# Web Content Filter

With an increased number of threats, attacks, scams across the internet, it is the foremost task of the IT admin to establish a protected workspace. Managing web content of your corporate mac devices is made simple with MDM. You can manage your web traffic by configuring a third party plug-in a web content filter profile and apply to your devices.

**Note:** This is applicable for devices above macOS version 10.15. It is recommended to configure a **[System Extensions policy](https://www.manageengine.com/mobile-device-management/help/profile_management/mac/mdm_mac_system_extensions.html)** and **[PPPC](https://www.manageengine.com/mobile-device-management/help/profile_management/mac/mdm_mac_pppc.html)** along with this plug-in filter.

## Configuring Plug-ins

| Profile Specification | Description |
|---|---|
| Filter name | Provide a name for your plug-in. |
| Plugin bundle id | Fill the plugin bundle id and not the app bundle id.<br><br>**_Ex: com.crowdstrike.falcon.App_** |
| Filter type | Choose the type of the filter as socket if you wanted to manage the application traffic or choose packet if you want to manage the network packet traffic. |
| Socket Bundle identifier | Enter the bundle identifier of the socket.<br><br>**_Ex: identifier "com.crowdstrike.falcon.Agent"_** |
| Socket Designated identifier | Enter the designated identifier of the socket.<br><br>**_Ex: identifier "com.crowdstrike.falcon.Agent" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.011] = "X9E956P446"_** |
| Packet Bundle identifier | Enter the bundle identifier of the packet.<br><br>**_Ex: com.checkpoint.fw.filter_** |
| Packet Designated identifier | Enter the designated identifier of the packet.<br><br>**_Ex: anchor apple generic and identifier "com.checkpoint.fw.filter" and (certificate leaf[field.1.2.840.113635.100.6.1.9] / exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf [field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = TZ3UEPFYKD)_** |
| Filter grade | Choose the filter grade as firewall, if you wanted to filter the network level traffic or else choose inspect if you wanted the filter grade something below network level. |
| Filter webkit | If you choose to filter webkit, you can manage the browser traffic. |
| Vendor configuration | There might be certain additional functions offered by the vendors to manage the web content. Contact the web content filter vendor to know what functions can be performed. |

**Note:** There are some advanced settings which are optional and can be enabled when specified by the vendor.