Follow Us | |
Welcome, Guest Login
MP Logo


Protecting Mobile Devices

Last Updated: Apr 12, 2016 10:49AM AEST

SaaS Web Protection uses IPsec to secure end-user communication on mobile devices.
 

SaaS Web Protection supports IPsec on the following mobile devices:

  • Apple iOS devices with iOS operating system 8.0 or later
  • Android devices with Android operating system 4.4.2 or later


To set up IPsec on a mobile device, you import the certificate files created by the PKI service and add a VPN configuration of type IPsec.


Setting up IPsec on mobile devices involves the following high-level steps:

  1. In the Control Console, an administrator creates a digital certificate for an end user and the user's mobile device.
  2. The PKI service sends the end user an email with a link to the download page and a QR code.
  3. The end user clicks the link or scans the QR code and downloads the certificate files from the download page to the mobile device.
  4. On the device, the end user imports one or more files. The files provide the certificate, private key, and certificate authority (CA) certificates.
  5. On the device, the end user adds a VPN configuration of type IPsec. (iOS devices can perform this step automatically.)
  6. To connect the device to the MPWeb Protection service, the end user clicks the new VPN configuration.


You can download the certificate files in one compressed archive file named collection.tar.gz. The archive contains all files needed for setting up IPsec on Apple iOS and Android devices as shown in the following table. Or you can download the files you need individually.


Setup On Iphone


To set up IPsec on an iOS device automatically, import the .mobileconfig file.


Task

  1. Download the following Apple iOS configuration file to your iOS mobile device: <device_id>.mobileconfig.

  2. To import the file, click it.

    iOS starts the import.

  3. When prompted, confirm that you want to import the VPN profile.

    iOS adds a VPN configuration named Intel SaaS VPN.

  4. To connect your device to the SaaS Web Protection service, click the new VPN configuration.


Setup on an Android device


To set up IPsec on an Android device, import the specified PKCS #12 file and add a VPN configuration of type IPsec XAuth RSA.


Task

  1. Download the following PKCS #12 file to your Android mobile device: <device_id>_with_chain.pem.

  2. To import the file, click it.

  3. In the dialog box that opens:

    1. Enter the PKCS #12 password displayed on the download page.
    2. For the certificate use setting, select VPN.
  4. Configure the following VPN settings.

    1. For the VPN type, select IPSec XAuth RSA.
    2. For the server address, enter ipsec.saasprotection.com.
    3. From the available certificates, select the one named Intel SaaS IPSec end user certificate.
  5. To connect your device to the SaaS Web Protection service, click the new VPN configuration.

717054df641d4fd8b46510422dfa18d5@manageprotect.desk-mail.com
http://assets1.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete