F5 Networks, Inc. F5 Recommended Practices for BIG-IP and AirWatch MDM Integration

Save this PDF as:

Size: px
Start display at page:

Download "F5 Networks, Inc. F5 Recommended Practices for BIG-IP and AirWatch MDM Integration"

Transcription

1 F5 Networks, Inc. F5 Recommended Practices for BIG-IP and AirWatch MDM Integration

2 Contents Introduction 4 Purpose 5 Requirements 6 Prerequisites 6 AirWatch 6 F5 BIG-IP 6 Network Topology 7 Big-IP Configuration 7 Remote Access Wizard 7 SSL Certificate and Key 14 SSL Client Profile 14 Virtual Server Advanced Configuration 15 Access Policy Manager - Visual Policy Editor 16 Basic AirWatch Access Policy Flow 16 BIG-IP ActiveSync Proxy 19 Login and Authentication Verification 19 Air Watch Configuration 21 AirWatch Console Access 21 Child Organization Group Creation 22 User Group Creation 23 Smart Group Creation 23 AirWatch and F5 Integration 24 AirWatch Certificate Authority 26 VPN Profiles 26 Base VPN Profile 26 On-Demand Certificate Authority VPN Access Profile 32 Copy the Access Policy 38 On-Demand Certificate Authority Macro 38 Variable Assign Object 39 Advanced Resource Assign Macro 41 2

3 SSL Client Certificate Modification 42 Virtual Server Access Policy assignment 43 Per-App VPN Profile 44 Copy the Access Policy 46 Conclusion 47 3

4 Introduction The F5 BIG-IP Access Policy Manager (APM) allows for the consolidation of multiple access gateways (mobile application management, virtual desktop infrastructure, Microsoft Active Sync Proxy, and others) into a single unified access gateway. You can begin your deployment with a single access gateway use case or with multiple access gateway use cases. In either scenario, F5 s tight integration with technology alliance partners allows for validated configurations to ensure compatibility. While this recommended practices guide is specific to integrating F5 BIG-IP APM with AirWatch MDM, you may reference our VDI access gateway solutions here: VMware Horizon View: Citrix XenApp/XenDesktop: Microsoft Remote Desktop Services: For VMware Horizon View, administrators may use BIG-IP APM as a PCoIP proxy for remote access use cases. This greatly increases not only Horizon View security, but also scale and performance. Many more F5 BIG-IP APM use cases may be referenced here: 4

5 Purpose With F5 BIG-IP APM, you may provide AirWatch mobile users unmatched secure remote access, performance, and availability. This document outlines the configuration details required to integrate F5 BIG-IP APM with AirWatch mobile device management (MDM). The steps are a series of recommended practices to follow in order to build an integrated solution. As with any system deployment, the steps are examples and the deployed environment may not exactly match these examples. After completing this guide, you will be able to: Use the F5 BIG-IP APM as an AirWatch access gateway. Use the ios BIG-IP Edge Client for Per-App VPN access with ios 7 or later. Please reference the latest ios BIG-IP Edge Client configuration guide here: Authenticate AirWatch MDM users via the BIG-IP APM. Initiate on-demand VPN tunnels by domain query. Use BIG-IP APM as a Microsoft Active Sync Proxy for Android and ios synchronization. Manage AirWatch MDM devices through the BIG-IP APM access gateway. This recommended- practices guide will enable you to: 1. Configure an APM access policy (network access, authentication, webtop, and session variables). 2. Create a certificate authority (CA), client certificates, and associated BIG-IP ClientSSL Profile. 3. Configure a BIG-IP virtual server and associate the APM access policy and SSL profile. 4. Configure multiple custom access policies for three (3) AirWatch remote access use cases: a. A VPN profile for all ios and Android network traffic b. A VPN On-Demand Profile c. A Per-App VPN profile 5. Configure required AirWatch groups and profiles. 6. Configure AirWatch for F5 integration. 7. Configure required AirWatch groups and profiles. 8. Enter AirWatch credential sources. 5

6 Requirements This section covers various requirements for this guide. These include prerequisites, product licensing, software, and/or hardware requirements. Prerequisites The following prerequisites need to be addressed prior to implementing this guide. This solution utilizes the following ancillary infrastructure: An authentication server An server An application server An NTP time server Globally Routable IP addresses Mobile device(s) with network access (ios and Android devices only) Internet access Administrator login credentials SSL Certificate and Key (please reference F5 solution article SOL14499 for how to create a certificate authority and client certificates) AirWatch AirWatch service cloud subscription and AirWatch cloud account are required Note: This recommended practices guide was formulated on a cloud-based AirWatch deployment. The recommended practices in this document may apply to AirWatch onpremises deployments but have not been tested. F5 BIG-IP Either a physical or a virtual instance of BIG-IP is required. This guide is based on BIG-IP software release This solution relies on F5 Access Policy Manager (APM) and requires an APM software license. 6

7 Network Topology Figure 1: Logical Network Topology Big-IP Configuration This section covers the steps required to be performed within the BIG-IP web configuration utility. Remote Access Wizard The BIG-IP configuration utility wizard will assist you in creating a remote access configuration using Access Policy Manager (APM). Log in to the BIG-IP and select Wizards->Device Wizards from the left menu bar. Select Network Access Setup Wizard for Remote Access and click Next. Figure 2: Network Access Setup Wizard Details 7

8 Enter a Policy Name and Caption. The Default Language, Full Webtop, and Client Side Checks fields are optional. Then click Next to continue. Figure 3: Network Access Policy Name and Details Select Create New or Use Existing in the Authentication Options field. Select the Authentication Server type from the list. Then click Next to continue. Figure 4: Authentication Server Type Details 8

9 The Authentication Server settings need to be defined. In this example we choose an Active Directory Authentication method. Enter a Domain Name. In this example, a Direct connection to the Primary Domain Controller is chosen. Enter an IP Address, Admin Name, and Password for the Active Directory Domain. Then click Next to continue. Figure 5: Active Directory Server Details A lease pool is a pool of available IP addresses that BIG-IP will assign to remote clients for network access. The size of this pool needs to be large enough to provide enough address space for the total concurrent connections licensed by APM. In this example, an address space of 20 IP addresses is defined. Select a Supported IP Version, and a Start and End IP Address. Select Add to move the address range to the Member List. Click Next to continue. Figure 6: IPv4 Lease Pool Details 9

10 The client settings should be set according to the deployment scenario requirements. In this example, all traffic will be forced through the SSL VPN tunnel. Select Force all traffic through tunnel. Then click Next to continue. Figure 7: Traffic Option Client Details Primary and Secondary Name Servers need to be specified. Enter a Primary and Secondary Name Server and the Default Domain Suffix. Figure 8: DNS Server Details 10

11 An optional step is to add Static Host entries. These are static host names to IP address assignments that BIG-IP can use to resolve remote access client requests. In this example, two static hosts are added. Host entries for an server and an application server are input. If this is required, enter a Host Name and an IP Address and then select Add to include these entries in the list. Click Next to continue. Figure 9: Static Host Details Finally, the Virtual Server IP Address needs to be defined. A Redirect Server will also be created, which will redirect client requests to the HTTPS virtual server. Enter an IP Address that is globally routable and resolvable by DNS. Click Next to continue. Figure 10: Virtual Server IP Address Details 11

