Secure Web Gateway MobileProxy – Installation and Setup Guide Smoothwall® MobileProxy, Installation and Setup Guide, SP7 – 1st Edition, 2012 Smoothwall Ltd. publishes this guide in its present form without any guarantees. This guide replaces any other guides delivered with earlier versions of MobileProxy. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Smoothwall Ltd. For more information, contact: [email protected] This document was created and published in the United Kingdom. © 2001 – 2012 Smoothwall Ltd. All rights reserved. Trademark notice Smoothwall and the Smoothwall logo are registered trademarks of Smoothwall Ltd. Linux is a registered trademark of Linus Torvalds. Snort is a registered trademark of Sourcefire INC. DansGuardian is a registered trademark of Daniel Barron. Microsoft, Internet Explorer, Window 95, Windows 98, Windows NT, Windows 2000 and Windows XP are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Netscape is a registered trademark of Netscape Communications Corporation in the United States and other countries. Apple and Mac are registered trademarks of Apple Computer Inc. Intel is a registered trademark of Intel Corporation. Core is a trademark of Intel Corporation. All other products, services, companies, events and publications mentioned in this document, associated documents and in Smoothwall software may be trademarks, registered trademarks or service marks of their respective owners in the UK, US and/or other countries. Acknowledgements Smoothwall acknowledges the work, effort and talent of the Smoothwall GPL development team: Lawrence Manning and Gordon Allan, William Anderson, Jan Erik Askildt, Daniel Barron, Emma Bickley, Imran Chaudhry, Alex Collins, Dan Cuthbert, Bob Dunlop, Moira Dunne, Nigel Fenton, Mathew Frank, Dan Goscomb, Pete Guyan, Nick Haddock, Alan Hourihane, Martin Houston, Steve Hughes, Eric S. Johansson, Stephen L. Jones, Toni Kuokkanen, Luc Larochelle, Osmar Lioi, Richard Morrell, Piere-Yves Paulus, John Payne, Martin Pot, Stanford T. Prescott, Ralf Quint, Guy Reynolds, Kieran Reynolds, Paul Richards, Chris Ross, Scott Sanders, Emil Schweickerdt, Paul Tansom, Darren Taylor, Hilton Travis, Jez Tucker, Bill Ward, Rebecca Ward, Lucien Wells, Adam Wilkinson, Simon Wood, Nick Woodruffe, Marc Wormgoor. MobileProxy contains graphics taken from the Open Icon Library project http:// openiconlibrary.sourceforge.net/ Address Smoothwall Limited 1 John Charles Way Leeds. LS12 6QA United Kingdom Email [email protected] Web www.smoothwall.net Telephone USA and Canada: 1 800 959 3760 United Kingdom: 0870 1 999 500 All other countries: +44 870 1 999 500 Fax USA and Canada: 1 888 899 9164 United Kingdom: 0870 1 991 399 All other countries: +44 870 1 991 399 Contents
Chapter 1 Installing MobileProxy on Devices ...... 1 About MobileProxy...... 1 Installing MobileProxy on Devices ...... 1 Pre-requirements ...... 2 On Your Smoothwall System ...... 2 On Devices...... 2 Installing MobileProxy ...... 2 About Command Line and Enterprise-wide Installations ...... 6 Overview of MobileProxy on Devices...... 7 About MobileProxy System Preferences ...... 7 About MobileProxy and End-users...... 8 What Next? ...... tion 8 Chapter 2 Removing MobileProxy ...... 9 Removing MobileProxy...... di 9
1st E
i Contents
tion di
1st E
ii Chapter 1 Installing MobileProxy on Devices
In this chapter: • About MobileProxy • What is required to install MobileProxy on devices • How to install MobileProxy. For more information on working with MobileProxy, see your Smoothwall System Administrator’s Guide.
About MobileProxy tion MobileProxy enables you to enforce your organization’s web content filtering policy on mobile devices owned by your organization. di
1st E
By installing MobileProxy on devices, users’ browsers are forced to send web content requests, both HTTP and HTTPS, to Smoothwall proxies. Smoothwall proxies then enforce your organization’s web content filtering policy by blocking undesirable and malicious content.
