Installing Cloud Filter for iOS

This article describes how to add iPads into your Smoothwall cloud filter.

Smoothwall's "Smoothwall Browser" app is a filtered browser which will filter, alert and log according to your current filtering configuration. Other apps on your iPads are not filtered, so it is important to remove access to other apps which offer unrestricted browsing. The most obvious of these is the default browser, Safari.

You will need

• iPads at iOS14+
• Your iPads enrolled in a MDM 
• Your Smoothwall cloud filter serial number (UNCL...)
• Cloud filter policies set and working
• Your Smoothwall tenant ID if applicable - this can be found in your on-premise Smoothwall under System/tenants, or in the Admin panel of the Cloud UI. If you don't have a tenant ID that's ok - most folks don't, it's only for larger multi-tenant Smoothwall systems.

Note: It's likely you don't need a tenant ID - this is a Smoothwall tenant ID and nothing to do with office365 or GSuite. If you want to learn about Smoothwall Tenant IDs, read this article.

What to do

Firstly, in your MDM software you will need to disable Safari. This can be done using "Show or Hide Apps".

Next, you need to push the Smoothwall Browser app. It will need a minimum of 2 settings - your serial number and a username. 

The configuration is associated with the app by specifying the App’s Bundle ID in the MDM solution. Some MDM can do this automatically. For others you should explicitly use com.smoothwall.ios.Firefox.

MDM Configuration Fields Naming Convention

Fields whose name starts with "Smoothwall" contain data that is provided to you by Smoothwall. All other fields are for data provided by you or your organisation.

Note - These are the field names as of Smoothwall Browser version 39.3. Previous versions of the browser used different names for most fields that were more ambiguous. Those old names are still supported by the latest version, but it is recommended that once all of your iPads are updated to v39.3 or later that you only use the names shown below. Information on the old names can be found here.

If your MDM does not have its own User Interface for configuring individual fields, you should be able to upload a 'Plist" file containing the settings. Here is an example:

<dict>
<key>SmoothwallSerialNumber</key>
<string>UNCLTESTTESTTEST</string>
<key>SmoothwallTenantID</key>
<string>0040007a-f99d-0000-dbdb-70024c4bb000</string>
<key>UserID</key>
<string>matt@example.org</string>
<key>UniqueDeviceID</key>
<string>ADCD-EFGH-IJKL-MNOP</string>
</dict>

The "UserID" field is used to determine the user shown in the logs and alerts. In order to have the correct value here, don't hard code a string, let your MDM push a variable instead. Eg $EMAIL will push the user's email in JAMF, or {{userprincipalname}} for the UPN in Intune. For information on other variables available from your MDM provider, please consult their own documentation:

• JAMF 
• JAMF School
• Intune
• Lightspeed
• Meraki
• Mosyle

If your iPads are deployed via Apple School Manager as Shared iPads, then you should also read Additional Configuration Options for Shared iPads.

How to test things are working

Open the Smoothwall browser. Navigate to the settings menu, and choose "diagnostics". You should see that the filter is in "Mode 2", this means it has config, and blocklist.

Other Options

You can also set the following options in your MDM to control features:

To control whether other apps are allowed to display web content, please refer to this article.