12 The wizard will display a list of all the configuration values entered. Review the list. Click Next to continue or Previous to correct any configuration mistakes. Figure 11: Access Wizard Confirmation Details 12

13 The Setup Summary is displayed. Figure 12: Access Wizard Setup Details The wizard will address most of the configuration tasks necessary. The next sections will address the ones that haven t been addressed. 13

14 SSL Certificate and Key This solution requires that an SSL certificate and key pair be imported to BIG-IP. These configuration procedures are beyond the scope of this document but can be referenced in F5 solution article SOL These procedures can be used to create a certificate authority (CA) and client certificates and provide instructions for importation to BIG-IP. It is important that you generate the required certificate and key pair before continuing to the next section. SSL Client Profile An SSL Client Profile must be bound to the HTTPS virtual server created in the previous section. Follow the configuration procedures to create an SSL Client Profile: Navigate to Local Traffic- >Profiles->SSL->Client and select Create. Enter a Name. Scroll down to the Client Authentication section. Check the Custom boxes for Client Certificate and choose Require. Check the Custom boxes for Trusted Certificate Authorities and Advertised Certificate Authorities and select the certificate that was imported from the previous section. Figure 13: SSL Client Profile Details 14

15 Virtual Server Advanced Configuration Some virtual server parameters below will require modifications: Select the External VLAN from the Available list and click the << button to move it to the Selected column. This is a security feature that prevents VLAN misuse. Figure 14: External VLAN Selection Set the virtual server to use the SSL Client profile created in the previous section. Select the SSL Profile from the Available column and click the << button to move it to the Selected column. Click the >> button on the clientssl default profile from the Selected column to move it to the Available column. Figure 15: SSL Client Profile Details Check Enabled for VDI and Java Support. Figure 16: Enable VDI and Java Support Details 15

16 Access Policy Manager - Visual Policy Editor The F5 BIG-IP Access Policy Manager (APM) Visual Policy Editor (VPE) is a subordinate user interface (UI) that resides within the BIG-IP APM web configuration utility to assist with building access policies. Depending on the deployment scenario, it may be necessary to alter the access policy. Follow these procedures to configure the VPE: Basic AirWatch Access Policy Flow Access the current access policy by navigating to Access Policy->Access Profiles->Access Profiles List. The list of access policies is displayed. Figure 17: Access Policy Details Click on the Edit hyperlink from the F5_AirWatch_Policy policy row. The VPE is displayed. The current policy should look like the following: Figure 18: Access Policy Flow for Basic AirWatch Policy Details Note: Each of the hyperlink items in blue unscored text can be modified to address the deployment requirements. The next few sections will detail some of these basic access policy settings. 16

17 Logon Page Macro From Figure 18 above, click on the hyperlink labeled Logon Page. This will display the Logon page Properties tab. The top portion of the page details the parameters that will be presented to the user. Figure 19: Logon Page Agent Details The lower portion of the page contains the customizations parameters available. Figure 20: Logon Page Customization Details Modify these values to satisfy site specific deployment requirements. Select Cancel or Save to return to the VPE. 17

18 AD Auth Macro From figure 18 above, click on the hyperlink labeled AD Auth to display the Authentication page Properties tab. Figure 21: AD Authentication Configuration Details Modify these values to satisfy site specific deployment requirements. Select Cancel or Save to return to the VPE. Resource Assign Macro From figure 18 above, click on the hyperlink labeled Resource Assign to display the Resource Properties tab. Figure 22: Resource Assignment Configuration Details Modify these values to satisfy site-specific deployment requirements. Select Cancel or Save to return to the VPE. Click the Close button when you re finished. Note: It is recommended to take these access policy options into consideration when deploying AirWatch VPN Profiles. 18

19 BIG-IP ActiveSync Proxy F5 BIG-IP APM s Microsoft ActiveSync proxy enables native application integration for both Android and ios devices. These configuration procedures are beyond the scope of this document. To configure BIG-IP APM as a Microsoft ActiveSync proxy, please see the deployment guide and according iapp. Login and Authentication Verification You should now be able to test the APM Access Policy from a PC client. This tests the integration of the BIG-IP APM with respective authentication servers. From a PC client, test that the APM logon prompt is properly displayed. Open a Web Browser and enter the fully-qualified domain name (FQDN) or IP address of the APM-protected Virtual Server. The Secure Logon page is displayed. Enter a valid username and password and select Logon to continue. Figure 23: APM Logon Details 19

20 If this is the first time you re logging onto the APM-Protected Virtual Server, you may have to install browser plugins. If this is the case, follow these instructions: Figure 24: Browser Plugin Notification Details Once the test client can properly authenticate and obtain privileges, Mobile Device Management (MDM) can be configured. If the client is unable to authenticate, review the APM log files in the BIG-IP command line interface (CLI) at /var/log/apm. 20

21 Air Watch Configuration This section covers the steps required for MDM configuration via the AirWatch administration console (herein referred to as the AirWatch console). AirWatch Console Access The AirWatch console is the management interface to configure AirWatch MDM. Log in to the AirWatch Console. The console dashboard is displayed. Figure 25: AirWatch Console Dashboard Details The console is laid out with tabs on the far-left column that expose sub tabs to the right of these tabs. 21

22 Child Organization Group Creation An organization group is a simple way to manage VPN profiles and devices. It allows for configuration settings that adhere to deployment requirements to be set at the organization level and be applied by default. Within the AirWatch console, select the Groups & Settings icon on the left. Expand the Groups, Organization Groups, Organization Group Details menu tree. Figure 26: AirWatch Organization Group Creation Details Note: You ll need the Group ID for future reference while performing additional configuration steps. Enter a Name for the group and a Group ID, and then click Save. Be sure to choose this group from the upper-left tab. Figure 27: Organization Group Details 22

23 User Group Creation Add a new user group by selecting Groups & Settings->Groups->User Groups, and then click on the Add hyperlink. Enter the Name for the group and click Save to continue. Figure 28: New User Group Details Click Save when finished. Smart Group Creation Add a new smart group by selecting Groups & Settings->Groups->Smart Groups, and then click on the Add Smart Group hyperlink. Enter the Name for the smart group at the top-right of the screen. Select only the Organization Group and User Group previously created. Figure 29: New Smart Group Details 23

24 Click Save when finished. AirWatch and F5 Integration To enable the F5 integration, perform the following steps. Navigate to Group & Settings->All Settings and select the System tab in the left-hand column. The System tab menu selections are displayed. Expand the Enterprise Integration menu item and select Enterprise Integration Services. Figure 30: System Details It should be noted that if the Current Setting is Inherit, you will need to change it to Override by selecting Override in order to enable enterprise integration. You may also need to change the cloud connector and/or mobile access gateway (MAG) current setting to override. Enable the enterprise Integration by clicking the Enable button. Enter an EIS URL. This is the FQDN that resolves to the IP address of the BIG-IP Virtual Server. Figure 31: EIS URL BIG-IP FQDN Details 24

25 Scroll down to the Enterprise Services section. Enable or Disable the necessary services. Figure 32: Enterprise Services Details Next, scroll down to the AirWatch Services. Enable the services as per deployment requirements. Figure 33: AirWatch Services Details Next, verify the Certificate state and Child Permissions. Figure 34: Certificate State and Child Permissions State Details Click Save when finished. 25

