Skip to main content

Install the Android Filter app on single-user devices using Intune

Updated

Qoria Filter for Android provides real-time filtering that seamlessly integrates with Smoothwall Cloud Filter, ensuring your policies are consistently applied.

If your school uses shared devices, follow these steps to install Qoria Filter for Android on devices in Shared Device Mode (SDM).

Before you begin

  Important

Android devices have a system limitation that allows only one active VPN connection at a time. If you are deploying other applications that utilise a VPN profile to monitor network traffic (such as Microsoft Defender, third-party firewalls, or other antivirus apps), they will conflict with the Qoria Filter VPN. To prevent a conflict and ensure the filter functions correctly, Qoria Filter must be the only app utilising a VPN profile on the device.

Step 1: Add Qoria Filter for Android

  1. Go to Apps > Android.
  2. Select Add.
  3. In the App Type dropdown, select Managed Google Play App.
  4. Search for and select Qoria Filter. Tip: If you can’t see the app, search for com.qoria.uc.android.edu instead.
  5. In the App pane, select Sync to sync with the Managed Google Play service.
  6. Go to Apps > Android and select the Qoria Filter app for Android from the list.
  7. Go to Properties > Edit.
  8. Select Add group, select the User Group’s checkbox, and then choose Select.
  9. Review the settings before selecting Create.

Step 2: Create a Root Certificate

You must fill in every field to generate the certificate.

  1. In Smoothwall Cloud Filter, go to Admin Panel > Self-Service Certificates.
  2. Select a Country from the dropdown.
  3. Enter your information for each of these fields:
    • State/Province: For example, UK.
    • Locality: For example, Leeds.
    • Organisation: Your organisation’s name.
    • Common Name: Your organisation’s domain name.
  4. (Optional) If you need to change the key size, select a Key size.
  5. Select how many days you want the certificate to be valid for (we recommend rotating certificates every two years).
  6. Select Generate. The Root Certificate automatically downloads to your device.
  7. The SigningCertificate and SigningCertificateKey will appear. Copy both values for the next step.

Step 3: Create the App Configuration Policy

  1. Go to Apps > App configuration policies.
  2. Select Add > Managed Devices.
  3. Add a name, such as Filter Configuration Policy.
  4. For Platform, select Android Enterprise.
  5. For Profile Type, select Fully Managed, Dedicated and Corporate-Owned Work Profile Only.
  6. For Targeted app, select Qoria Filter.
  7. Select Next.
  8. In the Configuration Settings, select the Configuration settings format dropdown and select Use configuration designer. The configuration designer panel will show on the right side.
  9. In the configuration designer panel, select the checkbox next to these Configuration keys, then select string and enter the value for each:
    1. Serial Id - enter the serial number.
    2. User Id:
      • If your devices are domain-joined, select variable as the value type and select the username variable.
      • If your devices that are not domain-joined, set the device to a single user. Select string as the value type and enter the specific username or email address of a valid user synced to Cloud Filter.
    3. Hardware Id:
      • Select string as the value type. Enter an identifier to be used in reporting, such as your device’s serial number.
      • Choose variable as the value type and select ‘Intune Device ID’ from the dropdown menu.
    4. Signing Certificate – enter the SigningCertificate you copied in the previous step.
    5. Signing Certificate Private Key – enter the SigningCertificateKey you copied in the previous step.
    6. If you have a Multi-tenant configuration, select the Tenant ID checkbox and enter the UUID in Smoothwall > Tenant Management as the value.
  10. Select Next.
  11. Select Add groups, then select the checkbox for the User Group.
  12. Select Review + Create, then select Create to add the profile to Intune.

Step 4: Upload the Trusted Certificate

  1. Go to Devices > Android devices > Configuration.
  2. Select Create > New Policy. 
  3. For Platform, select Android Enterprise 
  4. For Profile type, select Trusted certificate.
  5. In the Basics step, add a name, such as Android Filter Certificate, then select Next .
  6. In the Configuration settings step, upload the Root Certificate created in Step 2, then select Next .
  7. In the Assignments step, select Add groups, then select the checkbox for the User Group.
  8. Review the settings before selecting Create.

Step 5: Create an Always-on VPN Policy

  1. Go to Devices > Android devices > Configuration.
  2. Select Create > New Policy.
  3. For Platform, select Android Enterprise.
  4. For Profile type, select Device Restrictions.
  5. In the Basics step, add a name, such as Android Always On VPN Filter.
  6. In the Configuration settings step, select the Connectivity dropdown.
    1. For Always-on VPN (work profile-level), select Enable.
    2. For VPN Client, select Custom.
    3. For Package ID, enter com.qoria.uc.android.edu
    4. For Lockdown Mode, select Enable.
  7. In the Assignments step, select Add groups, then select the checkbox for the User Group.
  8. Review the settings before selecting Create.

Next steps

Check the installation works as expected:

  1. Check that your Web Filter policies apply correctly.
  2. Open the app and confirm it shows This device is being protected.
  3. Use the Diagnostics page to check the last Secret Knock and the user’s Directory Groups or Group Mappings.