Installing MobileProxy on Devices You can install MobileProxy on devices in the following ways:
1 Installing MobileProxy on Devices Installing MobileProxy on Devices
• Manually by double-clicking on the device software package (MobileProxy.pkg) and following the wizard, see Pre-requirements on page 2 and Installing MobileProxy on page 2 for more information • Deploying enterprise-wide – using Netinstall, consult your Mac OS X Server documentation for more information or Google’s Simian, for Mac OS X package deployment, for more information, see http://code.google.com/p/simian/ Note: To ensure a high level of security, any installation of MobileProxy should be done in a controlled environment, e.g. on your organization’s LAN, by trusted administrators.
Pre-requirements The following sections describe what is required to install MobileProxy and get it up and running.
On Your Smoothwall System Before you start installing MobileProxy, the following must be configured on your Smoothwall System: • MobileProxy must be enabled and external access configured • MobileProxy settings specifying which Smoothwall proxies devices can proxy through • Any necessary exceptions to proxying. For more information, see your Smoothwall Systemtion Administrator’s Guide. On Devices On devices, MobileProxy requires: di • Mac OS X (Snow Leopard or later) as the operating system • If installing manually, access to the MobileProxy device software and the client key, contact your Smoothwall representative if you have not got the device software • Access to your Smoothwall System in order to download proxy server and content exception information after installing the device software.
Installing MobileProxy Note: You must use1st an account with administratorE permissions to install MobileProxy. The following section explains how to install MobileProxy on a device running Mac OS X. To install MobileProxy: 1 On your Smoothwall System, browse to web proxy > mobileproxy > settings page and generate a MobileProxy client key. 2 Make the client key and the device software package (MobileProxy.pkg) accessible to the device on a secure server or by downloading them to the device. 3 On the device, locate and double-click on the MobileProxy package (MobileProxy.pkg). The following dialog box opens:
2 Smoothwall MobileProxy Installation and Setup Guide
4Click Continue. The following dialog box opens:
5Click Continue. The following dialog box opens: tion di
6Click Continue. The following1st dialog box opens: E
3 Installing MobileProxy on Devices Installing MobileProxy on Devices
7Click Continue. The following dialog box opens:
8Click Agree. The following dialog box opens:
tion Note: You must enter the correct Smoothwall System information and specify the correct key here. If you do not, MobileProxy will not work correctly after you have completed the installation and you will have to remove and reinstall it using the correctdi information. 9 Configure the following settings: Setting Description Smoothwall Enter the IP address or hostname of the Smoothwall System from which Server Host MobileProxy will download proxy details and exception information once it has been correctly installed. MobileProxy Click Choose and browse to and select the file containing the client key. Click Client Key1stOpen. MobileProxy E imports the client key. 10 Check that you have entered the correct information and then click Continue. The following dialog box opens:
4 Smoothwall MobileProxy Installation and Setup Guide
11 Select Install for all users of this computer and click Continue. The following dialog box opens:
12 Click Install. The wizard prompts you for the device’s master password: tion
13 Enter the name and master password diand click OK. The following dialog box opens:
14 Click Continue Installation. The wizard1st installs MobileProxy andE displays the following dialog box:
15 Click Restart to finish the installation. MobileProxy restarts the device. 16 When prompted, log in again. The installation is now complete and if you have correctly specified your Smoothwall System and client key, MobileProxy connects to the your system and downloads Smoothwall proxy details and exception information.
5 Installing MobileProxy on Devices Installing MobileProxy on Devices
Tip: If there is a problem accessing your Smoothwall System, check on the system > administration > external access page that external access for the MobileProxy server service has been enabled. 17 Click on the MobileProxy icon in the top status bar and select Preferences. MobileProxy system preferences are displayed, for example:
As long as MobileProxy is installed on the device, browsers will use it for proxying and your organization’s web filtering policy will be enforced.
About Command Line and Enterprise-wide Installations The MobileProxy package is created using Apple’s standard PackageMaker tool. This enables you to install it from the command line or using an enterprise deployment tool. To install from the command line: 1 Manually copy a settings plist file, containing the Smoothwall server IP address, port and the SSL key file to: tion /Library/Application Support/Smoothwall/settings.plist /Library/Application Support/Smoothwall/mgclient_key 2 Enter: sudo installer -pkg ~/Desktop/MobileProxy-X.xx.pkgdi -target / Both NetInstall and Simian Munki can be used as long as they support the standard Apple PackageMaker format.