26 AirWatch Certificate Authority A CA needs to be defined. Within the AirWatch console, navigate to System->Enterprise Integration ->Certificate Authorities. Click the Add button to add a new CA. Enter a valid Name, Auth Type, Server Hostname, Authority Name, Username, and password. Figure 35: AirWatch Certificate Authority Details Click Save when finished. VPN Profiles You can deploy three different VPN Profile types: A Base VPN Profile for all ios and Android network traffic A VPN On-Demand Profile that will initiate a VPN connection whenever applications navigate to predefined domains A Per-App VPN Profile that specifies which applications can utilize the VPN connection Base VPN Profile To create a base VPN Profile for Android and ios devices, within the AirWatch console, navigate to Devices->Profiles->List View menu from within the left column. 26

27 Create New Android Profile To create a new AirWatch profile for Android devices, within the AirWatch Console, navigate to Devices->Profiles->List View. Click the Add button and then choose the Android icon. Figure 36: Android Platform Detail Enter a Name and select the Smart Group previously created for this profile. Figure 37: Android Profile Details 27

28 Next, in the left column, select the Passcode tab and then click the Configure button. This will display the Passcode settings that need to be applied. Select the Minimum Passcode Length value as per deployment requirements. For this example the default values remain. Figure 38: Passcode Details Next, in the left column, select the Restrictions tab and then click the Configure button. This will display the restriction settings that can be applied. Note that some values are operating system dependent. Apply the appropriate restrictions per deployment requirements. Figure 39: Restriction Details 28

29 Next, in the left column, select the VPN tab and then click the Configure button. This will display the VPN settings that need to be applied. Choose the F5 SSL Connection Type. Enter a Connection Name for the profile; make sure the Server is the BIG-IP Virtual Server FQDN; and select {EnrollmentUser} as the Username. Figure 40: Android VPN Profile Details Next, in the left column, select the Exchange ActiveSync tab and then click the Configure button. This will display the ActiveSync settings that need to be applied. Enter the Account Name and enter the FQDN of the BIG-IP Virtual Server as the Exchange ActiveSync Host. Figure 41: Exchange ActiveSync Details 29

30 Login Information needs to be defined. Enter a Domain. Click the + button next to User and enter {EnrollmentUser}. Figure 42: Exchange ActiveSync Login Details In the Settings section, in the Past Days of Mail to Sync field, enter the value the deployment requires. In this example, Auto is selected. In the Contacts and Calendar section in this example, Native Contacts Application is chosen for both fields. Figure 43: Exchange ActiveSync Settings and Security Details Click the Save & Publish button to continue. 30

31 Create ios Profile In this section you will create a new AirWatch profile for ios devices. Within the AirWatch Console navigate to Devices->Profiles->List View. Click the Add button and then choose the Apple ios icon. Enter a Name for this profile. Figure 44: ios Profile Details Next, in the left column, select the VPN tab and click the Configure button. This will display the VPN settings that need to be applied. Enter the Connection Name, Type, Server, and select {EnrollmentUser} as the Account. Then select the Per-App VPN and Connect Automatically check boxes. Figure 45: ios VPN Profile Details Click the Save & Publish button to continue. 31

32 On-Demand Certificate Authority VPN Access Profile This profile builds on the Base VPN Profile. The VPN On-Demand feature allows applications to automatically initiate a VPN connection using the F5 client whenever those applications navigate to any of the domains specified in the VPN Profile. Create New On-Demand Android Profile In this section you will create a new On-Demand AirWatch profile for Android devices. Within the AirWatch console navigate to Devices->Profiles->List View, click the Add button, choose the Android icon, and then enter a Name for this profile. Figure 46: Android On-Demand Profile Details Next, in the left column, select the Credentials tab, and then click the Configure button. This will display the VPN Credentials settings that need to be applied. Select a Credential Source appropriate for the deployment. Figure 47: On-Demand Credential Profile Details 32

33 Next, in the left column, select the VPN tab and click the Configure button. This will display the VPN settings that need to be applied. Enter the Connection Type, Name, Server, and select the Username. Figure 48: On-Demand VPN Details Click the Save & Publish button to continue. Create New On-Demand ios Profile This section contains instructions on how to create a new AirWatch profile for ios devices. Within the AirWatch Console, navigate to Devices->Profiles->List View, click the Add button, and then choose the Apple ios icon from the platform listing. Figure 49: Platform Details 33

34 Enter a Name and select the Smart Group previously created for this profile. Figure 50: ios Profile Details Next, in the left column, select the Passcode tab and then click the Configure button. This will display the Passcode settings that need to be applied. Select the Require passcode on device checkbox. This will display more passcode settings. For this example, additional values remain the defaults. Figure 51: Passcode Details 34

35 Next, in the left column, select the Restrictions tab and click the Configure button. This will display the restriction settings that can be applied. Note that some values are operating system dependent. Select the checkboxes that correspond to the restrictions that the deployment requires. Figure 52: Restriction Details 35

36 Next, in the left column, select the VPN tab and then click the Configure button. This will display the VPN settings that need to be applied. Enter the Name of the profile; select F5 SSL as the Connection Type; enter the FQDN of the BIG-IP Virtual Server as the Server; and select {EnrollmentUser} as the Account. Then select the Per-App VPN and Connect Automatically checkboxes. Within the Safari Domains, add the appropriate Domains for the deployment. User Authentication remains the default value of Password. Figure 53: ios VPN Profile Details Next, in the left column, select the Exchange ActiveSync tab and then click the Configure button. This will display the Exchange ActiveSync settings that need to be applied. Enter a Name for this account. Enter the FQDN of the BIG-IP Virtual Server as the Exchange ActiveSync Host. Figure 54: Exchange ActiveSync Details 36

37 The Login Information needs to be defined. Enter a Domain. Click the + link next to Username and enter {EnrollmentUser}. Figure 55: Exchange ActiveSync Login Details In the Settings and Security section, For Past Days of Mail to Sync select a value that the deployment requires. In this example, 2 weeks is selected. Figure 56: Exchange ActiveSync and Security Details Click the Save & Publish button to continue. 37

38 BIG-IP On-Demand Certificate Authentication Access Policy Make the following modifications within the F5 BIG-IP web configuration utility. The existing access policy can be modified or copied. These instructions will result in copying the existing policy and modifying the SSL client profile. Copy the Access Policy To copy the policy to a new name, click on the Copy hyperlink from the F5_AirWatch_Policy policy row. Enter a name for the new policy and click the Copy button. Figure 57: Access Profile Copy Details The Access policy can be edited by clicking on the Edit hyperlink. Modify the policy to match the following configuration. Figure 58: On-Demand Certificate Authentication Access Policy Details Note: Enter the details of the Certificate Authentication and Resource Assignment to meet deployment requirements. On-Demand Certificate Authority Macro Click on the hyperlink labeled On-Demand Cert Auth. Figure 59: On-Demand Certificate Authentication Details The Authentication mode is set to Request. Leave the settings at the default values and click the Save button. 38

