Lookout for Work iOS 5.5 and higher features a forced activation option for the app. With this setting enabled, an MDM administrator pushes a VPN profile to managed iOS devices as part of the activation process. The on-device VPN blocks traffic when a device attempts to connect to a site via HTTP (HTTPS traffic is permitted), until the device user opens Lookout for Work.

In some cases, users may have cached sites on their device that default to HTTPS access even when entering the site's HTTP address in the search or navigation bar. The VPN does not block this traffic.

Supervised devices receive a notification alerting them to the activation requirement. All devices see the following page when Lookout blocks traffic: https://activate.lookout.com/activate.html

Upon activating Lookout, users see the following prompt confirming that internet access has been restored:

If a user uninstalls Lookout for Work prior to activation, HTTP traffic remains blocked on the device until they either reinstall and activate Lookout for Work, or remove the VPN profile from their device.