Configuring a global HTTP proxy on iOS MDM devices

To protect the user's internet traffic, configure the connection of the iOS MDM device to the internet via a proxy server.

Automatic connection to the internet via a proxy server is available for controlled devices only.

To configure global HTTP proxy settings on the user's iOS MDM device:

1. In the console tree, in the Managed devices folder, select the administration group to which the iOS MDM devices belong.
2. In the workspace of the group, select the Policies tab.
3. Open the policy properties window by double-clicking.
4. In the policy Properties window, select the Global HTTP Proxy section.
5. In the Global HTTP proxy settings section, select the Apply settings on device check box.
6. Select the type of global HTTP proxy configuration.

   By default, the manual type of global HTTP proxy configuration is selected, and the user is prohibited from connecting to captive networks without connecting to a proxy server. Captive networks are wireless networks that require preliminary authentication on the mobile device without connecting to the proxy server.

   • To specify the proxy server connection settings manually:
     1. In the Proxy settings type drop-down list, select Manual.
     2. In the Proxy server address and port field, enter the name of a host or the IP address of a proxy server and the number of the proxy server port.
     3. In the User name field, set the user account name for proxy server authorization. You can use macros from the Macros available drop-down list.
     4. In the Password field, set the user account password for proxy server authorization.
     5. To allow the user to access captive networks, select the Allow access to captive networks without connecting to proxy check box.
   • To configure the proxy server connection settings using a predefined PAC (Proxy Auto Configuration) file:
     1. In the Proxy settings type drop-down list, select Automatic.
     2. In the URL of PAC file field, enter the web address of the PAC file (for example: http://www.example.com/filename.pac).
     3. To allow the user to connect the mobile device to a wireless network without using a proxy server when the PAC file cannot be accessed, select the Allow direct connection if PAC file cannot be accessed check box.
     4. To allow the user to access captive networks, select the Allow access to captive networks without connecting to proxy check box.
7. Click the Apply button to save the changes you have made.

As a result, once the policy is applied, the mobile device user will connect to the internet via a proxy server.