Field Name	Description
Organization	Enter the name of your organization. The Cloud service uses this information to know which policy to apply to each device.
Usage agreement	Select the end-user usage agreement users are asked to agree to when registering devices assigned to this profile. Here you can select from usage agreements uploaded on the General > End-user Settings screen (see End-user self service for more information).

Field Name	Description
Send traffic through the Websense cloud service via VPN	This option is enabled by default for both corporate and personal profiles. To protect devices with the TRITON Mobile Security system, you must leave this option as enabled, and you must enter a PAC file URL. (See below) Deselect this option to bypass security on devices with this profile. When VPN is disabled, user requests for data go directly to the Internet as unfiltered traffic. Tip: If you want to bypass security on user devices, but track Web usage for the user, enable VPN but clear the PAC file URL below. With no PAC file URL, the system doesn't know which policy to apply, so Web traffic is unfiltered.
Use a PAC file to apply your company Web policy	Select this box if you want devices with this profile to be protected by TRITON Mobile Security. If this box is deselected, all Web traffic is unfiltered, because the system doesn't know whose device is making the requests or what policy to apply. Neither security or productivity filters are applied. To enable filtering, you must also enter the PAC file URL (see below).
PAC file URL	Enter the URL of a Proxy Auto-Configuration (PAC) file to configure auto-proxy settings. This PAC file should be configured according to the Web security policy you want to enforce. For Cloud Security, copy the PAC file URL from the General tab for that policy. To get to this tab, go to Web Security > Policy Management > Policies, and click on the policy you want. For TRITON AP-WEB with the Web Hybrid module, retrieve it on the Hybrid User Identification page under Settings > Hybrid Configuration. Use a PAC file to specify the appropriate proxy for fetching a given URL and to specify exclusions (URLs that should not be accessed through the Websense Cloud Security proxy). For a description of PAC files, see What is a PAC file? If you leave this field blank, the system doesn't know which policy to apply, so Web traffic is unfiltered. For more information about the PAC file you should deploy, see the Help for your Web Security product.
Apply all Web policies	When selected, browser traffic from devices with this profile has all corporate Web security policies applied. This includes security filters (such as phishing and malware) and productivity filters (such as social networking). By default, only security filters are applied to browser traffic. Only security filters are applied to app traffic regardless of this setting.
Log all traffic	Select this option to log all Web requests from the user's devices. Disabling logging improves device performance. By default, logging is enabled for corporate profiles, but disabled for personal profiles. For more information about logging, see the Help for your Web Security product.

Field Name	Description
Require passcode on device	Select this option to require the user to configure a passcode to access the device.
Simple value	Select this option to allow users to choose passcodes containing ascending, descending, or repeating sequences.
Alphanumeric value	Select this option to require users to choose passcodes containing at least one letter.
Minimum code length	The minimum character length for a passcode.
Minimum number of non-alphanumeric characters	The minimum number of non-alphanumeric characters (not numbers or letters) allowed in the passcode.
Passcode expires after	Number of days before the user must choose a new passcode.
Auto-Lock (minutes)	Number of minutes a device can be idle before it is automatically locked.
Passcodes can be reused after	The number of unique passcodes that must be used before a previously used passcode can be used again.
Require passcode to unlock device after	Number of minutes a device can be locked without prompting the user for a passcode to unlock the device.
Maximum number of failed logon attempts	Number of incorrect password attempts allowed before the device is wiped of all personal data and restored to factory settings.

Field Name	Description
App installation	Select this option to allow the user to install apps from the iTunes Store on the device. Select Require Apple ID password for each install if you want users to authenticate with Apple before installing apps.
Camera	Select this option to allow the user to use the camera on the device. Select FaceTime to allow the user to use the FaceTime feature on the device.
Screen capture	Select this option to allow the user to use the screen capture feature on the device.
Automatic sync while roaming	Select this option to enable the device to automatically sync data while the device is roaming.
Voice dialing	Select this option to allow the user to use the voice dialing command feature to place calls on the device.
In-app purchases	Select this option to allow the user to make purchases in applications on the device.
Receive Passbook notifications while locked	Passbook is an iOS app that allows merchants to develop Passes to be stored in the user's Passbook. Select this option if you want to allow Passbook notifications to be displayed while the device is locked. This option is selected by default.
Multiplayer gaming	Select this option to allow the user to play multiplayer games in the Game Center application.
Addition of Game Center friends	Select this option to allow the user to add friends in the Game Center application.
Force encrypted backups	Select this option to require that backups of the device are encrypted.

Field Name	Description
YouTube	Select this setting to allow the user to use the YouTube app.
iTunes Store	Select this setting to allow the user to use the iTunes Store on the device.
Siri,	Select this setting to allow the user to use the Siri app. Select While device is locked to allow Siri usage when the device is locked.
Safari	Select this setting to allow the user to use the Safari Web browser on the device. Enable AutoFill - Select this setting to enable the AutoFill (auto populate form) feature in Safari. Force fraud warnings - Select this option to force the Safari fraud warning option to remain on. Enable JavaScript - Select this option to enable JavaScript in Safari. Block popups - Select this option to force the Safari block popups option to remain on. Accept cookies - Select when the device accepts cookies while browsing in Safari: Never, From visited sites (only from sites directly accessed), or Always.

Field Name	Description
Region	Select the region whose rating system you want to use.
Movies	Select which movies users with this profile can view.
TV shows	Select which TV shows users with this profile can view.
Apps	Select which apps users with this profile can use.
Allow explicit music and podcast downloads and purchases	Select this option to allow explicit music and podcasts (containing potentially offensive content) on the device.

Field Name	Description
Data backup	Select this option to allow users to back up data to iCloud.
Document sync	Select this option to allow users to sync documents to iCloud.
Photo Stream	Select this option to allow users to use Photo Stream to share photos with other Apple devices. If you disable this feature, Photo Stream photos will be erased from the user's device and photos from the Camera Roll will be prevented from being sent to Photo Stream. If there are no other copies of the photos, they may be lost.
Shared photo streams	When this option is selected, users can invite others to view their photo streams and can view photo streams shared by others.