dashidB

I did some work on locking down an Android tablet, found it quite hard to do. With CDNs etc in play, the IP ranges that need to be opened are quite vast and generic (i.e. lots of cloud providers that host half the Internet).

I used Squid HTTP proxy for URL inspection, but still, many generic domains being connected to. And I found whether an app, including some Google system ones didn’t always respect the device’s proxy settings and would simply fail.

For TVs, I’ve kinda gone meh, and isolated them from other devices, but given them Internet access.