39 Variable Assign Object Add a variable assign object to the policy by clicking the + symbol on the Successful branch of the On-Demand Cert Auth macro. Enter a Name; in this example it is Extract UPN. Add a new variable entry by clicking the Change hyperlink. Figure 60: On-Demand Certificate Authority VPE Macro Figure 61: Variable Assign Details Note: The name parameter specified in the three variable-assignment screen captures below is entered in the Custom Variable box (in Figure 60 above) for each variable assignment you create. Add three variable assignments as follows: Name: session.logon.last.domain Custom Expression: set upn [mcget {session.logon.last.upn}]; if {[string $upn] >= 0} { return [string range $upn [expr { [string $upn] + 1 } ] end ]; } else { return ; } Figure 62: Variable Assignment #1 Name: session.logon.last.username Custom Expression: set upn [mcget {session.logon.last.upn}]; if {[string $upn] >= 0} { return [string range $upn 0 [expr { [string $upn] - 1 } ] ]; } else { return $upn; } Figure 63: Variable Assignment #2 39

40 Name: session.logon.last.upn Custom Expression: set e _ fields [split [mcget {session.ssl.cert.x509extension}] \n ]; foreach qq $e _ fields { if {[string first othername:upn $qq] >= 0} { return [string range $qq [expr { [string first < $qq] + 1 } ] [expr { [string first > $qq] - 1 } ] ]; } } return ; Figure 64: Variable Assignment #3 Figure 65: Variable Assignment for Extract UPN Macro Details Note: The Extract UPN Variable Assignment dialog should now appear as shown in Figure 63. If it does not, edit each entry to match the values displayed in the graphic. Note: If you choose to cut and paste the variable name and expression, be sure to paste the copied text as plain text. Otherwise an error pertaining to the variable syntax may block saving these assignments. The next step will be to add an advanced resource assignment to the access policy. 40

41 Advanced Resource Assign Macro Add an advanced resource assign object to the policy by clicking the + link on the Successful branch of the Extract UPN variable assignment macro. Enter a Name; in this example it is SSL VPN. Select the Network Access tab and choose the F5_AirWatch_Policy_na_res that was created as a part of the initial BIG-IP Access Policy Wizard configuration task previously completed. Figure 66: On-Demand Certificate Authority VPE Macro Figure 67: Network Access Resource Details Select the Webtop tab and select the F5_AirWatch_Policy_webtop that was created in the initial BIG-IP base configuration. Then click the Update button. Figure 68: Webtop Assignment Details 41

42 The resource assignment macro should look as follows: Figure 69: Resource Assignment Details Click the Save button to return to the policy flow diagram. The On-Demand Policy should now look as follows: Figure 70: On-Demand Policy Details SSL Client Certificate Modification When using On-Demand Certificate Authentication, client authentication is enabled with a Client certificate set. This setting needs to be changed to Ignore. Navigate to Local Traffic->Profiles- >SSL->Client. The list of SSL Profiles is displayed; Select the AW_Client_Cert profile. Figure 71: SSL Client Profile Details 42

43 Scroll down to the Client Authentication section and for the Client Certificate select Ignore from the drop-down list. Figure 72: Client Authentication Set to Ignore Client Certificate Click the Update button to complete the change. Virtual Server Access Policy assignment The new Access Policy needs to be applied to the Virtual Server. To do this, navigate to Local Traffic ->Virtual Servers->Virtual Server List. Figure 73: F5 Air Watch HTTPS Virtual Server Details Scroll down to the Access Policy section. Modify the Access Profile to be the new On-Demand profile. Figure 74: Virtual Server Access Profile Details Click the Update button to continue. 43

44 Per-App VPN Profile This profile builds on the Base VPN Profile. The Per-App VPN Profile is available in ios 7 devices. This allows the profile to specify which applications can utilize the VPN connection. These are the managed applications that are pushed to specific devices via the AirWatch Admin Console. There is a distinct difference between a per-app VPN and an on-demand VPN. With a per-app VPN, unique TCP tunnels are established per application and bind the application to the BIG-IP gateway. With an on-demand VPN, when a mobile application queries a particular domain name, a TCP/UDP tunnel is established for all device applications. Create New Per-App ios 7 Profile This section details how to create a new Per-App AirWatch profile for ios devices. Within the AirWatch Console, navigate to Devices->Profiles->List View. Then click the Add button, choose the IOS icon, and enter a Name for this profile. Figure 75: ios Per-App Profile Details 44

45 Next, in the left column, select the Credentials tab and click the Configure button. This will display the VPN Credentials settings that need to be applied. Select a Credential Source appropriate for the deployment. Figure 76: Per-App Credential Profile Details Next, in the left column, select the VPN tab and click the Configure button. This will display the VPN settings that need to be applied. Enter the Connection Type, Name, Server, and for the Account select {EnrollmentUser} from the drop-down list. Figure 77: Per-App VPN Details Click the Save & Publish button to continue. 45

46 BIG-IP Per-App Access Policy Make these modifications within the F5 BIG-IP web configuration utility. The existing policy can be modified or copied. These instructions will result in copying the existing policy, and applying the new policy to the virtual server. Copy the Access Policy To copy the policy to a new name, click on the Copy hyperlink from the F5_AirWatch_Policy policy row. Define a name for the new policy and then click the Copy button. Figure 78: Access Policy Copy Details The Access policy can be edited by clicking the Edit hyperlink. Edit the policy to match the following configuration. Delete the Resource Assignment macro item by clicking on the X link. Figure 79: Per-App Access Policy Details Note: Define the details of Certificate Authentication and Resource Assignment to meet deployment requirements. Refer to the Base VPN Access Profile settings in the Configuring BIG-IP sections above. Virtual Server Access Policy Assignment Apply the new Access Policy to the Virtual Server. Navigate to Local Traffic->Virtual Servers- >Virtual Server List. Figure 80: Virtual Server Details 46

47 Scroll down to the Access Policy section. Edit the Access Policy and select the new On-Demand profile from the drop-down menu. Figure 81: Virtual Server Access Profile Details Click the Update button. Conclusion This concludes the BIG-IP and AirWatch recommended practices guide. The configuration details may vary from the deployed network topology. 47

Introduction to Mobile Access Gateway Installation

Introduction to Mobile Access Gateway Installation Introduction to Mobile Access Gateway Installation This document describes the installation process for the Mobile Access Gateway (MAG), which is an enterprise integration component that provides a secure

More information

Preparing for GO!Enterprise MDM On-Demand Service

Preparing for GO!Enterprise MDM On-Demand Service Preparing for GO!Enterprise MDM On-Demand Service This guide provides information on...... An overview of GO!Enterprise MDM... Preparing your environment for GO!Enterprise MDM On-Demand... Firewall rules

More information

DEPLOYMENT GUIDE Version 1.0. Deploying the BIG-IP Edge Gateway for Layered Security and Acceleration Services

DEPLOYMENT GUIDE Version 1.0. Deploying the BIG-IP Edge Gateway for Layered Security and Acceleration Services DEPLOYMENT GUIDE Version 1.0 Deploying the BIG-IP Edge Gateway for Layered Security and Acceleration Services Table of Contents Table of Contents Using the BIG-IP Edge Gateway for layered security and

More information

Configuration Guide. BES12 Cloud

Configuration Guide. BES12 Cloud Configuration Guide BES12 Cloud Published: 2016-04-08 SWD-20160408113328879 Contents About this guide... 6 Getting started... 7 Configuring BES12 for the first time...7 Administrator permissions you need

