KyberGate supports three filtering modes. Choose the one that matches your deployment.
Device-Based Filtering
The default mode. Policies are applied based on which device is accessing the internet. Each device is identified by its UDID (from the MDM profile) or IP address.
Best for: Schools where devices are shared between students (carts, labs).
User-Based Filtering
Policies are applied based on the logged-in user. Requires Google Workspace integration. KyberGate identifies users through their Google email in the PAC URL or via Workspace sync.
Best for: 1:1 programs where each student has their own login.
Both (Hybrid)
Combines device and user policies. Device policies set a baseline, and user policies override where applicable. This is the most flexible but requires both MDM and Workspace integration.
Best for: Schools with mixed deployment (shared carts + 1:1 programs).
Changing Your Mode
Go to Settings > General and change the Filter Mode dropdown. Changes take effect within 60 seconds for all devices.