- I don't care if the company knows I'm using a private VPN (this is allowed and confirmed with the IT department). My only concern is if the company knows I visited nba.com (for example).
- On iOS, I think the only demon/background monitoring is the "device management"? So they can only inject the TLS certificates
- I'm not sure for the macOS if they pre-installed software to record the keystroke or the web requests before sending out via OpenVPN.
- I am free to uninstall and install any browser so the Chrome/Firefox is not modified or customized by the company.
- DNS might be another issue but I'm planning to set up a personal DNS server to handle that.
- From the company policy, we are allowed to watch games and even play PUBG/LOL/CSGO using the company laptop. So there is no policy concern.
I'm using the company laptop (MacBook Pro with macOS 10.13) and iPhone (iOS11). I am aware everything could be censored when I'm on the company WiFi. Due to the device management (at least on iOS) and HTTPS certificate pre-installation, I think the company can also know every web request even I'm using the laptop at home.
So I'm using the personal VPN software (openVPN) whenever I'm not working. (For sure I'm using the company VPN when working and accessing the codebase, which is not in the scope of this question) My assumption is my personal browsing behavior over personal VPN should be protected and not visible to the employer.
Do I need any other steps to hide my behavior?
nba.com? If policy allows, worry not. If it doesn't then use your own private computer.