Skip to main content

A Clearer Device Integrity Policy in Vylos 1.4.1

Jacky LiangJacky Liang

Vylos 1.4.1 now describes its managed device-tampering response as Device Integrity. The broader wording better reflects what the policy evaluates: signs that iOS or the app runtime has been modified, rather than one particular modification technique.

A New Canonical Managed Key

Administrators can enable the policy with the new Managed App Configuration key:

xml
<key>enforceDeviceIntegrity</key>
<true/>

The existing blockJailbrokenDevices key remains supported as a deprecated fallback, so current deployments continue working during the transition. When both keys are present, enforceDeviceIntegrity takes precedence.

There is no emergency migration requirement. Add and validate the new key during a normal configuration update, then remove the legacy key when every assigned configuration uses enforceDeviceIntegrity.

The Protection Behavior Is Unchanged

This release changes the customer-facing terminology and configuration key, not the underlying integrity checks or fail-closed response.

On iOS, when the managed policy is enabled and the device does not pass the integrity evaluation, Vylos:

  • replaces the app interface with a full-screen policy notice;
  • disconnects active Vylos tunnels;
  • disarms On-Demand activation;
  • rejects reconnect attempts while the policy block remains active; and
  • preserves tunnel configurations, keys, and app settings for recovery.

The policy remains specific to iOS and has no effect on macOS or visionOS.

Clearer Language Throughout Vylos

The Managed Configuration pane, policy screen, accessibility labels, localizations, and current documentation now use Device Integrity consistently. Existing release posts retain the terminology and key names that were accurate when they were published.

The new Device Integrity Policy guide explains configuration, precedence, blocking behavior, and data preservation. Requests to the former policy URL redirect to the new guide.

For a complete Managed App Configuration example, see Managed App Configuration and Restriction Keys.