What I miss in this article in using MDM to harden an iOS devices in the first place. Eg. you can prevent the ability to make backups [0] diminishing that as a

What I miss in this article in using MDM to harden an iOS devices in the first place. Eg. you can prevent the ability to make backups [0] diminishing that as a route to exfiltrate information. Secondly an always-on VPN [1] to a fixed IP address prevents network information leakage from the moment the device is turned on the first time. A quick search resulted in these two links but I didn't hit a comprehensive guide, other than Apples MDM docs, combining this travel guide combined with iOS MDM hardening. [0] https://community.rapid7.com/community/infosec/blog/2015/11/26/reduced-annoyances-and-increased-security-on-ios-9-a-win-win https://community.rapid7.com/community/infosec/blog/2015/11/... [1] http://www.howtogeek.com/218851/how-to-enable-always-on-vpn-on-an-iphone-or-ipad/ http://www.howtogeek.com/218851/how-to-enable-always-on-vpn-...