Deploy the Smoothwall Android Filter app using Google Workspace

This article applies to organisations with a Cloud setup, and those with a 'Hybrid' setup (both On-Premise Appliance and Cloud).

 

The Smoothwall Filter Android app offers real-time filtering that integrates effortlessly with your Smoothwall Cloud Filter, ensuring your policies are consistently applied. This guide outlines the steps to deploy the Smoothwall Android filter app using Google Workspace.

Before you begin

Step 1: Get access to the Smoothwall Android Filter app

  1. Sign in to the Google Workspace Admin Console.
  2. Go to Apps > Web and Mobile Apps.
  3. Select Add App > Add Private Android App.
  4. The Google Play Store will appear. Select Organization details (person with cog icon) to view your Organisational ID and Organisational Name.
  5. Contact Smoothwall Support and provide your Organisational ID and Organisational Name. We will make the app available to you in the Google Play Store.

Step 2: Add the Smoothwall Android Filter app

  1. Sign in to the Google Workspace Admin Console.
  2. Go to Apps > Web and Mobile Apps.
  3. Select Add App > Add a Private Android App.
  4. Search for and select “Smoothwall Android Filter”.
  5. Select Sync to sync the Smoothwall Android Filter app with the Managed Google Play service.
  6. Once the app has been synced, you will see it in the list of available Android apps.
  7. Select the app to configure its settings.
  8. Under User access, choose which organisational units you want to deploy the app to. By default, the top-level Organisational Unit (OU) is selected (all users). You can configure different settings depending on which OU is selected.

Step 3: Create a Managed Configuration Profile

  1. Sign in to the Google Workspace Admin Console.
  2. Go Apps > Web and Mobile Apps.
  3. Select the Smoothwall Android Filter App you just added.
  4. Select Managed Configurations > Add Managed Configuration. You can configure multiple managed configurations to deploy to different OUs within your Google Workspace.
  5. Enter a meaningful name for your Configuration.
  6. Fill out the appropriate fields:
    1. For Serial Id, add the serial number.
    2. If you have a multi-tenant setup, enter the Tenant Id or leave blank to use the Default Tenant.
    3. For Hardware Id, this is an identifier to be used in reporting. Enter one of two things:
      • the Android Apps Managed Configuration variable “${DEVICE_SERIAL_NUMBER}”, for the profile to automatically define the device’s unique serial number.
      • your own string.
    4. For User Id, enter one of two things:
      • The Android Apps Managed Configuration variable “${USER_EMAIL}”, for the profile to automatically define whoever is authenticated to the device.
      • A username or email address if the device is not domain-joined. For reporting and authentication purposes, the user must be a valid user synced to Smoothwall.
  7. Select Save.

Step 4: Configure the app settings

  1. Sign in to the Google Workspace Admin Console.
  2. Go to Apps > Web and Mobile Apps.
  3. Select the Smoothwall Android Filter App you just added.
  4. Select Settings.
  5. Select which Organisational Unit you want to configure the app settings for. By default, the top-level OU will be selected (all users). You can configure different settings depending on which OU is selected.
  6. Under Access Method you can choose how you want to deploy this app.
  7. Select Force Install.
  8. To prevent users from uninstalling the app, select ON.
  9. To allow users to add widgets to the homescreen, you can select ON.
  10. To use the app as the always-on VPN app, select ON.
  11. Under Managed Configuration, select the Managed Configuration profile you created in Step 3: Create a Managed Configuration Profile.
  12. Select Save.

Step 5: Upload Trusted Certificate

  1. Download the qoria-root-pub.cer file by selecting the link at the bottom of this article.
  2. Sign in to the Google Workspace Admin Console.
  3. Go to Devices > Networks.
  4. Select which Organisational Unit you want to upload the certificate for. By default, the top-level OU will be selected (all users).
  5. Scroll down to Certificates and select Upload Certificate.
  6. Add a name for the Certificate, then select UPLOAD.
  7. Select the qoria-root-pub.cer file.
  8. Under Certificate Authority, select Enabled for Android. If this setting is greyed out, enable Advanced Mobile Management.
  9. Select ADD.

Enable Advanced Mobile Management

  1. In the Google Workspace Admin Console, go to Devices > Mobile and endpoints > Settings > Universal.
  2. Select General.
  3. Select the edit icon next to Mobile Management.
  4. Select Custom and in the drop-down menu next to Android, select Advanced.
  5. Select Save.

Next steps

Check your deployment is working as expected:

  1. Check that your Web Filter policies apply correctly.
  2. Open the app and confirm it says ‘This device is being protected’.
  3. Check the last Secret Knock, or the Directory Groups or Group Mappings the user is a member of using the Diagnostics page.