Apple iOS and MacOS have a feature called Screen Time that allows users to monitor and manage the amounts of time spent on individual apps. Because this allows for some types of users to put limits on when a program can run, it has created the unintended ability to disable Umbrella protection.
This issue affects the following:
• MacOS (Catalina 10.5 and above)
• iOS (version 12 and above)
• Umbrella Roaming Client
• AnyConnect Umbrella Roaming Security Module
The current solution is to disable Screen Time through the MDM used to deploy Umbrella or on each device.
Apple documentation for disabling Screen Time on macOS can be found here.
Will Umbrella be able to block this in the future?
Cisco engineers are working with Apple to see if there are any other ways to prevent this from occurring. We do not have an ETA for when we will have an answer from Apple at this time.