Use Manage Blocklist to stop users from running apps and browser extensions you don't allow, such as Shadow IT apps found on your devices. You choose what to block, choose the devices or device groups, review what will be enforced, and Swif creates the right policy for each operating system.

To block websites and domains instead, see Block Domains and Filter Web Content.

You can open Manage Blocklist from several places. The flow is the same everywhere; only what's filled in for you changes.

You can select several apps on the Applications page, and block them together.

Manage Blocklist has three steps:

Under Blocklist Target, select Application. Then choose how to identify the app:

Only one option is shown at a time.

Windows: if the path is missing, you'll see "Application path is required for Windows", and can't continue. Some built-in Microsoft apps, such as Edge, can't be fully blocked because of Windows limits. Test on a few devices first.

Android: if a catalog app has no known package name, enter it yourself, using Enter Custom Application Name.

iPhone and iPad: desktop and Android app blocks don't apply. The Review step marks them as not supported. To block apps on iPhone and iPad, use the Apple iOS/iPadOS Application Block Policy.

Choose how to identify the extension:

Then choose the browsers: Chrome, Edge, Firefox, or Safari. Package IDs can differ between browsers, so Swif adds a separate entry for each browser you choose.

Swif enforces extension blocks with each browser's extension policy, such as the Windows Google Chrome Extension Deployment and Blocking Policy, or the Apple Safari Extension Policy.

Each entry in the queue shows the app or extension, its target operating systems or browser, and, for Windows, its path. You can add apps, extensions, and domains to the same queue before saving.

Select individual devices, device groups, or both. Smart groups appear with their names. The counter shows how many devices you've selected.

If you started from a device or a device group, it's already selected.

Before anything is saved, Review shows Your blocklist will apply to [N] devices, and what will be enforced on each.

Each selected device is counted once, in one of these:

Everything in the queue, with each item's Blocklist Rule and Target OS:

Click the pencil icon to go back and change the queue. Your selections are kept.

Device Scope lists each selected device, with its Rule Status and Rule Coverage, such as "1 of 4 will be enforced". Device Group Scope lists each selected group, with how many devices it has. Expand a group to see its devices.

Expand a device to see What gets blocked on this device, with each rule's Enforcement:

When you're done, click Apply to [N] devices. Click Back to change your device selection.

Each block shows the policy that enforces it, as a link. A chip shows how many rule types the policy has. Hover over it for details.

In Device Details > Applications > Blocked, click Allow next to the app. To remove every block on the device, click Allow All.

Check that the app's Application path is correct, and matches where it's installed on the device. Some built-in Microsoft apps can't be fully blocked.

Check the package name. For custom apps, it must match the app's package name exactly, such as com.example.myapp.

The app's block doesn't apply to that device's operating system. For example, a Mac app can't be blocked on an iPad. For iPhone and iPad, use the Apple iOS/iPadOS Application Block Policy.

Check that you chose that browser when adding the extension. Each browser has its own entry.

Check the device and device group counts in Review. If they still don't match after saving, contact Swif support.