More information

BIG-IP Access Policy Manager Tech Note for BIG-IP Edge Client App for ios

BIG-IP Access Policy Manager Tech Note for BIG-IP Edge Client App for ios BIG-IP Access Policy Manager Tech Note for BIG-IP Edge Client App for ios 2 OpenTopic TOC Contents What is BIG-IP Edge Client app for ios?... 3 About supported authentication types... 3 About establishing

More information

Deploying F5 with Microsoft Remote Desktop Services

Deploying F5 with Microsoft Remote Desktop Services Deployment Guide Deploying F5 with IMPORTANT: This guide has been archived. There are two newer deployment guides and downloadable iapp templates available for Remote Desktop Services, one for the Remote

More information

http://docs.trendmicro.com

http://docs.trendmicro.com Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,

More information

Introduction to the EIS Guide

Introduction to the EIS Guide Introduction to the EIS Guide The AirWatch Enterprise Integration Service (EIS) provides organizations the ability to securely integrate with back-end enterprise systems from either the AirWatch SaaS environment

More information

Installing and Configuring vcloud Connector

Installing and Configuring vcloud Connector Installing and Configuring vcloud Connector vcloud Connector 2.7.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new

More information

Configuring the BIG-IP APM as a SAML 2.0 Identity Provider for Microsoft Office 365

Configuring the BIG-IP APM as a SAML 2.0 Identity Provider for Microsoft Office 365 Configuring the BIG-IP APM as a SAML 2.0 Identity Provider for Microsoft Office 365 Welcome to the F5 deployment guide for configuring the BIG-IP Access Policy Manager (APM) to act as a SAML Identity Provider

More information

Administration Guide. BlackBerry Enterprise Service 12. Version 12.0

Administration Guide. BlackBerry Enterprise Service 12. Version 12.0 Administration Guide BlackBerry Enterprise Service 12 Version 12.0 Published: 2015-01-16 SWD-20150116150104141 Contents Introduction... 9 About this guide...10 What is BES12?...11 Key features of BES12...

More information

VMware Identity Manager Administration

VMware Identity Manager Administration VMware Identity Manager Administration VMware Identity Manager 2.4 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new

More information

DESLock+ Basic Setup Guide Version 1.20, rev: June 9th 2014

DESLock+ Basic Setup Guide Version 1.20, rev: June 9th 2014 DESLock+ Basic Setup Guide Version 1.20, rev: June 9th 2014 Contents Overview... 2 System requirements:... 2 Before installing... 3 Download and installation... 3 Configure DESLock+ Enterprise Server...

More information

Deploying F5 to Replace Microsoft TMG or ISA Server

Deploying F5 to Replace Microsoft TMG or ISA Server Deploying F5 to Replace Microsoft TMG or ISA Server Welcome to the F5 deployment guide for configuring the BIG-IP system as a forward and reverse proxy, enabling you to remove or relocate gateway security

More information

Introduction to the Secure Email Gateway (SEG)

Introduction to the Secure Email Gateway (SEG) Introduction to the Secure Email Gateway (SEG) Overview The Secure Email Gateway (SEG) Proxy server is a separate server installed in-line with your existing email server to proxy all email traffic going

More information

http://docs.trendmicro.com

http://docs.trendmicro.com Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,

More information

Mobile Device Management Version 8. Last updated: 17-10-14

Mobile Device Management Version 8. Last updated: 17-10-14 Mobile Device Management Version 8 Last updated: 17-10-14 Copyright 2013, 2X Ltd. http://www.2x.com E mail: info@2x.com Information in this document is subject to change without notice. Companies names

More information

BlackBerry Enterprise Service 10. Version: 10.2. Configuration Guide

BlackBerry Enterprise Service 10. Version: 10.2. Configuration Guide BlackBerry Enterprise Service 10 Version: 10.2 Configuration Guide Published: 2015-02-27 SWD-20150227164548686 Contents 1 Introduction...7 About this guide...8 What is BlackBerry Enterprise Service 10?...9

More information

BlackBerry Enterprise Service 10. Universal Device Service Version: 10.2. Administration Guide

BlackBerry Enterprise Service 10. Universal Device Service Version: 10.2. Administration Guide BlackBerry Enterprise Service 10 Universal Service Version: 10.2 Administration Guide Published: 2015-02-24 SWD-20150223125016631 Contents 1 Introduction...9 About this guide...10 What is BlackBerry

More information

Introduction to Directory Services

Introduction to Directory Services Introduction to Directory Services Overview This document explains how AirWatch integrates with your organization's existing directory service such as Active Directory, Lotus Domino and Novell e-directory

More information

Product Manual. MDM On Premise Installation Version 8.1. Last Updated: 06/07/15

Product Manual. MDM On Premise Installation Version 8.1. Last Updated: 06/07/15 Product Manual MDM On Premise Installation Version 8.1 Last Updated: 06/07/15 Parallels IP Holdings GmbH Vordergasse 59 8200 Schaffhausen Switzerland Tel: + 41 52 632 0411 Fax: + 41 52 672 2010 www.parallels.com

More information

Cloud Services ADM. Agent Deployment Guide

Cloud Services ADM. Agent Deployment Guide Cloud Services ADM Agent Deployment Guide 10/15/2014 CONTENTS System Requirements... 1 Hardware Requirements... 1 Installation... 2 SQL Connection... 4 AD Mgmt Agent... 5 MMC... 7 Service... 8 License

More information

Integrating VMware Horizon Workspace and VMware Horizon View TECHNICAL WHITE PAPER

Integrating VMware Horizon Workspace and VMware Horizon View TECHNICAL WHITE PAPER Integrating VMware Horizon Workspace and VMware Horizon View TECHNICAL WHITE PAPER Table of Contents Introduction.... 3 Requirements.... 3 Horizon Workspace Components.... 3 SAML 2.0 Standard.... 3 Authentication

More information

Configuring the BIG-IP APM as a SAML 2.0 Identity Provider for Microsoft Office 365

Configuring the BIG-IP APM as a SAML 2.0 Identity Provider for Microsoft Office 365 Deployment Guide Configuring the BIG-IP APM as a SAML 2.0 Identity Provider for Microsoft Oice 365 Welcome to the F5 deployment guide for configuring the BIG-IP Access Policy Manager (APM) to act as a

More information

Configuration Guide. BlackBerry Enterprise Service 12. Version 12.0

Configuration Guide. BlackBerry Enterprise Service 12. Version 12.0 Configuration Guide BlackBerry Enterprise Service 12 Version 12.0 Published: 2014-12-19 SWD-20141219132902639 Contents Introduction... 7 About this guide...7 What is BES12?...7 Key features of BES12...

More information

Configuration Guide BES12. Version 12.1

Configuration Guide BES12. Version 12.1 Configuration Guide BES12 Version 12.1 Published: 2015-04-22 SWD-20150422113638568 Contents Introduction... 7 About this guide...7 What is BES12?...7 Key features of BES12... 8 Product documentation...

