Corral

Corral blocks unwanted websites on the Android devices your organisation manages: advertising, tracking, phishing, malware and the categories your administrator chooses. It filters domain names on the device itself, before any connection is made. No lookup is sent to an outside filtering service. Corral is developed by Appaloosa. FOR MANAGED FLEETS ONLY Corral is the companion app of Appaloosa, an Android Enterprise mobile device management (MDM) solution whose device agent is already published on Google Play. Corral is installed by the MDM and configured through Android Enterprise managed configuration. It requires a fully managed device (device owner) or a company-owned device with a work profile. It has no settings screen and no account of its own, and it stays inactive on a phone that is not managed. WHAT IT DOES • Blocks by domain name. Every DNS request from the managed scope is checked against the blocklists before it goes out. A blocked domain does not resolve, so the connection never happens. • Ready-made lists. Five protection levels, from ads only to maximum, and about thirty add-on lists (gambling, social networks, adult content, threats, manufacturer telemetry). Lists are updated daily. • Your own lists. Domains to block or to always allow, entered in your MDM console. • Resists bypasses. Encrypted DNS (DoH, DoT) from browsers and apps is blocked, including by IP address. The VPN is always-on and locked by the MDM. There is no switch for the user. • Never locks the organisation out. The services needed by the MDM, Google Play and push notifications always stay reachable, whatever the lists say. • Administrator code to pause filtering on the spot, an event log in the app, and a diagnostic report the user can send to support in one tap. WHAT THE USER SEES A screen that says Protected, the number of blocked requests and the latest events. The user cannot turn it off or uninstall it. If a phone setting interferes with protection (Android Private DNS), the app explains what to change. PRIVACY Everything happens on the device. Only the domain names of DNS requests and the destination addresses of connections are examined. Logs stay in the app, are deleted after seven days and are sent to no one. The only network exchange of Corral's own is downloading its blocklists from the Appaloosa mirror. WHAT IT IS NOT Corral is a DNS filter, deliberately simple. It does not inspect content, does not decrypt traffic, does not detect malware on the device and has no central dashboard. Corral uses the Android VpnService API to filter DNS traffic locally. It does not route traffic through any remote server.