Content Filters on devices without family controls authorisation.

Question

Created 2w

Replies 4

Boosts 0

Participants 2

I’m working on an iOS parental-control app that needs to block specific network traffic (e.g. certain domains or URLs). We’ve already obtained the Family Controls entitlement (since our app is explicitly a parental-control solution), but we do not use MDM to supervise devices. In testing, our NEFilterDataProvider extension only activates when the device is enrolled under a managed Family Controls profile. I am aware that we can use a PacketTunnel to achieve this but i was wondering if there is any simpler solution to this?

Thanks for you time!

Answered by DTS Engineer in 841448022

I presume you’ve seen TN3134 Network Extension provider deployment. If not, I recommend that you start there.

I am aware that we can use a PacketTunnel to achieve this

To be clear, DTS doesn’t support folks using a packet tunnel provider as a content filter. See TN3120 Expected use cases for Network Extension packet tunnel providers.

Given that you’re building a parent controls app, the Screen Time case described in TN3134 is available to you. That technote has a list of steps required to get this working. Are any of them showstoppers for you?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Boost

Answer 1

DTS Engineer OP

Apple

2w

Recommended

I presume you’ve seen TN3134 Network Extension provider deployment. If not, I recommend that you start there.

I am aware that we can use a PacketTunnel to achieve this

To be clear, DTS doesn’t support folks using a packet tunnel provider as a content filter. See TN3120 Expected use cases for Network Extension packet tunnel providers.

Given that you’re building a parent controls app, the Screen Time case described in TN3134 is available to you. That technote has a list of steps required to get this working. Are any of them showstoppers for you?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 2

naviz OP

2w

Many of our users have their children using iOS devices and the parent themselves not using iOS. So the child devices will not be a part of family controls. And as far as what i have read and understood is the Content filter network extension doest't work without the device being under family controls authorisation. So i am wondering if there is any way to provide this functionality without family controls?

0

Answer 3

DTS Engineer OP

Apple

2w

So i am wondering if there is any way to provide this functionality without family controls?

I can’t really offer advice beyond the docs that I’ve referenced:

TN3120 explains that DTS doesn’t support folks trying to implement content filters using a packet tunnel provider.
TN3134 explains the three ways to use content filter on iOS: supervised device, Screen Time, and per-app on a managed device.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0

Answer 4

DTS Engineer OP

Apple

7h

If you haven’t already watched it, I recommend that you check out WWDC 2025 Session 234 Filter and tunnel network traffic with NetworkExtension, which introduces a new URL Filter provider with fewer deployment restrictions.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0