SkieCan my child use a VPN to get around the filter, and how do I stop it?
On a Skie-managed device, no. VPN setup in Android settings is blocked, VPN apps, proxy apps and DNS changer apps are always blocked, and the Play Store can be hidden. So the usual routes, an app or a manual VPN, are closed. A bypass attempt is reported on the dashboard.
VPNs are the most common way children get around a filter. A friend shares an app name, they install it, and the filter sees only encrypted traffic going somewhere else.
To stop this, two doors need closing. The first is the app. Skie blocks VPN, proxy and DNS changer apps whatever an app list says, and blocks installs from unknown sources, so a downloaded file will not install either. The install guard removes any app installed after setup that you did not allow.
The second is the manual route, adding a VPN in Android settings. Skie blocks VPN setup. It also blocks the Private DNS setting, so the child cannot set their own DNS, and blocks network reset and mobile network settings changes.
Browsers matter here as well. Many VPN browsers are in the list of more than 50 alternative browsers that are always blocked, and Chrome's incognito is blocked.
If something odd happens, a bypass of the filter is reported, and the compliance check will show a protection that has dropped. The device tries to correct it itself, and you see it on the dashboard.
We do not claim that no child anywhere could ever find a route. We do say Skie is built to be tamper-proof, and that you are alerted down to the exact device.
Tip: ask your child directly. Children who feel understood are less likely to hunt for workarounds.