Deploy the Smoothwall Android Filter app using Google Workspace

The Smoothwall Filter Android app offers real-time filtering that integrates effortlessly with your Smoothwall Cloud Filter, ensuring your policies are consistently applied. This guide outlines the steps to deploy the Smoothwall Android filter app using Google Workspace.

Before you begin

• You must have managed Android devices.
• Your devices must meet the Smoothwall Android app minimum device requirements.

Step 1: Get access to the Smoothwall Android Filter app

1. Sign in to the Google Workspace Admin Console.
2. Go to Apps > Web and Mobile Apps.
3. Select Add App > Add Private Android App.
4. The Google Play Store will appear. Select Organization details (person with cog icon) to view your Organisational ID and Organisational Name.
5. Contact Smoothwall Support and provide your Organisational ID and Organisational Name. We will make the app available to you in the Google Play Store.

Step 2: Add the Smoothwall Android Filter app

1. Sign in to the Google Workspace Admin Console.
2. Go to Apps > Web and Mobile Apps.
3. Select Add App > Add a Private Android App.
4. Search for and select “Smoothwall Android Filter”.
5. If you can’t see the app, search for ‘com.qoria.fc.android.edu’ instead.
6. Select Sync to sync the Smoothwall Android Filter app with the Managed Google Play service.
7. Once the app has been synced, you will see it in the list of available Android apps.
8. Select the app to configure its settings.
9. Under User access, choose which organisational units you want to deploy the app to. By default, the top-level Organisational Unit (OU) is selected (all users). You can configure different settings depending on which OU is selected.

Step 3: Create a Managed Configuration Profile

1. Sign in to the Google Workspace Admin Console.
2. Go Apps > Web and Mobile Apps.
3. Select the Smoothwall Android Filter App you just added.
4. Select Managed Configurations > Add Managed Configuration. You can configure multiple managed configurations to deploy to different OUs within your Google Workspace.
5. Enter a meaningful name for your Configuration.
6. Fill out the appropriate fields:
   
   1. For Serial Id, select Configure and add the serial number.
   2. For Tenant Id:
      
      • If you have a multi-tenant setup, select Configure to enter the Tenant Id.
      • If you don’t have a multi-tenant setup or want to use the Default Tenant, skip this step.
   3. The Hardware Id is an identifier to be used in reporting. Select Configure and Enter one of two things:
      
      • The Android Apps Managed Configuration variable “${DEVICE_SERIAL_NUMBER}”. The profile will automatically define the device’s unique serial number.
      • Your own string, such as your Serial number.
   4. For User Id, select Configure and enter one of two things:
      
      • If the device is not domain-joined, use a specific username or email address of a valid user synced to Smoothwall.
      • If the device is domain-joined, you can use a specific email or username or the Android Apps Managed Configuration variable “${USER_EMAIL}”. This means the profile will automatically define whoever is authenticated to the device.
7. Select Save.

Image 1: Example setup using Configuration variables.

Step 4: Configure the app settings

1. Sign in to the Google Workspace Admin Console.
2. Go to Apps > Web and Mobile Apps.
3. Select the Smoothwall Android Filter App you just added.
4. Select Settings.
5. Select which Organisational Unit you want to configure the app settings for. By default, the top-level OU will be selected (all users). You can configure different settings depending on which OU is selected.
6. Under Access Method you can choose how you want to deploy this app.
7. Select Force Install.
8. To prevent users from uninstalling the app, select ON.
9. To allow users to add widgets to the homescreen, you can select ON.
10. To use the app as the always-on VPN app, select ON.
11. Under Managed Configuration, select the Managed Configuration profile you created in Step 3: Create a Managed Configuration Profile.
12. Select Save.

Step 5: Upload Trusted Certificate

1. Download the qoria-root-pub.cer file by selecting the link at the bottom of this article.
2. Sign in to the Google Workspace Admin Console.
3. Go to Devices > Networks.
4. Select which Organisational Unit you want to upload the certificate for. By default, the top-level OU will be selected (all users).
5. Scroll down to Certificates and select Upload Certificate.
6. Add a name for the Certificate, then select UPLOAD.
7. Select the qoria-root-pub.cer file.
8. Under Certificate Authority, select Enabled for Android. If this setting is greyed out, enable Advanced Mobile Management.
9. Select ADD.

Enable Advanced Mobile Management

1. In the Google Workspace Admin Console, go to Devices > Mobile and endpoints > Settings > Universal.
2. Select General.
3. Select the edit icon next to Mobile Management.
4. Select Custom and in the drop-down menu next to Android, select Advanced.
5. Select Save.

Next steps

Check your deployment is working as expected:

1. Check that your Web Filter policies apply correctly.
2. Open the app and confirm it says ‘This device is being protected’.
3. Check the last Secret Knock, or the Directory Groups or Group Mappings the user is a member of using the Diagnostics page.