More information

Deploying the BIG-IP System with Microsoft Lync Server 2010 and 2013 for Site Resiliency

Deploying the BIG-IP System with Microsoft Lync Server 2010 and 2013 for Site Resiliency Deployment Guide Document Version 1.2 What s inside: 2 Configuration example 5 Configuring the BIG-IP LTM using the Lync 2010 iapp 6 Configuring the BIG-IP GTM 11 Creating a Distributed Application for

More information

VMware Identity Manager Administration

VMware Identity Manager Administration VMware Identity Manager Administration VMware Identity Manager 2.6 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new

More information

Configuration Guide BES12. Version 12.3

Configuration Guide BES12. Version 12.3 Configuration Guide BES12 Version 12.3 Published: 2016-01-19 SWD-20160119132230232 Contents About this guide... 7 Getting started... 8 Configuring BES12 for the first time...8 Configuration tasks for managing

More information

How to Configure NetScaler Gateway 10.5 to use with StoreFront 2.6 and XenDesktop 7.6.

How to Configure NetScaler Gateway 10.5 to use with StoreFront 2.6 and XenDesktop 7.6. How to Configure NetScaler Gateway 10.5 to use with StoreFront 2.6 and XenDesktop 7.6. Introduction The purpose of this document is to record the steps required to configure a NetScaler Gateway for use

More information

Deploying F5 with VMware View and Horizon View

Deploying F5 with VMware View and Horizon View Deploying F5 with VMware View and Horizon View Welcome to the F5 and VMware View Deployment Guide. This document contains guidance on configuring the BIG-IP system version 11 and later, including BIG-IP

More information

Using LifeSize systems with Microsoft Office Communications Server 2007. Server Setup

Using LifeSize systems with Microsoft Office Communications Server 2007. Server Setup Using LifeSize systems with Microsoft Office Communications Server 2007 This technical note describes the steps to integrate a LifeSize video communications device with Microsoft Office Communication Server

More information

Kaspersky Lab Mobile Device Management Deployment Guide

Kaspersky Lab Mobile Device Management Deployment Guide Kaspersky Lab Mobile Device Management Deployment Guide Introduction With the release of Kaspersky Security Center 10.0 a new functionality has been implemented which allows centralized management of mobile

More information

Introduction to the AirWatch Browser Guide

Introduction to the AirWatch Browser Guide Introduction to the AirWatch Browser Guide The AirWatch Browser application provides a safe, accessible and manageable alternative to Internet browsing using native device browsers. The AirWatch Browser

More information

DEPLOYMENT GUIDE Version 1.1. Deploying the BIG-IP LTM v10 with Citrix Presentation Server 4.5

DEPLOYMENT GUIDE Version 1.1. Deploying the BIG-IP LTM v10 with Citrix Presentation Server 4.5 DEPLOYMENT GUIDE Version 1.1 Deploying the BIG-IP LTM v10 with Citrix Presentation Server 4.5 Table of Contents Table of Contents Deploying the BIG-IP system v10 with Citrix Presentation Server Prerequisites

More information

Configuration Guide BES12. Version 12.2

Configuration Guide BES12. Version 12.2 Configuration Guide BES12 Version 12.2 Published: 2015-07-07 SWD-20150630131852557 Contents About this guide... 8 Getting started... 9 Administrator permissions you need to configure BES12... 9 Obtaining

More information

Architecture and Data Flow Overview. BlackBerry Enterprise Service 10 721-08877-123 Version: 10.2. Quick Reference

Architecture and Data Flow Overview. BlackBerry Enterprise Service 10 721-08877-123 Version: 10.2. Quick Reference Architecture and Data Flow Overview BlackBerry Enterprise Service 10 721-08877-123 Version: Quick Reference Published: 2013-11-28 SWD-20131128130321045 Contents Key components of BlackBerry Enterprise

More information

Deploying the BIG-IP LTM and APM with Citrix XenApp or XenDesktop

Deploying the BIG-IP LTM and APM with Citrix XenApp or XenDesktop Deployment Guide Deploying the BIG-IP LTM and APM with Citrix XenApp or XenDesktop Welcome to the F5 deployment guide for Citrix VDI applications, including XenApp and XenDesktop with the BIG-IP v11.2

More information

WHITE PAPER Citrix Secure Gateway Startup Guide

WHITE PAPER Citrix Secure Gateway Startup Guide WHITE PAPER Citrix Secure Gateway Startup Guide www.citrix.com Contents Introduction... 2 What you will need... 2 Preparing the environment for Secure Gateway... 2 Installing a CA using Windows Server

More information

Telstra Mobile Device Management (T MDM) Getting Started Guide

Telstra Mobile Device Management (T MDM) Getting Started Guide Telstra Mobile Device Management (T MDM) Getting Started Guide Welcome Thank you for your interest in T MDM and Welcome! In this guide we will take you through the steps to enrolling your first device

More information

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP APM v10.2.1 with Citrix XenApp or XenDesktop

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP APM v10.2.1 with Citrix XenApp or XenDesktop DEPLOYMENT GUIDE Version 1.2 Deploying the BIG-IP APM v10.2.1 with Citrix XenApp or XenDesktop Table of Contents Table of Contents Introducing the F5 BIG-IP APM deployment guide for Citrix XenApp or XenDesktop

More information

F-Secure Messaging Security Gateway. Deployment Guide

F-Secure Messaging Security Gateway. Deployment Guide F-Secure Messaging Security Gateway Deployment Guide TOC F-Secure Messaging Security Gateway Contents Chapter 1: Deploying F-Secure Messaging Security Gateway...3 1.1 The typical product deployment model...4

More information

Certificate Management

Certificate Management Certificate Management This guide provides information on...... Configuring the GO!Enterprise MDM server to use a Microsoft Active Directory Certificate Authority... Using Certificates from Outside Sources...

More information

Implementing PCoIP Proxy as a Security Server/Access Point Alternative

Implementing PCoIP Proxy as a Security Server/Access Point Alternative Implementing PCoIP Proxy as a Security Server/Access Point Alternative Overview VMware s Horizon Security Server and Access Point provides secure access to sessions over an unsecured WAN and/or Internet

More information

HOTPin Integration Guide: DirectAccess

HOTPin Integration Guide: DirectAccess 1 HOTPin Integration Guide: DirectAccess Disclaimer Disclaimer of Warranties and Limitation of Liabilities All information contained in this document is provided 'as is'; Celestix assumes no responsibility

More information

Copyright 2012 Trend Micro Incorporated. All rights reserved.

Copyright 2012 Trend Micro Incorporated. All rights reserved. Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files,

More information

MaaS360 On-Premises Cloud Extender

MaaS360 On-Premises Cloud Extender MaaS360 On-Premises Cloud Extender Installation Guide Copyright 2014 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software

More information

Guide to the LBaaS plugin ver. 1.0.2 for Fuel

Guide to the LBaaS plugin ver. 1.0.2 for Fuel Guide to the LBaaS plugin ver. 1.0.2 for Fuel Load Balancing plugin for Fuel LBaaS (Load Balancing as a Service) is currently an advanced service of Neutron that provides load balancing for Neutron multi

More information

Vodafone Secure Device Manager Administration User Guide

Vodafone Secure Device Manager Administration User Guide Vodafone Secure Device Manager Administration User Guide Vodafone New Zealand Limited. Correct as of September 2014. Do business better Contents Introduction 3 Help 4 How to find help in the Vodafone Secure

More information

Server Software Installation Guide

Server Software Installation Guide Server Software Installation Guide This guide provides information on...... The architecture model for GO!Enterprise MDM system setup... Hardware and supporting software requirements for GO!Enterprise

More information

2X ApplicationServer & LoadBalancer Manual

2X ApplicationServer & LoadBalancer Manual 2X ApplicationServer & LoadBalancer Manual 2X ApplicationServer & LoadBalancer Contents 1 URL: www.2x.com E-mail: info@2x.com Information in this document is subject to change without notice. Companies,

More information

Getting Started with TRITON Mobile Security

Getting Started with TRITON Mobile Security 1 Getting Started with TRITON Mobile Security Welcome to Websense TRITON Mobile Security. Mobile Security is a cloud-based service that brings comprehensive and flexible protection against web threats

More information

Introduction to Google Apps for Business Integration

Introduction to Google Apps for Business Integration Introduction to Google Apps for Business Integration Overview Providing employees with mobile email access can introduce a number of security concerns not addressed by most standard email security infrastructures.

