Network protection and VPN troubleshooting
Network Protection and Telemetry Collection helps Argus observe app connections and apply network restrictions. Android uses its VPN connection controls to let Argus perform this filtering on your phone.
Enable network protection
- Open Preferences, or menu > Detection preferences.
- Turn on Network Protection and Telemetry Collection.
- Read and accept Android's VPN connection request if you want to enable the feature.
- Return to Argus and check its protection status.
Android may display a key or VPN icon while a VPN is active. Check which app is connected in Android's VPN settings; the icon alone does not identify Argus.
The setting combines network protection with collection of security-related connection information. See privacy and permissions for the distinction between local filtering and online security processing.
What the local VPN means
Argus uses the connection on your phone to apply security checks and app restrictions. It is not a service for choosing a different browsing country or hiding your public IP address.
Local filtering does not mean the entire app operates offline or that no information leaves your phone. Account services, security analysis, reputation checks, and family sharing use online services. Connection records can contain destinations and app information.
Using another VPN
Android allows only one active VPN per user profile. Starting another VPN can stop Argus network protection, and vice versa.
Android permits one active VPN service per user or profile. Some firewalls and ad blockers also use a VPN connection. Android documents this behaviour in its VPN guidance.
If you need a work VPN, follow your organisation's requirements. After using it, disconnect it and re-enable Argus network protection when appropriate. Monitoring or manual scans do not replace the network restrictions that are unavailable while Argus's VPN is stopped.
For a managed phone or work profile, ask your administrator about VPN restrictions rather than changing enforced settings.
Network rules for individual apps
Open Exceptions, or menu > App exceptions.
| Control | Effect |
|---|---|
| Manage Network Blacklist | Select apps whose connections Argus should block while its network protection is active. |
| Manage Apps Allowed Through Network | Add or remove app exceptions that bypass Argus network filtering. This reduces protection for those apps. |
| Manage Monitoring Exclusions | Reduce background monitoring for selected apps. These exclusions can also bypass network filtering, so review them when restoring protection. |
Search for the app, then change its switch. A network-rule change can briefly interrupt connections while protection restarts. Confirm the final rule and connection status afterward.
A blocked app may not appear in the allowed-app list. Review its blacklist and quarantine state first. Do not release or allow a flagged app solely to make it connect.
Release in threat details also creates a network allowance. Removing that allowance restores normal filtering only if no monitoring exclusion also bypasses it; it does not by itself add a deliberate blacklist rule.
Family website restrictions
A connection may be blocked because of a family website policy, rather than an app-malware finding. Check family website controls with the family owner.
Network allowances should not be treated as proof that every other restriction has been removed. Review the relevant policy and the reason shown for the blocked connection.
Connection troubleshooting
One app or website cannot connect
- Check whether other apps and websites work.
- Review any Argus finding and the connection map.
- Check the app's blacklist, quarantine, and network allowance.
- If the device is linked, ask the owner whether a website policy applies.
- If you believe a restriction is incorrect, record the app or website and the reason shown, then contact support.
A blocked connection is not always evidence that the app itself is malicious. A legitimate app may contact a restricted destination.
The whole phone loses internet access
- Confirm Wi-Fi or mobile data is connected. Check airplane mode and whether the Wi-Fi network needs a sign-in page.
- Open Android's VPN settings and check for another active or always-on VPN.
- Reopen Argus and check whether network protection starts successfully.
- If you need to isolate the cause, briefly turn off Argus network protection and test a known, trusted website. Avoid suspected apps during this check.
- Turn protection back on after the test.
If Android's Block connections without VPN setting is enabled, internet access can remain blocked while the VPN is disconnected. Review that setting or ask your administrator if it is managed. Do not assume Argus will override it.
If the problem happens only with Argus enabled, include the network type, exact time, affected apps, and recent network log in your support request.
The VPN permission request fails or the switch turns off
Return to Android VPN settings and check whether another app or a managed-device policy controls the connection. Reopen Argus and accept its request when available. If it still fails, record the message and contact support.
A public Wi-Fi sign-in page will not load
Use the phone's Wi-Fi sign-in notification. If a VPN prevents access, follow the network's and your organisation's guidance. If you temporarily stop Argus to complete sign-in, restore protection afterward.