How to set up Web Content Filtering for Mac?

Web content filtering enables your organization to regulate access to websites. Organizations may have to restrict access to certain websites due to compliance regulations, bandwidth usage, or other concerns. You can configure policies across your devices, effectively preventing users from accessing these URLs from the Safari browser. Read on to find out how you can implement web content filtering on your macOS devices through the Hexnode UEM portal.

Configure Web Content Filtering on Mac

Hexnode UEM offers two features through which you can apply web content filtering on your devices:

• Blocklist/Allowlist
• Plug-ins

1. Blocklist/Allowlist

   Here’s how you configure the blocklist/allowlist feature,

   1. Go to the Policies tab from the Hexnode UEM dashboard.
   2. Continue with an existing policy or create a new one by clicking on New Policy.
   3. Select Blocklist/Allowlist from macOS > Web Content Filtering. Click Configure.
   4. Next, choose the Filter Type.
   5. Configure the necessary settings

   The following elements can be restricted through the blocklist/allowlist feature on a device through the Hexnode portal:

   • Websites

     Administrators can block access to websites by providing the URLs using Blocklist Web URLs or Allowlist Web URLs filter settings. The web content filtering feature helps admins ensure that users cannot access any sites that may disrupt productivity or expose them to any risks. Under Blocklist Web URLs filter, the URLs of the websites to be blocked are specified. Allowlist Web URLs filter allows access to only the websites that are specified explicitly and will block access to all others by default.

   • Explicit/Adult Content

     Websites containing explicit content are automatically blocked by Hexnode UEM through the option Blocklist by Content which is enabled by default. The access to these websites is restricted along with the other blocked sites and thus maintain a safe browsing environment. The admin can give the users access to any of those websites, if necessary, by allowlisting them and thereby bypassing the auto-filter.

   • Clear History

     On applying web content filtering on macOS devices, the user will be prevented from clearing the browsing history in the Safari browser. The Clear History option under the History tab of the browser will be disabled.

   • Private Browsing

     Private browsing will be disabled by default. The user will be unable to open a Private Window for a private browsing session in the Safari browser.

   Filter Type 1: If you have chosen Blocklist as the filter type,

   Blocklist Web URLs

   Blocklisting a URL prevents the users from accessing any page on that website.

   To blocklist web URLs, specify the URL to be blocklisted in the text field and click on Add.
   .

   Notes:

   • URLs should start with http://, ftp://, or https://.
   • You can blocklist multiple URLs by separating them using comma or semi-colon.

   When a user tries to visit the blocklisted URLs, they will be locked out of the page with a warning message.

   
    
   

   Blocklist by Content

   The option Blocklist by Content is enabled by default for macOS devices and there is no provision to disable it. This option restricts the explicit content automatically. However, admin can allow the users to access those websites by allowlisting them.

   This feature is useful when you may need to provide access to websites that are blocked based on content type. Since this is an automatically enabled restriction, you will have to provide access to these websites exclusively.

   To allowlist an exceptional URL,

   Enter the URLs in the text field and click Add.

   Notes:

   • URLs should start with http://, ftp://, or https://.
   • You can blocklist multiple URLs by separating them using comma or semi-colon.

   When a user tries to visit sites with explicit content, they will be locked out of the page with a warning message.

   
   

    

   
   

    
   Note:

   Usually when you blocklist a URL in web filtering, it blocks access to the website in the browsers as well as the corresponding app.
   

   Filter type 2: If you have chosen Allowlist as the filter type,

   Allowlist Web URLs

   Allowlisting blocks the users from accessing any of the websites except the allowlisted ones.
   To allowlist web URLs,

   Enter the URLs in the text field and click Add.
   

   Notes:

   • URLs should start with http://, ftp://, or https://.
   • You can whitelist multiple URLs by separating them using comma or semi-colon.

   For URL allowlisting, when the user tries to visit any other site, they are shown a warning along with the list of allowlisted sites.

   

   Note:

   
   Allowlisting takes precedence when deploying two contradictory Web Content Filtering policies, one blocklisting a URL and the other allowlisting the same URL.
   

2. Plug-ins

   Hexnode UEM allows you to enhance your web content filtering by integrating third-party plugins. These plugins enable advanced control over network traffic, ensuring a secure browsing experience.

   Follow the steps below to configure plug-ins in your macOS devices:

   1. Go to the Policies tab from the Hexnode UEM dashboard.
   2. Continue with an existing policy or create a new one by clicking on New Policy.
   3. Select Plug-ins from macOS > Web Content Filtering. Click Configure.

Associate the policy with macOS devices

If you have not saved the policy yet,

1. Go to Policy Targets > +Add Devices. Alternatively, you can choose to associate the policy to either device groups, users, user groups or domains from the left pane.
2. Choose the target device/devices.
3. Click Ok. Click Save.

If you need to add more devices, click on +Add Devices again and repeat the above steps. This won’t affect your previous selections.

If you are on a page that lists the policies,

1. Select a policy.
2. From Manage drop-down, choose Associate Targets.
3. Choose the target devices and click Associate.