More information

Aventail Connect Client with Smart Tunneling

Aventail Connect Client with Smart Tunneling Aventail Connect Client with Smart Tunneling User s Guide Windows v8.7.0 1996-2006 Aventail Corporation. All rights reserved. Aventail, Aventail Cache Control, Aventail Connect, Aventail Connect Mobile,

More information

Authentication in XenMobile 8.6 with a Focus on Client Certificate Authentication

Authentication in XenMobile 8.6 with a Focus on Client Certificate Authentication Authentication in XenMobile 8.6 with a Focus on Client Certificate Authentication Authentication is about security and user experience and balancing the two goals. This document describes the authentication

More information

Hosted Microsoft Exchange Client Setup & Guide Book

Hosted Microsoft Exchange Client Setup & Guide Book Hosted Microsoft Exchange Client Setup & Guide Book Section 1 Microsoft Outlook Web Access (OWA) access directions Section 2 Windows 10 Mail App setup & configuration Section 3 Windows Mobile Phone ActiveSync

More information

Outlook Profile Setup Guide Exchange 2010 Quick Start and Detailed Instructions

Outlook Profile Setup Guide Exchange 2010 Quick Start and Detailed Instructions HOSTING Administrator Control Panel / Quick Reference Guide Page 1 of 9 Outlook Profile Setup Guide Exchange 2010 Quick Start and Detailed Instructions Exchange 2010 Outlook Profile Setup Page 2 of 9 Exchange

More information

Defender 5.7 - Token Deployment System Quick Start Guide

Defender 5.7 - Token Deployment System Quick Start Guide Defender 5.7 - Token Deployment System Quick Start Guide This guide describes how to install, configure and use the Defender Token Deployment System, based on default settings and how to self register

More information

OnCommand Performance Manager 1.1

OnCommand Performance Manager 1.1 OnCommand Performance Manager 1.1 Installation and Setup Guide For Red Hat Enterprise Linux NetApp, Inc. 495 East Java Drive Sunnyvale, CA 94089 U.S. Telephone: +1 (408) 822-6000 Fax: +1 (408) 822-4501

More information

Getting Started Guide

Getting Started Guide BlackBerry Web Services For Microsoft.NET developers Version: 10.2 Getting Started Guide Published: 2013-12-02 SWD-20131202165812789 Contents 1 Overview: BlackBerry Enterprise Service 10... 5 2 Overview:

More information

Advanced Administration

Advanced Administration BlackBerry Enterprise Service 10 BlackBerry Device Service Version: 10.2 Advanced Administration Guide Published: 2014-09-10 SWD-20140909133530796 Contents 1 Introduction...11 About this guide...12 What

More information

MaaS360 Cloud Extender

MaaS360 Cloud Extender MaaS360 Cloud Extender Installation Guide Copyright 2013 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software described

More information

SonicWALL Mobile Connect. Mobile Connect for OS X 3.0. User Guide

SonicWALL Mobile Connect. Mobile Connect for OS X 3.0. User Guide SonicWALL Mobile Connect Mobile Connect for OS X 3.0 User Guide Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your system. CAUTION: A CAUTION

More information

Advanced Configuration Steps

Advanced Configuration Steps Advanced Configuration Steps After you have downloaded a trial, you can perform the following from the Setup menu in the MaaS360 portal: Configure additional services Configure device enrollment settings

More information

GRAVITYZONE HERE. Deployment Guide VLE Environment

GRAVITYZONE HERE. Deployment Guide VLE Environment GRAVITYZONE HERE Deployment Guide VLE Environment LEGAL NOTICE All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, including

More information

Configuring Global Protect SSL VPN with a user-defined port

Configuring Global Protect SSL VPN with a user-defined port Configuring Global Protect SSL VPN with a user-defined port Version 1.0 PAN-OS 5.0.1 Johan Loos johan@accessdenied.be Global Protect SSL VPN Overview This document gives you an overview on how to configure

More information

Active Directory Management. Agent Deployment Guide

Active Directory Management. Agent Deployment Guide Active Directory Management Agent Deployment Guide Document Revision Date: April 26, 2013 Active Directory Management Deployment Guide i Contents System Requirements... 1 Hardware Requirements... 2 Agent

More information

Sophos Mobile Control Installation guide

Sophos Mobile Control Installation guide Sophos Mobile Control Installation guide Product version: 2.5 Document date: July 2012 Contents 1 Introduction... 3 2 The Sophos Mobile Control server... 4 3 Set up Sophos Mobile Control... 13 4 Running

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown GO!Enterprise MDM for Android, Version 3.x GO!Enterprise MDM for Android with TouchDown 1 Table

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android GO!Enterprise MDM for Android, Version 3.x GO!Enterprise MDM for Android 1 Table of Contents GO!Enterprise MDM

More information

Discovery Guide. Secret Server. Table of Contents

Discovery Guide. Secret Server. Table of Contents Secret Server Discovery Guide Table of Contents Introduction... 3 How Discovery Works... 3 Active Directory / Local Windows Accounts... 3 Unix accounts... 3 VMware ESX accounts... 3 Why use Discovery?...

More information

NEFSIS DEDICATED SERVER

NEFSIS DEDICATED SERVER NEFSIS TRAINING SERIES Nefsis Dedicated Server version 5.2.0.XXX (DRAFT Document) Requirements and Implementation Guide (Rev5-113009) REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER Nefsis

More information

System Administration Training Guide. S100 Installation and Site Management

System Administration Training Guide. S100 Installation and Site Management System Administration Training Guide S100 Installation and Site Management Table of contents System Requirements for Acumatica ERP 4.2... 5 Learning Objects:... 5 Web Browser... 5 Server Software... 5

More information

UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab

UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab Description The Symantec App Center platform continues to expand it s offering with new enhanced support for native agent based device management

More information

Exchange 2010. Outlook Profile/POP/IMAP/SMTP Setup Guide

Exchange 2010. Outlook Profile/POP/IMAP/SMTP Setup Guide Exchange 2010 Outlook Profile/POP/IMAP/SMTP Setup Guide September, 2013 Exchange 2010 Outlook Profile/POP/IMAP/SMTP Setup Guide i Contents Exchange 2010 Outlook Profile Configuration... 1 Outlook Profile

More information

GlobalProtect Configuration for IPsec Client on Apple ios Devices

GlobalProtect Configuration for IPsec Client on Apple ios Devices GlobalProtect Configuration for IPsec Client on Apple ios Devices Tech Note PAN-OS 4.1 Revision D 2013, Palo Alto Networks, Inc. www.paloaltonetworks.com CONTENTS OVERVIEW... 3 PREREQUISITES... 3 GLOBALPROTECT

