Apple Device Policy
Back to Explorer
GitHub YAMLApple Docs

Global HTTP Proxy (com.apple.proxy.http.global)

com.apple.proxy.http.global

The payload that configures a global HTTP proxy.

iOS(6.0)macOS(10.9)tvOS(9.0)visionOS(2.0)
Branch: release

Settings (8)

SettingTypeRequiredDefaultManual InstallSupported OS
Proxy type
ProxyType
The proxy type. For a manual proxy type, the profile contains the proxy server address, including its port, and optionally a user name and password. For an auto proxy type, you can enter a PAC URL.
stringoptionalManual
✓Yes
iOS (6.0+)macOS (10.9+)tvOS (9.0+)visionOS (2.0+)
Proxy server
ProxyServer
The proxy server's network address. The device requires this if `ProxyType` is set to `Manual`, and ignores it if `ProxyType` is set to `Automatic`.
stringoptional—
✓Yes
iOS (6.0+)macOS (10.9+)tvOS (9.0+)visionOS (2.0+)
Proxy server port
ProxyServerPort
The proxy server's port number. The device requires this if `ProxyType` is set to `Manual`, and ignores this if `ProxyType` is set to `Automatic`.
integeroptional—
✓Yes
iOS (6.0+)macOS (10.9+)tvOS (9.0+)visionOS (2.0+)
Proxy username
ProxyUsername
The user name used to authenticate to the proxy server. The device only uses this if `ProxyType` is set to `Manual`, and ignores it if `ProxyType` is set to `Automatic`.
stringoptional—
✓Yes
iOS (6.0+)macOS (10.9+)tvOS (9.0+)visionOS (2.0+)
Proxy password
ProxyPassword
The password used to authenticate to the proxy server. The device only uses this if `ProxyType` is set to `Manual`, and ignores it if `ProxyType` is set to `Automatic`.
stringoptional—
✓Yes
iOS (6.0+)macOS (10.9+)tvOS (9.0+)visionOS (2.0+)
Proxy PAC URL
ProxyPACURL
The URL of the PAC file that defines the proxy configuration. Starting in iOS 13 and macOS 10.15, only URLs that begin with `http://` or `https://` are allowed. This is only used if `ProxyType` is set to `Automatic`, and is ignored if `ProxyType` is set to `Manual`.
stringoptional—
✓Yes
iOS (6.0+)macOS (10.9+)tvOS (9.0+)visionOS (2.0+)
Proxy PAC fallback allowed
ProxyPACFallbackAllowed
If `true`, allows connecting directly to the destination if the proxy autoconfiguration (PAC) file is unreachable.
booleanoptionalfalse
✓Yes
iOS (7.0+)
Proxy bypass allowed
ProxyCaptiveLoginAllowed
If `true`, allows the device to bypass the proxy server to display the login page for captive networks.
booleanoptionalfalse
✓Yes
iOS (7.0+)

Apple MDM & DDM Policy Explorer

Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.

Reference: policy categories & common keys

Policy categories

  • Configuration Profile
  • Declarative Configuration
  • Declarative Activation
  • Declarative Asset
  • Declarative Management

Common policy keys

  • com.apple.wifi.managed – Wi-Fi network configuration
  • com.apple.vpn.managed – VPN configuration
  • com.apple.applicationaccess – App and feature restrictions
  • com.apple.security.pkcs1 – Certificate (PKCS#1) payload
  • com.apple.security.pkcs12 – Identity certificate (PKCS#12) payload
  • com.apple.security.scep – SCEP certificate enrolment
  • com.apple.mail.managed – Mail account configuration
  • com.apple.eas.account – Exchange ActiveSync account
  • com.apple.MCX – Managed Client (macOS) preferences
  • com.apple.MCX.FileVault2 – FileVault 2 disk encryption
  • com.apple.dock – macOS Dock configuration
  • com.apple.screensaver – Screensaver configuration
  • com.apple.loginwindow – macOS login window configuration
  • com.apple.systempolicy.managed – Gatekeeper / system policy
  • com.apple.systempreferences – System Preferences pane restrictions
  • com.apple.SoftwareUpdate – Software update behaviour
  • com.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)
  • com.apple.notificationsettings – Per-app notification settings
  • com.apple.webcontent-filter – Web content filter
  • com.apple.dnsSettings.managed – DNS settings (DoH / DoT)
  • com.apple.relay.managed – Network relay configuration
  • com.apple.extensiblesso – Extensible Single Sign-On
  • com.apple.configuration.passcode.settings – DDM: passcode policy
  • com.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software update
  • com.apple.configuration.services.configuration-files – DDM: service configuration files
  • com.apple.configuration.management.status-subscriptions – DDM: status subscriptions
  • com.apple.activation.simple – DDM: simple activation predicate
  • com.apple.management.organization-info – DDM: organization information