Blue Shield Umbrella is a new endpoint security solution providing protection for organizations. It brings the power of Blue Shield Artificial Intelligence features to Android's mobility space.
 
For our support, please contact: technik@blue-shield.at or +43 732 21 19 22

Privacy Policy:
https://www.blue-shield.at/app.html

Technical details:
USE OF android.net.VpnService:
The Android Mobile Agent accesses the android.net.VpnService of the Android Platform. This service class is used to establish a split tunnel and forward the DNS traffic to the Blue-Shield Mobile servers to block malicious websites.

USE OF LOCATION PERMISSIONS:
1.) android.permission.ACCESS_COARSE_LOCATION
2.) android.permission.ACCESS_FINE_LOCATION
The app needs to have the location permission as we need to read the SSID of the network at runtime.
The reason for this is as follows:
The app creates a local VPN to encrypt DNS traffic over a split tunnel and send it to the Blue-Shield Mobile servers. These servers answer the DNS request and block domains that may contain malware or phishing code.
As a company, however, I would like the agent to shut down in my company network, because I want to use the local DNS server to access company homepages. The company network is identified via SSIDs, which the user can store in his configuration.

SSIDs can only be read out with the Location Permission, as it says here:
https://developer.android.com/reference/android/net/wifi/WifiInfo

Some devices needed both permissions (1. & 2. ) to allow us to the read the connected SSID.