More information

Active Directory Management. Agent Deployment Guide

Active Directory Management. Agent Deployment Guide Active Directory Management Agent Deployment Guide Document Revision Date: June 12, 2014 Active Directory Management Deployment Guide i Contents System Requirements...1 Hardware Requirements...1 Installation...3

More information

Active Directory integration with CloudByte ElastiStor

Active Directory integration with CloudByte ElastiStor Active Directory integration with CloudByte ElastiStor Prerequisite Change the time and the time zone of the Active Directory Server to the VSM time and time zone. Enabling Active Directory at VSM level

More information

Setting Up Resources in VMware Identity Manager

Setting Up Resources in VMware Identity Manager Setting Up Resources in VMware Identity Manager VMware Identity Manager 2.4 This document supports the version of each product listed and supports all subsequent versions until the document is replaced

More information

Live Maps. for System Center Operations Manager 2007 R2 v6.2.1. Installation Guide

Live Maps. for System Center Operations Manager 2007 R2 v6.2.1. Installation Guide Live Maps for System Center Operations Manager 2007 R2 v6.2.1 Installation Guide CONTENTS Contents... 2 Introduction... 4 About This Guide... 4 Supported Products... 4 Understanding Live Maps... 4 Live

More information

VMware Identity Manager Connector Installation and Configuration

VMware Identity Manager Connector Installation and Configuration VMware Identity Manager Connector Installation and Configuration VMware Identity Manager This document supports the version of each product listed and supports all subsequent versions until the document

More information

Installation and Configuration Guide

Installation and Configuration Guide Installation and Configuration Guide BlackBerry Resource Kit for BlackBerry Enterprise Service 10 Version 10.2 Published: 2015-11-12 SWD-20151112124827386 Contents Overview: BlackBerry Enterprise Service

More information

User Guide. Time Warner Cable Business Class Cloud Solutions Control Panel. Hosted Microsoft Exchange 2007 Hosted Microsoft SharePoint 2007

User Guide. Time Warner Cable Business Class Cloud Solutions Control Panel. Hosted Microsoft Exchange 2007 Hosted Microsoft SharePoint 2007 Chapter Title Time Warner Cable Business Class Cloud Solutions Control Panel User Guide Hosted Microsoft Exchange 2007 Hosted Microsoft SharePoint 2007 Version 1.1 Table of Contents Table of Contents...

More information

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP System v10 with Microsoft IIS 7.0 and 7.5

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP System v10 with Microsoft IIS 7.0 and 7.5 DEPLOYMENT GUIDE Version 1.2 Deploying the BIG-IP System v10 with Microsoft IIS 7.0 and 7.5 Table of Contents Table of Contents Deploying the BIG-IP system v10 with Microsoft IIS Prerequisites and configuration

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios with TouchDown

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios with TouchDown GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios with TouchDown GO!Enterprise MDM for ios Devices, Version 3.x GO!Enterprise MDM for ios with TouchDown 1 Table of

More information

2X Cloud Portal v10.5

2X Cloud Portal v10.5 2X Cloud Portal v10.5 URL: www.2x.com E-mail: info@2x.com Information in this document is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise

More information

Deploying F5 with Microsoft Active Directory Federation Services

Deploying F5 with Microsoft Active Directory Federation Services F5 Deployment Guide Deploying F5 with Microsoft Active Directory Federation Services This F5 deployment guide provides detailed information on how to deploy Microsoft Active Directory Federation Services

More information

The SSL device also supports the 64-bit Internet Explorer with new ActiveX loaders for Assessment, Abolishment, and the Access Client.

The SSL device also supports the 64-bit Internet Explorer with new ActiveX loaders for Assessment, Abolishment, and the Access Client. WatchGuard SSL v3.2 Release Notes Supported Devices SSL 100 and 560 WatchGuard SSL OS Build 355419 Revision Date January 28, 2013 Introduction WatchGuard is pleased to announce the release of WatchGuard

More information

Advanced Configuration Administration Guide

Advanced Configuration Administration Guide Advanced Configuration Administration Guide Active Learning Platform October 2015 Table of Contents Configuring Authentication... 1 PingOne... 1 LMS... 2 Configuring PingOne Authentication... 3 Before

More information

Evoko Room Manager. System Administrator s Guide and Manual

Evoko Room Manager. System Administrator s Guide and Manual Evoko Room Manager System Administrator s Guide and Manual 1 1. Contents 1. Contents... 2 2. Read this first! Introduction to this Guide... 6 3. User Guide... 6 4. System Architecture Overview... 8 ----

More information

http://www.trendmicro.com/download

http://www.trendmicro.com/download Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files,

More information

1 Outlook Web Access. 1.1 Outlook Web Access (OWA) Foundation IT Written approximately Dec 2010

1 Outlook Web Access. 1.1 Outlook Web Access (OWA) Foundation IT Written approximately Dec 2010 Foundation IT Written approximately Dec 2010 1 Outlook Web Access With the new version of Exchange 2010 Outlook Anywhere has been enabled and configured with a secure socket layer (SSL) certificate from

More information

Updated: 7/10/2013 Author: Tim Unten

Updated: 7/10/2013 Author: Tim Unten Office 365 Email Access Updated: 7/10/2013 Author: Tim Unten Contents Outlook 2010 Setup off DOP Network... 1 Outlook 2010 Setup on DOP Network... 2 Outlook 2010 Manual Setup... 2 Android Setup... 3 iphone/ipad

More information

WebSpy Vantage Ultimate 2.2 Web Module Administrators Guide

WebSpy Vantage Ultimate 2.2 Web Module Administrators Guide WebSpy Vantage Ultimate 2.2 Web Module Administrators Guide This document is intended to help you get started using WebSpy Vantage Ultimate and the Web Module. For more detailed information, please see

More information

Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com

Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com Manual Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com Information in this document is subject to change without notice. Companies names and data used in examples herein are fictitious

More information

Office 365 deployment checklists

Office 365 deployment checklists Chapter 128 Office 365 deployment checklists This document provides some checklists to help you make sure that you install and configure your Office 365 deployment correctly and with a minimum of issues.

More information

How to configure MAC authentication on a ProCurve switch

How to configure MAC authentication on a ProCurve switch An HP ProCurve Networking Application Note How to configure MAC authentication on a ProCurve switch Contents 1. Introduction... 3 2. Prerequisites... 3 3. Network diagram... 3 4. Configuring the ProCurve

More information

Configuring a single-tenant BIG-IP Virtual Edition in the Cloud

Configuring a single-tenant BIG-IP Virtual Edition in the Cloud Deployment Guide Document Version: 1.0 What s inside: 2 Configuration example 4 Securing the isession deployment 6 Downloading and importing the new iapp 6 Configuring the BIG- IP systems using the Cloud

More information

VMware vcenter Log Insight Getting Started Guide

VMware vcenter Log Insight Getting Started Guide VMware vcenter Log Insight Getting Started Guide vcenter Log Insight 1.5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by

More information

Sophos Mobile Control Installation guide. Product version: 3.5

Sophos Mobile Control Installation guide. Product version: 3.5 Sophos Mobile Control Installation guide Product version: 3.5 Document date: July 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...10 4 External

More information