option Blacklist by Content is enabled by default for macOS devices and there is no provision to disable it. This option restricts the explicit content automatically. However, admin can allow the users to access those websites by whitelisting them.

This feature is useful when you may need to provide access to websites that are blocked based on content type. Since this is an automatically enabled restriction, you will have to provide access to these websites exclusively.

To whitelist an exceptional URL,

Enter the URLs in the text field and click Add.

Notes:

  • URLs should start with http://, ftp://, or https://.
  • You can blacklist multiple URLs by separating them using comma or semi-colon.

When a user tries to visit sites with explicit content, they will be locked out of the page with a warning message.

blacklisting a website with web content filtering on hexnode mdm

Fig. 1: The main URL being blacklisted returns an error page.
 

Regulating access to content on Mac by blacklisting websites with hexnode mdm

Fig. 2: An exceptional whitelisted link in a blacklisted domain is given access.
 
Note:

Usually when you blacklist a URL in web filtering, it blocks the access to the website in the browsers as well as the corresponding app.

Filter type 2: If you have chosen Whitelist as the filter type,

Whitelist Web URLs

Whitelisting blocks the users from accessing any of the websites except the whitelisted ones.
To whitelist web URLs,

Enter the URLs in the text field and click Add.

Notes:

  • URLs should start with http://, ftp://, or https://.
  • You can whitelist multiple URLs by separating them using comma or semi-colon.

For URL Whitelisting, when the user tries to visit any other site, they are shown a warning along with the list of whitelisted sites.

configure whitelisted web content filter on mac with hexnode mdm

Associate the policy with macOS devices

If you have not saved the policy yet,

  1. Go to Policy Targets > +Add Devices. Alternatively, you can choose to associate the policy to either device groups, users, user groups or domains from the left pane.
  2. Choose the target device/devices.
  3. Click Ok. Click Save.

If you need to add more devices, click on +Add Devices again and repeat the above steps. This won’t affect your previous selections.

If you are on a page that lists the policies,

  1. Select a policy.
  2. From Manage drop-down, choose Associate Targets.
  3. Choose the target devices and click Associate.
Exception:


Note that web content filtering restricts the users from accessing specific websites on the Safari browser only. The user may still access the given URLs from the device using other browsers.

  1. When you want the users to access only the Safari browser, additionally perform app blacklisting over unnecessary browser apps to restrict them on the devices.
  2. On the contrary, you can permit different browser apps on a Mac while restricting access to certain websites with the help of App Configurations. When you create the XML file, include the key attribute – URLBlocklist with the list of websites to restrict. Further, upload this file to generate app configurations for other browser apps.

  • Managing Mac Devices