Guides
Restricted Network profile: when Smart Connect should stay aggressive
How the fourth built-in preset differs from Travel and Public Wi‑Fi — and when it still will not save a broken portal.
Why Restricted exists
Public Wi‑Fi locks WireGuard. Travel locks IKEv2. Both are sensible defaults — and both can fail on ISP DPI that fingerprints those signatures. Restricted leaves Protocol on Smart so FollowNet can climb Hysteria2, VLESS Reality, AmneziaWG, then WireGuard / IKEv2.
The other knobs
Quad9 DNS, Auto-connect Always, Fastest server. Always means on-demand rules try to keep the tunnel up across Wi‑Fi and LTE. Fastest prefers latency over “last city you toured for fun.”
Field checklist
1) Finish captive portal on clear traffic. 2) Apply Restricted. 3) Watch Smart Connect step protocols. 4) Confirm with a real page load and Speed Test. 5) If one protocol wins, clone a custom profile so the next stay is one tap.
What it will not fix
Offline airplane mode, a hotel that blocks all UDP/TLS paths you have, or streaming catalog rules. Restricted is recovery automation — not a unlock guarantee.