Deploy the Smoothwall Android Filter app using Intune

This article applies to organisations with a Cloud setup, and those with a 'Hybrid' setup (both On-Premise Appliance and Cloud).

 

The Smoothwall Filter Android app offers real-time filtering that integrates effortlessly with your Smoothwall Cloud Filter, ensuring your policies are consistently applied. This guide outlines the steps to deploy the Smoothwall Android Filter app using Intune.

Before you begin

Step 1: Get access to the Smoothwall Android Filter app

  1. Sign in to the Microsoft Intune Admin Center.
  2. Go to Home > Apps > Android.
  3. Select Add.
  4. In the App type dropdown menu, select Managed Google Play App.
  5. Click Select.
  6. In the Managed Google Play page, select Organization details (person with cog icon) to view your Organisational ID and Organisational Name.
  7. Contact Smoothwall Support and provide your Organisational ID and Organisational Name. We will make the app available to you in Intune.

Step 2: Add the Smoothwall Android Filter app

  1. Sign in to the Microsoft Intune Admin Center.
  2. Go to Apps > Android. This is where it lists all available Android apps.
  3. Select Add.
  4. Under App Type, select Managed Google Play App using the dropdown.
  5. Search for Smoothwall Filter, select the app, then choose Select.
  6. Select Sync on the App pane to sync with the Managed Google Play service.
  7. Go to Apps > Android, select the Smoothwall Filter app from the list.
  8. Go to Properties > Edit.
  9. Select + Add group, find your group, select the group’s checkbox, then choose Select.
  10. Select Review + save.
  11. Select Save.

Step 3: Create App Configuration Profile

  1. Sign in to the Microsoft Intune Admin Center.
  2. Go to Apps > App configuration policies.
  3. Select + Add > Managed Devices.

Add basic details

In the Basics step:

  1. Add a name, such as Smoothwall Filter Configuration Profile.
  2. Add a Description (optional).
  3. For Platform, select Android Enterprise.
  4. For Profile Type, select Fully Managed, Dedicated and Corporate-Owned Work Profile Only.
  5. For Targeted app, select the Smoothwall Filter app.
  6. Select Next.

Configure your settings

In the Settings step:

  1. For Configuration settings format, select Use configuration designer.
  2. Select + Add.
  3. Select the checkboxes for the Serial id, Tenant Id, Hardware Id and User Id, then select OK.
  4. For User Id, select variable and username.
  5. For Hardware Id, select variable and IMEI.
  6. If you have a multi-tenant setup, select string and either enter the Tenant ID or leave the field blank to use the Default Tenant.
  7. For Serial Id, select string and add the serial number.
  8. Select Next.

Assign the app to groups

In the Assignments step:

  1. Select Add groups.
  2. Find your group, select the checkbox, then choose Select.
  3. Select Next.

Review and create

In the Review + Create step:

  1. Review the settings and ensure they are correct.
  2. Select Create.

Step 4: Create Device Configuration Policy

Create Always-on VPN Policy

  1. Sign in to the Microsoft Intune Admin Center.
  2. Go to Devices > Configuration.
  3. Select + Create > New Policy.
  4. For Platform, select Android Enterprise.
  5. For Profile type, select Device Restrictions.

Add a name

In the Basics step:

  1. Add a name for example, Android Always On VPN Smoothwall Filter.
  2. Add a Description (optional).
  3. Select Next.

Configure VPN settings

In the Configuration Settings step:

  1. Select the Connectivity dropdown.
  2. For Always-on VPN (work profile-level), select Enable.
  3. For VPN Client, select Custom.
  4. For Package ID, enter com.qoria.fc.android.edu
  5. Select Next.

Assign the policy to groups

In the Assignments step:

  1. Select Add groups.
  2. Find your group, select the checkbox, then choose Select.
  3. Select Next.

Review and create

In the Review + Create step:

  1. Review the settings and ensure they are correct
  2. Select Create.

Upload Trusted Certificate

  1. Sign in to the Microsoft Intune Admin Center.
  2. Go to Devices > Configuration.
  3. Select + Create > New Policy.
  4. For Platform, select Android Enterprise.
  5. For Profile type, select Trusted certificate.

Add a name

In the Basics step:

  1. Add a name, for example, Android Filter Certificate.
  2. Add a Description (optional).
  3. Select Next.

Configuration certificate settings

In the Configuration Settings step:

  1. Download the qoria-root-pub.cer file by selecting the link at the bottom of this article.
  2. Return to your Microsoft Intune Admin Center.
  3. For Certificate file, select the qoria-root-pub.cer file.
  4. Select Next.

Assign the policy to groups

In the Assignments step:

  1. Select Add groups.
  2. Find your group, select the checkbox then choose select.
  3. Select Next.

Review and create

In the Review + Create step:

  1. Review the settings and ensure they are correct.
  2. Select Create.

Next steps

Check your deployment is working as expected:

  1. Check that your Web Filter policies apply correctly.
  2. Open the app and confirm it says ‘This device is being protected’.
  3. Check the last Secret Knock, or the Directory Groups or Group Mappings the user is a member of using the Diagnostics page.