Category filter

Deploy custom configuration profile to configure Global HTTP Proxy on iOS devices

Organizations may configure a Global HTTP Proxy server on their devices to redirect the entire HTTP network traffic through the specified proxy server. This is done to filter and inspect incoming and outgoing HTTP traffic for potential threats, such as malware, viruses, or malicious websites. It can also help IT admins in content filtering, bandwidth management, network logging, and meeting company compliance regulations. Implementing proxy settings on individual devices can be a very cumbersome process. But now, with Hexnode, you can deploy a custom configuration profile remotely to configure Global HTTP Proxy server on your iOS devices with Hexnode’s Deploy Custom Configuration feature.


The sample configuration profiles provided below are created using various profile creator applications.

Configuration profile to configure Global HTTP Proxy on iOS devices


The device should be running on iOS 6 or later versions and must be supervised.

Let us look at the different properties that this configuration profile offers:

  • ProxyServer: Enter your server’s network address here. Do note that this property is mandatory.
  • ProxyPassword: Enter the password used to authenticate to the proxy server.
  • ProxyServerPort: Enter the proxy server’s port number here. Take a note that this property is mandatory
  • ProxyUsername: Enter the username used to authenticate to the proxy server.
  • ProxyType: Here, you can define the proxy type, whether it is manual or automatic. For a manual proxy type, the profile contains the proxy server address, including its port, and optionally a username and password. For an auto proxy type, you can enter a PAC URL.
  • ProxyPACURL: Enter the URL of the PAC file that defines the proxy configuration when the ProxyType is set to automatic. Do note that starting from iOS 13, only URLs that begin with ‘http://’ or ‘https://’ are allowed.
  • ProxyCaptiveLoginAllowed: This property is of a boolean type. If true, allows the device to bypass the proxy server to display the login page for captive networks. Set this to true to avoid the device from asking for authentication to the proxy server.
  • ProxyPACFallbackAllowed: This property is of a boolean type. If true, allows connecting directly to the destination if the proxy autoconfiguration (PAC) file is unreachable.

  • To create and customize configuration profiles, you can use tools like Apple Configurator, Profile Manager or manually create them using text editors.
  • Use non-encrypted .mobileconfig, .xml, or plist files to deploy profiles across devices.
  • Ensure that you do not associate conflicting configurations with the devices.
  • Use wildcards to fetch key values from the portal.
  • It is recommended to manually validate the configuration profile on a system before executing it in bulk.
  • Hexnode will not be responsible for any damage/loss to the system on the behavior of the configuration profile.

  • Configuration Profile Repository