Introduction
This document describes how to prevent the Apple Screen Time application from disabling Umbrella protection.
Prerequisites
Requirements
There are no specific requirements for this document.
Components Used
The information in this document is based on Umbrella Roaming Client.
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.
Overview
Apple iOS and macOS have a feature called Screen Time that allows users to monitor and manage the amounts of time spent on individual apps. Because this allows for some types of users to put limits on when a program can run, it has created the unintended ability to disable Umbrella protection.
This issue affects these Apple software versions and Cisco products:
- macOS (Catalina 10.5 and above)
- iOS (version 12 and above)
- Umbrella Roaming Client
- AnyConnect Umbrella Roaming Security Module
Solution
You must disable Screen Time through the MDM used to deploy Umbrella or on each device.
Read more in the Apple documentation for disabling Screen Time on macOS: Turn off Screen Time on your Mac