1st E
6 Smoothwall MobileProxy Installation and Setup Guide Overview of MobileProxy on Devices Once installed, you can access MobileProxy by clicking on the MobileProxy icon in the top menu bar. Information and the following options are available: Option/ Description information MobileProxy Connecting – Connecting and authenticating with your Smoothwall System as specified when installing MobileProxy. This is displayed after installing, at log in, and whenever you choose Refresh. Updating – Downloading and applying Smoothwall proxy details and exception lists from your Smoothwall System. No Proxies – Your Smoothwall System did not return any proxy details. This message may be displayed anytime after updating. It is not necessarily an error, your Smoothwall System just did not return any proxy servers to connect to. Authentication Failed – There is a connection problem or authentication failed. This message is displayed if there is a problem connecting to either your Smoothwall System or Smoothwall proxy servers. Settings Error – The settings file was not found or contains invalid or missing settings. The settings file contains your Smoothwall System’s IP address. The file may be missing settings,tion the format may be incorrect, or file permissions could be the problem. SSL Key File Error – The MobileProxy client key file was not found or is unaccessible. di Connected – MobileProxy is currently connected to a Smoothwall proxy server. Idle – There are no errors but MobileProxy is not connected to a Smoothwall proxy server, this is the initial state before a connection is attempted. IP address Displays the IP address of the current Smoothwall proxy server. Refresh Select this option to refresh the information displayed. Preferences Select this option to access MobileProxy system preferences. For more 1stinformation, E see About MobileProxy System Preferences on page 7. About MobileProxy System Preferences The following section discusses MobileProxy system preferences. To access MobileProxy system preferences: 1 Click on the MobileProxy icon in the top status bar and select Preferences. MobileProxy system preferences are displayed, for example:
7 Installing MobileProxy on Devices About MobileProxy and End-users
The following settings are available: Setting Description Show All Select this option to show all Mac system preferences. Proxy Displays the proxy server currently serving MobileProxy. If more than one proxy server is available, you can change the proxy server by selecting it from the Proxy drop-down list. Refresh Click to refresh the information displayed. Open log file Select to display the MobileProxy log file. Uninstall Select to remove MobileProxy from the device. See Chapter 2, Removing MobileProxy on page 9 for more information.
About MobileProxy and End-users • As MobileProxy prompts users to authenticate themselves when they start to browse, you must supply them with Smoothwall System usernames and passwords, see your Smoothwall System Administrator's Guide for more information on user accounts and authentication • Users cannot remove MobileProxy unless they are using a device account with administrator privileges. tion • We recommend that you tell users that MobileProxy has been installed on their devices and that web content is being filtered and their browsing is being logged • We recommend that you provide usersdi with a way of reporting problems with over and/or under- blocking of pages so that you can adjust your policy to suit your organization better.
What Next? For information on configuring and managing MobileProxy, see your Smoothwall System Administrator’s Guide. 1st E
8 Chapter 2 Removing MobileProxy
In this chapter: • How to remove MobileProxy. For information on working with MobileProxy, see your Smoothwall System Administrator’s Guide.
Removing MobileProxy The following section explains how to remove MobileProxy from devices. Note: You must use an account with administrator permissions to remove MobileProxy. To remove MobileProxy: 1 On the device, from the Apple menu, select System Preferences and click MobileProxy. tion di
2Click Uninstall. When prompted, click OK to confirm you want to remove it. 3 Enter the device’s password and click OK. MobileProxy is removed from the device. 1st E
9 Removing MobileProxy Removing MobileProxy
tion di
1st E
10 Smoothwall MobileProxy Installation and Setup Guide
11 . UK + INTERNATIONAL USA + CANADA
Smoothwall Ltd +44 (0)800 5 999 040 UK Smoothwall Inc 1-800-959-3760 USA + Canada 1 John Charles Way +44 (0)870 1 999 500 Intl 6201 Fairview Road, Suite 320 1-888-899-9164 Fax Leeds LS12 6QA [email protected] Charlotte NC 28210-4274 [email protected] United Kingdom www.smoothwall.net United States of America www.smoothwall.net
Copyright Smoothwall Ltd 2001-2012. All rights reserved