{"package_name":"com.samsung.android.knox.app.networkfilter","label":"KnoxNetworkFilter","device_count":38,"observation_count":53,"user_facing_count":0,"first_seen":"2025-06-02T16:53:54Z","last_seen":"2026-09-18T01:54:07Z","guidance":{"summary":"Labelled \"KnoxNetworkFilter\" on the device, this is a small Samsung Knox component (roughly 150 to 190 KB in our sample) signed by a Samsung OEM key that also signs the Android framework. It has no launcher icon. Its declared permissions are network-oriented: access to network and Wi-Fi state, internet access, use of restricted networks, the ability to act across users, the ability to query all installed packages, and a Knox analytics permission.\n\nSamsung documents the Knox Firewall as the enterprise feature that fits this shape. Knox Firewall lets an administrator allow, deny or redirect access to specific IP addresses, allow or deny whole domains or sub-domains, and apply those rules to a single app or the whole device, with logs of blocked domain access attempts. In the Knox SDK the same capability appears as the Firewall and DomainFilterRule APIs that an EMM calls, where domain rules work by filtering DNS resolution and IP rules are enforced through iptables once the firewall is enabled. Note that Samsung's published documentation describes the feature without naming this package, so the link between the two is inferred here from the package name, its on-device label and its declared permissions rather than taken from a Samsung statement.\n\nFor Android Enterprise, EMM and kiosk deployments this matters if your profile applies Knox firewall or URL filtering rules, since disabling a component that filtering may depend on could quietly leave a device unfiltered while the console still reports the policy as applied. Treat it as caution: leave it in place on managed Samsung hardware, and if you are trimming an image, verify your filtering policies still block what they should on a test device afterwards.\n\nVersion note: no Android or One UI release that changed this package's role could be sourced. On the feature side, Samsung documents that Knox SDK 3.3 added the ability to use domain name rules and IP firewall rules at the same time, so what an EMM can express through Knox firewall policy depends on the Knox version on the device rather than on Android alone.","safe_to_disable":"caution","sources":[{"title":"Knox Firewall - Samsung Knox mobile security whitepaper, Samsung Knox Documentation","url":"https://docs.samsungknox.com/admin/fundamentals/whitepaper/samsung-knox-mobile-security/network-security/knox-firewall/"},{"title":"Firewalls - Knox SDK, Samsung Knox Documentation","url":"https://docs.samsungknox.com/dev/knox-sdk/features/mdm-providers/connections/firewalls/"},{"title":"Package provenance for com.samsung.android.knox.app.networkfilter - Android System App Database","url":"https://sysapps.bayton.org/api/packages/com.samsung.android.knox.app.networkfilter"}],"last_verified":"2026-09-04T00:00:00Z"},"labels":[{"label":"KnoxNetworkFilter","locale":"en","count":20},{"label":"KnoxNetworkFilter","locale":"en-gb","count":18},{"label":"KnoxNetworkFilter","locale":"en-us","count":17},{"label":"KnoxNetworkFilter","locale":"it-IT","count":5},{"label":"KnoxNetworkFilter","locale":"nl-nl","count":4},{"label":"KnoxNetworkFilter","locale":"en-nl","count":3},{"label":"KnoxNetworkFilter","locale":"de-de","count":2},{"label":"KnoxNetworkFilter","locale":"en-GB","count":2},{"label":"KnoxNetworkFilter","locale":"es-ES","count":2},{"label":"KnoxNetworkFilter","locale":"es-es","count":2},{"label":"KnoxNetworkFilter","locale":"it-it","count":2},{"label":"KnoxNetworkFilter","locale":"es-us","count":1},{"label":"KnoxNetworkFilter","locale":"ru-ru","count":1},{"label":"KnoxNetworkFilter","locale":"en-au","count":1},{"label":"KnoxNetworkFilter","locale":"pl-PL","count":1},{"label":"KnoxNetworkFilter","locale":"pl-pl","count":1},{"label":"KnoxNetworkFilter","locale":"fr-fr","count":1}],"seen_on":[{"device_id":45,"make":"samsung","model":"SM-A135F","os_api":"34","observation_count":3,"user_facing_count":0,"last_seen":"2026-01-21T21:26:08Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":292,"make":"samsung","model":"SM-A137F","os_api":"34","observation_count":1,"user_facing_count":0,"last_seen":"2026-01-17T15:40:39Z"},{"device_id":101,"make":"samsung","model":"SM-A236B","os_api":"34","observation_count":2,"user_facing_count":0,"last_seen":"2026-04-10T09:18:27Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":130,"make":"samsung","model":"SM-A266B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-08-21T17:33:39Z"},{"device_id":297,"make":"samsung","model":"SM-A266B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-01-26T12:37:53Z"},{"device_id":3914,"make":"samsung","model":"SM-A346B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2026-07-27T19:03:49Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":57,"make":"samsung","model":"SM-A536B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-19T09:46:41Z"},{"device_id":4345,"make":"samsung","model":"SM-A536B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-07-29T10:09:51Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":76,"make":"samsung","model":"SM-A556B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-01T07:26:00Z"},{"device_id":197,"make":"samsung","model":"SM-A566B","os_api":"36","observation_count":3,"user_facing_count":0,"last_seen":"2026-09-12T23:27:15Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":94,"make":"samsung","model":"SM-F721B