Apply Secure Access Policies to Your Mobile Device

Once your device is imported from the MDM dashboard, it appears as the identity type Mobile Devices in your Secure Access dashboard at Resources > Sources and destinations > Mobile Devices.

As no changes can be made in Secure Access to the actual provisioned device without using your MDM, these mobiles devices are simply listed; however, in Secure Access you can now apply policies to these mobile device identities.

Policies control the level of protection and logging, including which types of sites should be blocked and whether you want to have additional levels of security like the Secure Access intelligent proxy enabled.

Prerequisites

Full admin access to the Secure Access dashboard. See Manage Accounts.

Procedure

When your device is imported into Secure Access, Secure Access automatically applies the Default policy to it. You can change which policies are applied to your identity at any time. For more information about policies, see Manage Policies.

Navigate to Secure > Policies > Internet Policies.

To change policy settings applied to your device, expand and edit the Default Policy or create and apply new policies. For more information, see Manage Policies.

Policy > Security Settings

Before setting policy or gaining visibility in reports, you’ve activated Secure Access on your iOS devices by registering Secure Access with your MDM. All identities are automatically synced from the MDM and are applied to the default Secure Access policy, which can be set as audit-only mode or providing standard threat protection. For more information about policies, see Manage Policies.

With the CSC, policies are enforced at the DNS-layer with selective inspection, when necessary, using our intelligent proxy to maintain your mobile workforce’s privacy. For more information about the intelligent proxy, see Enable the Intelligent Proxy.

Note: You may select different mobile device identities per policy for more granular control.

Policy > Passive Reporting Mode

This is not a setting you configure, but a way of ensuring the solution works before putting Secure Access in "block mode" to enforce security. If you are evaluating the solution and do not wish to block any security or content sites just yet, assign a unique policy for the Mobile Devices identities.

Generic MDM System Registration < Apply Secure Access Policies to Your Mobile Device > Secure Access Reporting