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-09T14:36:33Z"},{"device_id":220,"make":"samsung","model":"SM-F766B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-11-11T17:28:28Z"},{"device_id":7287,"make":"samsung","model":"SM-F971B","os_api":"37","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-18T01:54:07Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":205,"make":"samsung","model":"SM-G766B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-10-17T16:37:16Z"},{"device_id":266,"make":"samsung","model":"SM-G766B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-05T16:15:15Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":298,"make":"samsung","model":"SM-G991B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2026-04-19T09:09:11Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":120,"make":"samsung","model":"SM-S721U","os_api":"35","observation_count":5,"user_facing_count":0,"last_seen":"2025-08-05T02:05:06Z"},{"device_id":5178,"make":"samsung","model":"SM-S731B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-08-11T18:01:56Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":34,"make":"samsung","model":"SM-S906B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-02T16:53:54Z"},{"device_id":356,"make":"samsung","model":"SM-S908U","os_api":"36","observation_count":2,"user_facing_count":0,"last_seen":"2026-09-17T20:09:48Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":99,"make":"samsung","model":"SM-S921B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-07-22T13:41:51Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":347,"make":"samsung","model":"SM-S921B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-17T22:25:10Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":59,"make":"samsung","model":"SM-S921U","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-19T18:23:52Z"},{"device_id":339,"make":"samsung","model":"SM-S926B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-04-14T05:11:37Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":295,"make":"samsung","model":"SM-S928B","os_api":"36","observation_count":2,"user_facing_count":0,"last_seen":"2026-06-12T13:09:24Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":177,"make":"samsung","model":"SM-S928U1","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-12T23:04:16Z"},{"device_id":189,"make":"samsung","model":"SM-S931B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-20T01:00:10Z"},{"device_id":228,"make":"samsung","model":"SM-S931B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-11-23T23:24:14Z"},{"device_id":271,"make":"samsung","model":"SM-S936B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-12-18T15:12:58Z"},{"device_id":153,"make":"samsung","model":"SM-S937B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-08-25T10:38:30Z"},{"device_id":104,"make":"samsung","model":"SM-S938B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-08-25T19:09:54Z"},{"device_id":353,"make":"samsung","model":"SM-S942B","os_api":"37","observation_count":1,"user_facing_count":0,"last_seen":"2026-05-25T09:51:12Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":6978,"make":"samsung","model":"SM-S948U","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-09T03:01:22Z"},{"device_id":186,"make":"samsung","model":"SM-T636B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-10-12T11:07:44Z"},{"device_id":158,"make":"samsung","model":"SM-X200","os_api":"34","observation_count":1,"user_facing_count":0,"last_seen":"2025-08-27T11:27:42Z"},{"device_id":69,"make":"samsung","model":"SM-X716B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-27T04:07:47Z"},{"device_id":68,"make":"samsung","model":"SM-X910","os_api":"34","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-26T12:38:49Z"},{"device_id":176,"make":"samsung","model":"SM-X910","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-12T19:22:07Z"}],"intelligence":{"device_profiles":18,"signer_count":1,"signer_consistent":true,"max_permission_count":8,"min_size_bytes":148007,"max_size_bytes":193063,"min_target_sdk":33,"max_target_sdk":36,"oldest_version":"2.19","newest_version":"2.24","has_third_party_preinstall":false,"genuine_third_party":false,"play_eligible_count":0,"signers":[{"sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42","classification":"oem","vendor":"Samsung","observation_count":30,"makes":["samsung"],"signs_framework":true,"global_make_count":1,"global_package_count":508,"global_observation_count":10196}],"permissions":[{"permission":"android.permission.ACCESS_LOCAL_NETWORK","official":false},{"permission":"android.permission.ACCESS_NETWORK_STATE","description":"Allows the app to view information about network connections such as which networks exist and are connected.","official":true},{"permission":"android.permission.ACCESS_WIFI_STATE","description":"Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.","official":true},{"permission":"android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS","description":"Signature or privileged system permission.","official":false},{"permission":"android.permission.INTERACT_ACROSS_USERS_FULL","description":"Signature-level system permission, for platform-signed apps.","official":false},{"permission":"android.permission.INTERNET","description":"Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.","official":true},{"permission":"android.permission.QUERY_ALL_PACKAGES","description":"Allows an app to see all installed packages.","official":true},{"permission":"com.samsung.android.knox.permission.KNOX_ANALYTICS_INTERNAL","official":false}]}}